last executing test programs: 3m10.863520229s ago: executing program 0 (id=1572): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 3m10.646531181s ago: executing program 0 (id=1576): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xcd, 0x0, 0x0) 3m10.485403865s ago: executing program 0 (id=1580): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffe}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffc01}}], 0x18}, 0xa854) 3m10.258411681s ago: executing program 0 (id=1584): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd2d, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@remote, 0x4e20, 0xb, 0xf7ff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1000}, {0x1, 0x6, 0x80}, 0xfffffffc}, [@tmpl={0x104, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x1, 0x3c}, 0x0, @in6=@empty, 0x3502, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ffc}, {{@in6=@remote, 0x0, 0x3c}, 0xa, @in6=@private1, 0xfffffffd, 0x4, 0x3, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x0, 0x4, 0x8}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x33}, 0xa, @in6=@local, 0x0, 0x4, 0x2, 0x0, 0x10000}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) 3m10.04135639s ago: executing program 0 (id=1588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) 3m9.860680144s ago: executing program 0 (id=1592): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd2d, 0x25dfdbfe, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040030) 2m54.600740145s ago: executing program 32 (id=1592): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd2d, 0x25dfdbfe, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040030) 2m26.277980207s ago: executing program 5 (id=2234): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff80000000000000c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 2m25.787043279s ago: executing program 5 (id=2238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 2m25.259915124s ago: executing program 5 (id=2242): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0405626, &(0x7f0000000080)={0x4, 0xfff, 0x2}) 2m25.13596049s ago: executing program 5 (id=2245): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000402000010000000000000003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcdcdbd9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000725c8bbb58794c643b000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) 2m24.951486645s ago: executing program 5 (id=2248): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2m24.657391285s ago: executing program 5 (id=2252): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m9.492614799s ago: executing program 33 (id=2252): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m25.539829296s ago: executing program 2 (id=3112): r0 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x400000002000) 1m24.545378037s ago: executing program 2 (id=3122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x5, 0x4) 1m24.404934267s ago: executing program 2 (id=3125): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f8ffffff00000000000000008500000036000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m23.719115734s ago: executing program 2 (id=3133): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) 1m23.458965447s ago: executing program 2 (id=3138): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000000c0)={{{0x1, 0x1}}, 0x56, 0x6, 0x0}) 1m23.185656401s ago: executing program 2 (id=3144): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m17.799895775s ago: executing program 1 (id=3232): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0xe7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) syz_usb_connect$uac2(0x2, 0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000200c201810400001020301090288000301018008080b0001010c200609040000000101200009240103000428000408240a05004000020c240302070305030503030014240603"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 1m16.21543458s ago: executing program 1 (id=3256): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, 0x0, 0x0) 1m15.870449459s ago: executing program 1 (id=3259): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@newae={0x5c, 0x1e, 0xd11, 0x70bd25, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x104d6, 0x8, 0x6c}, @in=@broadcast, 0x8}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x70bd2a, 0x70bd28, 0x70bd27, 0x10000}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x820}, 0x8000) 1m15.658980354s ago: executing program 1 (id=3264): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}}]}) 1m15.442325743s ago: executing program 1 (id=3268): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x30000008, 0x8, 0x2}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x224}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m15.332198829s ago: executing program 1 (id=3270): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x27, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x14000040}, 0x8800) 1m8.065897796s ago: executing program 34 (id=3144): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m0.256115164s ago: executing program 35 (id=3270): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x27, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x14000040}, 0x8800) 4.028795654s ago: executing program 6 (id=4294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300840011000000000003de0e116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.58388534s ago: executing program 6 (id=4302): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, &(0x7f0000000640)={[&(0x7f0000000580)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xe1\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5\x00\x00\x00\x00\x00\x00\x00\x00\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 3.284013509s ago: executing program 6 (id=4307): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x94, 0xfd}}, 0x18}}, 0x0) 3.045454545s ago: executing program 6 (id=4312): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f00000000c0)="00012c615bc20000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.65864973s ago: executing program 8 (id=4317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) 2.039677715s ago: executing program 8 (id=4323): openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r0, 0x126, 0x0) 1.941323951s ago: executing program 8 (id=4325): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b"], 0x13c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040880) socket$key(0xf, 0x3, 0x2) 1.70935546s ago: executing program 8 (id=4330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004bc0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x34}}, 0x4010) 1.564702846s ago: executing program 4 (id=4332): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x9, 0xa, 0x2, 0x0, 0x6}) timer_create(0x3, 0x0, 0x0) 1.552739368s ago: executing program 7 (id=4333): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0}, 0x18) prctl$PR_SET_DUMPABLE(0x4, 0x3) 1.49765103s ago: executing program 7 (id=4334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 1.428508643s ago: executing program 8 (id=4335): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x600400, 0x0) readahead(r0, 0x1, 0x80) 1.368301367s ago: executing program 4 (id=4336): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000001, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 1.337814805s ago: executing program 8 (id=4338): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000840)={0x1c, &(0x7f00000006c0)={0x20, 0x15}, 0x0, 0x0}) 1.178955266s ago: executing program 4 (id=4340): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e21, @loopback}, @ib={0x1b, 0xffff, 0x3, {"00000000000000000000000000f800"}, 0x80000000, 0xfffffffffffffffc, 0x8e}}}, 0x118) 1.124454825s ago: executing program 7 (id=4341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 1.024171737s ago: executing program 3 (id=4342): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map, r1, 0x2e, 0x0, 0x0, @void, @value=r1}, 0x20) 995.642741ms ago: executing program 4 (id=4343): r0 = getpid() ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) 914.89273ms ago: executing program 3 (id=4344): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x0, 0x1, 0x800, 0x0, 0x40}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 913.254815ms ago: executing program 6 (id=4345): timer_create(0x7, 0x0, &(0x7f0000000080)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) timer_delete(r0) 896.119866ms ago: executing program 7 (id=4346): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) setuid(0xee00) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) 716.48997ms ago: executing program 4 (id=4347): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, &(0x7f00000004c0)) 631.25312ms ago: executing program 3 (id=4348): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x0, 0x1a, 0xda, 0xa8, 0x8}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 626.144527ms ago: executing program 7 (id=4349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 577.79765ms ago: executing program 6 (id=4350): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15) 403.208341ms ago: executing program 3 (id=4351): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_SEND_ZC={0x2f, 0xa, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x7b, 0x11}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000340)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000018c0)=@any_dev={0x3, 0x317, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x43}}}, &(0x7f0000001980)) 352.347589ms ago: executing program 4 (id=4352): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000200)=[{0x8, 0x1000, 0x0, 0x0}, {0x2, 0x4000, 0x0, 0x0}], 0x2}) 256.341468ms ago: executing program 7 (id=4353): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) 228.212257ms ago: executing program 3 (id=4354): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prlimit64(0x0, 0x8, &(0x7f0000000240)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) mlockall(0x7) 0s ago: executing program 3 (id=4355): r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) kernel console output (not intermixed with test programs): all slaves [ 290.696201][ T123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.696225][ T123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.998441][T10887] tmpfs: Bad value for 'mpol' [ 291.720268][T10910] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 291.757953][T10910] bond1 (unregistering): Released all slaves [ 291.829951][ T37] audit: type=1326 audit(1783982231.317:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.3.2428" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb08ebde59 code=0x7ffc0000 [ 291.830013][ T37] audit: type=1326 audit(1783982231.327:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.3.2428" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb08ebde59 code=0x7ffc0000 [ 292.480994][T10940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2437'. [ 292.853374][T10950] netlink: 'syz.3.2442': attribute type 11 has an invalid length. [ 293.557890][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 293.557917][ T37] audit: type=1326 audit(1783982233.047:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10957 comm="syz.1.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 293.593078][ T37] audit: type=1326 audit(1783982233.047:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10957 comm="syz.1.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 293.691412][ T37] audit: type=1326 audit(1783982233.187:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10957 comm="syz.1.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 293.691470][ T37] audit: type=1326 audit(1783982233.187:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10957 comm="syz.1.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 293.692626][ T37] audit: type=1326 audit(1783982233.187:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10957 comm="syz.1.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 293.692677][ T37] audit: type=1326 audit(1783982233.187:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10957 comm="syz.1.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 293.693954][ T37] audit: type=1326 audit(1783982233.187:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10957 comm="syz.1.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 293.695461][ T37] audit: type=1326 audit(1783982233.187:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10957 comm="syz.1.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 293.695514][ T37] audit: type=1326 audit(1783982233.187:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10957 comm="syz.1.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 294.064324][T10956] bridge0: port 3(team0) entered disabled state [ 294.065634][T10956] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.069721][T10956] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.599469][T10956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.666706][T10956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.764699][T10956] vlan0: left promiscuous mode [ 294.765712][T10956] ipvlan0: left allmulticast mode [ 294.765729][T10956] veth0_vlan: left allmulticast mode [ 294.783681][ T31] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 294.925569][T10956] bridge1: left promiscuous mode [ 294.956665][ T31] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 294.956697][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.956720][ T31] usb 3-1: Product: syz [ 294.956735][ T31] usb 3-1: Manufacturer: syz [ 294.956750][ T31] usb 3-1: SerialNumber: syz [ 294.996842][ T31] usb 3-1: config 0 descriptor?? [ 295.016648][T10956] bond3: left promiscuous mode [ 295.026852][ T31] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 295.114252][T10956] bridge3: left promiscuous mode [ 295.114281][T10956] bridge3: left allmulticast mode [ 295.424756][ T31] gspca_m5602: Failed to find a sensor [ 295.424772][ T31] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 295.461459][ T31] usb 3-1: USB disconnect, device number 15 [ 296.279917][ T5711] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 296.362766][T11003] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 296.455764][ T5711] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 296.455796][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.497010][ T5711] usb 5-1: config 0 descriptor?? [ 296.514784][ T5711] cp210x 5-1:0.0: cp210x converter detected [ 296.550672][T10996] bond1: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 296.550703][T10996] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 296.551024][T10996] bond1: entered allmulticast mode [ 296.937291][ T5711] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 296.937810][ T5711] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 296.937836][ T5711] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 297.043974][ T5711] usb 5-1: cp210x converter now attached to ttyUSB0 [ 297.057356][ T5711] usb 5-1: USB disconnect, device number 15 [ 297.081596][ T5711] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 297.083966][ T5711] cp210x 5-1:0.0: device disconnected [ 297.167150][ T5602] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 297.189729][ T5602] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 297.199519][ T5602] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 297.218867][ T5602] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 297.219641][ T5602] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 297.541034][T11025] Invalid source name [ 297.589903][ T5330] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 297.749663][ T5330] usb 2-1: config 2 has an invalid interface number: 70 but max is 1 [ 297.749694][ T5330] usb 2-1: config 2 has an invalid interface number: 8 but max is 1 [ 297.749716][ T5330] usb 2-1: config 2 has no interface number 0 [ 297.749954][ T5330] usb 2-1: config 2 has no interface number 1 [ 297.750022][ T5330] usb 2-1: config 2 interface 8 altsetting 2 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 297.750052][ T5330] usb 2-1: config 2 interface 70 has no altsetting 0 [ 297.750072][ T5330] usb 2-1: config 2 interface 8 has no altsetting 0 [ 297.813673][ T5330] usb 2-1: New USB device found, idVendor=0411, idProduct=00d8, bcdDevice=80.a5 [ 297.813696][ T5330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.813713][ T5330] usb 2-1: Product: syz [ 297.813723][ T5330] usb 2-1: Manufacturer: syz [ 297.813734][ T5330] usb 2-1: SerialNumber: syz [ 298.198646][ T5330] usb 2-1: USB disconnect, device number 10 [ 298.465774][T11047] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2485'. [ 299.330260][ T5602] Bluetooth: hci6: command tx timeout [ 300.280581][T11015] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.281736][T11015] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.281939][T11015] bridge_slave_0: entered allmulticast mode [ 300.284741][T11015] bridge_slave_0: entered promiscuous mode [ 300.298157][T11015] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.298471][T11015] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.298958][T11015] bridge_slave_1: entered allmulticast mode [ 300.336258][T11015] bridge_slave_1: entered promiscuous mode [ 300.583585][T11015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.596066][T11015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.836381][ T37] audit: type=1326 audit(1783982240.327:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11106 comm="syz.4.2511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 300.836530][ T37] audit: type=1326 audit(1783982240.327:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11106 comm="syz.4.2511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 300.895074][ T37] audit: type=1326 audit(1783982240.387:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11106 comm="syz.4.2511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 300.895129][ T37] audit: type=1326 audit(1783982240.387:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11106 comm="syz.4.2511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 300.895173][ T37] audit: type=1326 audit(1783982240.387:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11106 comm="syz.4.2511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 300.902337][T11109] netlink: 392 bytes leftover after parsing attributes in process `syz.3.2512'. [ 300.952910][ T37] audit: type=1326 audit(1783982240.447:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11106 comm="syz.4.2511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f892c78e68e code=0x7ffc0000 [ 300.956402][ T37] audit: type=1326 audit(1783982240.447:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11106 comm="syz.4.2511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f892c78e68e code=0x7ffc0000 [ 300.959943][ T37] audit: type=1326 audit(1783982240.447:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11106 comm="syz.4.2511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 300.964252][ T37] audit: type=1326 audit(1783982240.457:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11106 comm="syz.4.2511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 300.966582][ T37] audit: type=1326 audit(1783982240.457:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11106 comm="syz.4.2511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 301.175291][T11015] team0: Port device team_slave_0 added [ 301.201297][T11015] team0: Port device team_slave_1 added [ 301.221716][T11111] ubi8: attaching mtd0 [ 301.221746][T11111] ubi8 error: ubi_attach_mtd_dev: bad VID header (56) or data offsets (120) [ 301.411218][ T5602] Bluetooth: hci6: command tx timeout [ 301.510093][T11119] netlink: 'syz.3.2516': attribute type 9 has an invalid length. [ 301.555629][T11015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.555647][T11015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.555678][T11015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.607625][T11015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.607638][T11015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.607659][T11015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.672617][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2519'. [ 301.886251][T11123] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 301.922339][T11123] bond2 (unregistering): Released all slaves [ 301.990768][T11134] netlink: 'syz.1.2525': attribute type 11 has an invalid length. [ 301.990792][T11134] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2525'. [ 302.365832][T11015] hsr_slave_0: entered promiscuous mode [ 302.374257][T11015] hsr_slave_1: entered promiscuous mode [ 302.375290][T11015] debugfs: 'hsr0' already exists in 'hsr' [ 302.375374][T11015] Cannot create hsr debugfs directory [ 302.471666][T11147] netlink: 'syz.2.2530': attribute type 2 has an invalid length. [ 303.409241][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2544'. [ 303.489993][ T5602] Bluetooth: hci6: command tx timeout [ 303.491554][T11179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2545'. [ 304.840650][T11015] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 304.929194][T11015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.949017][T11015] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 305.127679][T11015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.138183][T11015] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 305.251919][T11015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.254649][T11015] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 305.400333][T11015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.570081][ T5602] Bluetooth: hci6: command tx timeout [ 306.163972][T11015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.321488][T11015] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.379151][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.379286][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.428585][ T1527] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.428761][ T1527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.982380][T11288] ip6gre2: entered promiscuous mode [ 306.982411][T11288] ip6gre2: entered allmulticast mode [ 307.049135][T11293] netlink: 'syz.3.2598': attribute type 8 has an invalid length. [ 307.049159][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2598'. [ 307.526211][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2603'. [ 307.779992][ T5713] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 307.951952][ T5713] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 307.951984][ T5713] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 307.952006][ T5713] usb 4-1: config 0 has no interface number 0 [ 307.952052][ T5713] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.952080][ T5713] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 307.952107][ T5713] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 307.952152][ T5713] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 307.952176][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.957313][ T5713] usb 4-1: config 0 descriptor?? [ 307.962703][T11310] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 308.207848][T11327] tmpfs: Bad value for 'mpol' [ 308.419447][ T5713] usb 4-1: USB disconnect, device number 16 [ 308.837884][T11015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.335669][T11360] netlink: 'syz.1.2625': attribute type 1 has an invalid length. [ 310.094874][T11015] veth0_vlan: entered promiscuous mode [ 310.170471][T11015] veth1_vlan: entered promiscuous mode [ 310.299999][T11015] veth0_macvtap: entered promiscuous mode [ 310.398681][T11015] veth1_macvtap: entered promiscuous mode [ 310.544362][T11015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.589980][ T5610] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 310.594860][T11015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.689721][ T828] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.764064][ T5610] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.764100][ T5610] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 310.764123][ T5610] usb 2-1: config 0 has no interface number 1 [ 310.764182][ T5610] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 310.764210][ T5610] usb 2-1: config 0 interface 0 has no altsetting 1 [ 310.764246][ T5610] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=56.d6 [ 310.764270][ T5610] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.832570][T11403] wg1: entered promiscuous mode [ 310.832595][T11403] wg1: entered allmulticast mode [ 310.849888][ T1504] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.884097][ T1504] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.893308][ T1504] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.937076][ T5610] usb 2-1: config 0 descriptor?? [ 311.215330][ T5330] usb 2-1: USB disconnect, device number 11 [ 311.583741][T11425] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2656'. [ 312.122698][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.122721][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.154737][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2661'. [ 312.376426][T11435] XFS (nbd2): SB validate failed with error -5. [ 312.401462][T11438] veth3: entered promiscuous mode [ 312.401490][T11438] veth3: entered allmulticast mode [ 312.526478][ T1527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.526501][ T1527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.766639][T11455] sit1: entered allmulticast mode [ 313.411569][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2678'. [ 313.605615][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2680'. [ 314.046469][T11494] openvswitch: netlink: Duplicate key (type 6). [ 314.968879][T11525] wg1: entered promiscuous mode [ 314.968907][T11525] wg1: entered allmulticast mode [ 316.261847][T11573] sctp: [Deprecated]: syz.4.2724 (pid 11573) Use of int in maxseg socket option. [ 316.261847][T11573] Use struct sctp_assoc_value instead [ 316.288793][T11574] tmpfs: Bad value for 'size' [ 317.241449][T11608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2742'. [ 317.897680][T11621] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 318.364379][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2761'. [ 318.623040][T11659] xfrm0: entered promiscuous mode [ 318.623067][T11659] xfrm0: entered allmulticast mode [ 318.656498][T11658] netlink: 'syz.2.2767': attribute type 3 has an invalid length. [ 318.656520][T11658] netlink: 'syz.2.2767': attribute type 1 has an invalid length. [ 318.656535][T11658] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2767'. [ 318.656575][T11658] NCSI netlink: No device for ifindex 0 [ 319.543667][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 319.543688][ T37] audit: type=1326 audit(1783982259.037:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11693 comm="syz.6.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88b06de59 code=0x7ffc0000 [ 319.543741][ T37] audit: type=1326 audit(1783982259.037:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11693 comm="syz.6.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88b06de59 code=0x7ffc0000 [ 319.550692][ T37] audit: type=1326 audit(1783982259.037:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11693 comm="syz.6.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88b06de59 code=0x7ffc0000 [ 319.555159][ T37] audit: type=1326 audit(1783982259.047:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11693 comm="syz.6.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88b06de59 code=0x7ffc0000 [ 319.555341][ T37] audit: type=1326 audit(1783982259.047:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11693 comm="syz.6.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fe88b06de59 code=0x7ffc0000 [ 319.556308][ T37] audit: type=1326 audit(1783982259.047:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11693 comm="syz.6.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88b06de59 code=0x7ffc0000 [ 319.556450][ T37] audit: type=1326 audit(1783982259.047:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11693 comm="syz.6.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88b06de59 code=0x7ffc0000 [ 319.691926][ T37] audit: type=1326 audit(1783982259.047:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11693 comm="syz.6.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe88b06de59 code=0x7ffc0000 [ 319.692091][ T37] audit: type=1326 audit(1783982259.057:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11693 comm="syz.6.2785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe88b06de59 code=0x7ffc0000 [ 319.845758][T11699] netlink: 'syz.3.2787': attribute type 30 has an invalid length. [ 320.019083][T11699] bond8: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 320.093336][T11699] bond8 (unregistering): Released all slaves [ 320.548997][T11724] netlink: 'syz.2.2799': attribute type 1 has an invalid length. [ 320.549021][T11724] netlink: 'syz.2.2799': attribute type 3 has an invalid length. [ 320.549036][T11724] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2799'. [ 320.739903][ T31] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 320.795847][T11734] netlink: 'syz.1.2803': attribute type 2 has an invalid length. [ 320.896708][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 320.897668][ T31] usb 5-1: not running at top speed; connect to a high speed hub [ 320.898949][ T31] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 207, changing to 4 [ 320.898999][ T31] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 79, changing to 4 [ 320.945077][ T31] usb 5-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 320.945109][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.945131][ T31] usb 5-1: Product: syz [ 320.945147][ T31] usb 5-1: Manufacturer: syz [ 320.945162][ T31] usb 5-1: SerialNumber: syz [ 321.155567][T11739] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 321.268604][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2809'. [ 321.445507][ T31] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 321.485399][ T31] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 321.625917][ T31] usb 5-1: USB disconnect, device number 16 [ 322.384529][T11777] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2825'. [ 322.470691][ T5602] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 322.804447][ T37] audit: type=1326 audit(1783982262.297:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11789 comm="syz.6.2831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88b06de59 code=0x7ffc0000 [ 322.853815][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.853886][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.067185][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2836'. [ 323.067224][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2836'. [ 324.659991][ T10] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 324.682332][T11860] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2865'. [ 324.816262][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 324.818771][ T10] usb 7-1: config 142 has an invalid interface number: 251 but max is 0 [ 324.818798][ T10] usb 7-1: config 142 has no interface number 0 [ 324.818845][ T10] usb 7-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 324.818873][ T10] usb 7-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 324.818898][ T10] usb 7-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 324.818922][ T10] usb 7-1: config 142 interface 251 has no altsetting 0 [ 324.892245][ T10] usb 7-1: string descriptor 0 read error: -22 [ 324.892453][ T10] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 324.892479][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.938609][T11849] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 324.938764][T11849] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 324.958239][ T10] cypress_m8 7-1:142.251: HID->COM RS232 Adapter converter detected [ 324.987179][ T10] usb 7-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 325.076381][T11860] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2865'. [ 325.200355][ T31] usb 7-1: USB disconnect, device number 2 [ 325.246750][ T31] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 325.250053][ T5711] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 325.256510][ T31] cypress_m8 7-1:142.251: device disconnected [ 325.355077][T11874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2871'. [ 325.355138][T11874] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 325.402780][ T5711] usb 4-1: Using ep0 maxpacket: 16 [ 325.407285][ T5711] usb 4-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 325.407349][ T5711] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x58, changing to 0x8 [ 325.407377][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 32695, setting to 1024 [ 325.407406][ T5711] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 325.407440][ T5711] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 325.461882][ T5711] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 325.461959][ T5711] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 325.462015][ T5711] usb 4-1: Manufacturer: syz [ 325.559597][ T5711] usb 4-1: config 0 descriptor?? [ 325.566953][T11868] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 325.791812][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 325.791830][ T37] audit: type=1326 audit(1783982265.287:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11882 comm="syz.4.2876" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 325.806074][ T37] audit: type=1326 audit(1783982265.287:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11882 comm="syz.4.2876" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 325.824657][ T37] audit: type=1326 audit(1783982265.297:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11882 comm="syz.4.2876" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 325.824838][ T37] audit: type=1326 audit(1783982265.317:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11882 comm="syz.4.2876" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 325.824953][ T37] audit: type=1326 audit(1783982265.317:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11882 comm="syz.4.2876" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 325.825074][ T37] audit: type=1326 audit(1783982265.317:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11882 comm="syz.4.2876" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 325.833709][ T37] audit: type=1326 audit(1783982265.317:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11882 comm="syz.4.2876" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 325.853085][ T37] audit: type=1326 audit(1783982265.347:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11882 comm="syz.4.2876" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 325.853230][ T37] audit: type=1326 audit(1783982265.347:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11882 comm="syz.4.2876" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 325.931755][ T5711] usb 4-1: USB disconnect, device number 17 [ 326.286986][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2880'. [ 326.573036][T11907] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 326.580058][ T5711] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 326.730252][ T5711] usb 3-1: Using ep0 maxpacket: 16 [ 326.735990][ T5711] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 326.736048][ T5711] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.736079][ T5711] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 326.736105][ T5711] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 27748, setting to 1024 [ 326.736134][ T5711] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 326.736159][ T5711] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 326.745520][ T5711] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.745603][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 326.745812][ T5711] usb 3-1: SerialNumber: syz [ 326.852918][T11898] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 326.853119][T11898] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 327.144489][ T5711] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 327.163683][ T5711] usb 3-1: USB disconnect, device number 16 [ 327.792290][T11942] netlink: zone id is out of range [ 327.792381][T11942] netlink: zone id is out of range [ 327.792393][T11942] netlink: zone id is out of range [ 327.792402][T11942] netlink: zone id is out of range [ 327.792411][T11942] netlink: zone id is out of range [ 327.792419][T11942] netlink: zone id is out of range [ 327.792428][T11942] netlink: zone id is out of range [ 327.792436][T11942] netlink: zone id is out of range [ 327.792445][T11942] netlink: zone id is out of range [ 328.815855][T11976] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2920'. [ 328.815885][T11976] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2920'. [ 329.002669][T11984] netlink: 'syz.4.2923': attribute type 30 has an invalid length. [ 329.218590][T11984] bond2: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 329.289145][T11984] bond2 (unregistering): Released all slaves [ 329.476700][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2927'. [ 329.856048][ T37] audit: type=1326 audit(1783982269.347:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12013 comm="syz.4.2937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 329.961148][T12019] netlink: 'syz.2.2939': attribute type 7 has an invalid length. [ 330.740312][T12054] ip6erspan0: entered allmulticast mode [ 331.336336][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2969'. [ 332.182461][T12109] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.183902][T12109] net_ratelimit: 5 callbacks suppressed [ 332.183921][T12109] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 333.610995][T12151] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 333.722231][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 333.722251][ T37] audit: type=1326 audit(1783982273.207:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12154 comm="syz.1.3008" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 333.722305][ T37] audit: type=1326 audit(1783982273.217:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12154 comm="syz.1.3008" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 333.766520][ T37] audit: type=1326 audit(1783982273.257:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12154 comm="syz.1.3008" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 333.771459][T12157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3007'. [ 333.841666][ T37] audit: type=1326 audit(1783982273.327:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12154 comm="syz.1.3008" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 333.841735][ T37] audit: type=1326 audit(1783982273.327:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12154 comm="syz.1.3008" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 334.409558][ T37] audit: type=1326 audit(1783982273.897:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12178 comm="syz.1.3019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 334.443916][ T37] audit: type=1326 audit(1783982273.927:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12178 comm="syz.1.3019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 334.450755][ T37] audit: type=1326 audit(1783982273.937:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12178 comm="syz.1.3019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 334.450811][ T37] audit: type=1326 audit(1783982273.947:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12178 comm="syz.1.3019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 334.450858][ T37] audit: type=1326 audit(1783982273.947:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12178 comm="syz.1.3019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c892de59 code=0x7ffc0000 [ 335.002691][T12200] 9pnet_fd: p9_fd_create_unix (12200): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 335.263818][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3034'. [ 336.536103][T12253] netlink: 'syz.4.3055': attribute type 21 has an invalid length. [ 336.829940][T12264] netlink: 'syz.2.3059': attribute type 32 has an invalid length. [ 337.748795][T12292] openvswitch: netlink: Message has 2 unknown bytes. [ 337.748830][T12292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.152283][T12309] netlink: 'syz.2.3083': attribute type 1 has an invalid length. [ 338.152305][T12309] netlink: 'syz.2.3083': attribute type 2 has an invalid length. [ 338.419943][ T5713] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 338.590036][ T5713] usb 7-1: Using ep0 maxpacket: 16 [ 338.609153][ T5713] usb 7-1: unable to get BOS descriptor or descriptor too short [ 338.620598][ T5713] usb 7-1: config 6 has an invalid interface number: 200 but max is 0 [ 338.620626][ T5713] usb 7-1: config 6 has no interface number 0 [ 338.620660][ T5713] usb 7-1: config 6 interface 200 has no altsetting 0 [ 338.658830][ T5713] usb 7-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=65.08 [ 338.658862][ T5713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.658884][ T5713] usb 7-1: Product: syz [ 338.658901][ T5713] usb 7-1: Manufacturer: syz [ 338.658916][ T5713] usb 7-1: SerialNumber: syz [ 339.010190][ T5713] bfusb 7-1:6.200: probe with driver bfusb failed with error -5 [ 339.042026][ T5713] usb 7-1: USB disconnect, device number 3 [ 339.370181][T12331] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3091'. [ 340.471263][T12372] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 340.575996][T12377] syz.2.3112: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 340.576551][T12377] CPU: 1 UID: 0 PID: 12377 Comm: syz.2.3112 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 340.576591][T12377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.576610][T12377] Call Trace: [ 340.576619][T12377] [ 340.576629][T12377] dump_stack_lvl+0xe8/0x150 [ 340.576673][T12377] warn_alloc+0x24c/0x270 [ 340.576695][T12377] ? __se_sys_ioctl+0x47/0x170 [ 340.576724][T12377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.576753][T12377] ? __pfx_warn_alloc+0x10/0x10 [ 340.576792][T12377] ? look_up_lock_class+0x57/0x110 [ 340.576830][T12377] __vmalloc_node_range_noprof+0x12c/0x1730 [ 340.576874][T12377] ? __lock_acquire+0x683/0x2ce0 [ 340.576906][T12377] ? kasan_quarantine_put+0xbb/0x1f0 [ 340.576955][T12377] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 340.577006][T12377] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 340.577037][T12377] vmalloc_noprof+0xb2/0xe0 [ 340.577074][T12377] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 340.577106][T12377] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 340.577135][T12377] ? dvb_demux_do_ioctl+0x323/0x540 [ 340.577167][T12377] dvb_demux_do_ioctl+0x460/0x540 [ 340.577210][T12377] dvb_usercopy+0x199/0x2e0 [ 340.577235][T12377] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 340.577263][T12377] ? __pfx_dvb_usercopy+0x10/0x10 [ 340.577301][T12377] ? __fget_files+0x3a8/0x420 [ 340.577323][T12377] ? __fget_files+0x2a/0x420 [ 340.577349][T12377] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 340.577376][T12377] dvb_demux_ioctl+0x29/0x40 [ 340.577409][T12377] __se_sys_ioctl+0xff/0x170 [ 340.577438][T12377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.577462][T12377] do_syscall_64+0x174/0x580 [ 340.577495][T12377] ? trace_irq_disable+0x3b/0x140 [ 340.577530][T12377] ? clear_bhb_loop+0x40/0x90 [ 340.577559][T12377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.577580][T12377] RIP: 0033:0x7f80375cde59 [ 340.577610][T12377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.577630][T12377] RSP: 002b:00007f8035826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.577653][T12377] RAX: ffffffffffffffda RBX: 00007f8037855fa0 RCX: 00007f80375cde59 [ 340.577670][T12377] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 340.577684][T12377] RBP: 00007f8037663e6f R08: 0000000000000000 R09: 0000000000000000 [ 340.577699][T12377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.577713][T12377] R13: 00007f8037856038 R14: 00007f8037855fa0 R15: 00007ffd972d80d8 [ 340.577750][T12377] [ 340.587921][T12377] Mem-Info: [ 340.587953][T12377] active_anon:181 inactive_anon:7182 isolated_anon:0 [ 340.587953][T12377] active_file:15948 inactive_file:39503 isolated_file:0 [ 340.587953][T12377] unevictable:768 dirty:396 writeback:0 [ 340.587953][T12377] slab_reclaimable:12169 slab_unreclaimable:115397 [ 340.587953][T12377] mapped:40415 shmem:1290 pagetables:1395 [ 340.587953][T12377] sec_pagetables:0 bounce:0 [ 340.587953][T12377] kernel_misc_reclaimable:0 [ 340.587953][T12377] free:1279723 free_pcp:2781 free_cma:0 [ 340.588310][T12377] Node 0 active_anon:724kB inactive_anon:28728kB active_file:63472kB inactive_file:158012kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:161652kB dirty:1584kB writeback:0kB shmem:3624kB kernel_stack:14836kB pagetables:5440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 340.588498][T12377] Node 1 active_anon:0kB inactive_anon:0kB active_file:320kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 340.588650][T12377] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 340.588819][T12377] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 340.588925][T12377] Node 0 DMA32 free:1165224kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:724kB inactive_anon:28728kB active_file:63472kB inactive_file:158012kB unevictable:1536kB writepending:1584kB zspages:0kB present:3129332kB managed:2560732kB mlocked:0kB bounce:0kB free_pcp:11112kB local_pcp:4152kB free_cma:0kB [ 340.589108][T12377] lowmem_reserve[]: 0 0 1 1 1 [ 340.589212][T12377] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1860kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 340.589411][T12377] lowmem_reserve[]: 0 0 0 0 0 [ 340.599196][T12377] Node 1 Normal free:3938308kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:320kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 340.599379][T12377] lowmem_reserve[]: 0 0 0 0 0 [ 340.599481][T12377] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 340.726885][T12377] Node 0 DMA32: 721*4kB (UME) 327*8kB (UM) 492*16kB (UME) 39*32kB (UM) 4*64kB (M) 32*128kB (UME) 50*256kB (UM) 31*512kB (UME) 23*1024kB (UME) 8*2048kB (UME) 263*4096kB (UM) = 1164828kB [ 340.727387][T12377] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 340.751111][T12377] Node 1 Normal: 5*4kB (UM) 2*8kB (U) 8*16kB (UM) 11*32kB (UM) 8*64kB (UM) 2*128kB (U) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (M) = 3938308kB [ 340.829213][T12377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.829280][T12377] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 340.829332][T12377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.829383][T12377] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 340.829435][T12377] 56733 total pagecache pages [ 340.829464][T12377] 0 pages in swap cache [ 340.829485][T12377] Free swap = 124996kB [ 340.829506][T12377] Total swap = 124996kB [ 340.829529][T12377] 2097051 pages RAM [ 340.829557][T12377] 0 pages HighMem/MovableOnly [ 340.829578][T12377] 424788 pages reserved [ 340.829599][T12377] 0 pages cma reserved [ 341.725491][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 341.725518][ T37] audit: type=1326 audit(1783982281.217:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12400 comm="syz.4.3127" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 341.728946][ T37] audit: type=1326 audit(1783982281.217:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12400 comm="syz.4.3127" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 341.799558][ T37] audit: type=1326 audit(1783982281.287:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12400 comm="syz.4.3127" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 341.799620][ T37] audit: type=1326 audit(1783982281.287:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12400 comm="syz.4.3127" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 341.799672][ T37] audit: type=1326 audit(1783982281.287:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12400 comm="syz.4.3127" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 341.799837][ T37] audit: type=1326 audit(1783982281.287:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12400 comm="syz.4.3127" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 341.799886][ T37] audit: type=1326 audit(1783982281.287:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12400 comm="syz.4.3127" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 341.816665][ T37] audit: type=1326 audit(1783982281.307:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12400 comm="syz.4.3127" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 341.825259][ T37] audit: type=1326 audit(1783982281.307:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12400 comm="syz.4.3127" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 342.172266][T12411] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3130'. [ 342.605294][T12425] usb usb8: usbfs: process 12425 (syz.2.3138) did not claim interface 0 before use [ 343.806148][T12476] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3164'. [ 344.327467][T12497] netlink: 'syz.3.3174': attribute type 21 has an invalid length. [ 344.327598][T12497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3174'. [ 344.958656][T12511] netlink: 'syz.6.3181': attribute type 1 has an invalid length. [ 345.194475][T12519] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3183'. [ 345.194520][T12519] netlink: 'syz.3.3183': attribute type 1 has an invalid length. [ 345.379521][T12523] netlink: 'syz.1.3187': attribute type 21 has an invalid length. [ 345.379548][T12523] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3187'. [ 345.379645][T12523] netlink: 'syz.1.3187': attribute type 4 has an invalid length. [ 345.379661][T12523] netlink: 'syz.1.3187': attribute type 5 has an invalid length. [ 345.379676][T12523] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3187'. [ 345.516576][T12529] netlink: 'syz.4.3190': attribute type 28 has an invalid length. [ 345.516601][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3190'. [ 345.664679][T12534] netlink: 'syz.4.3191': attribute type 15 has an invalid length. [ 345.678386][ T5330] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 345.698820][T12535] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3192'. [ 345.821817][ T5330] usb 7-1: config index 0 descriptor too short (expected 63186, got 210) [ 345.821844][ T5330] usb 7-1: config 0 has an invalid interface number: 106 but max is 0 [ 345.821863][ T5330] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.821881][ T5330] usb 7-1: config 0 has no interface number 0 [ 345.821925][ T5330] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 345.821948][ T5330] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 345.821972][ T5330] usb 7-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 345.822011][ T5330] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 345.822033][ T5330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.928150][ T5330] usb 7-1: config 0 descriptor?? [ 346.007400][ T5330] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 346.092737][T12548] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3198'. [ 346.092763][T12548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3198'. [ 346.159532][ T5330] usb 7-1: USB disconnect, device number 4 [ 346.201172][ T43] usb 7-1: Failed to submit usb control message: -71 [ 346.201221][ T43] usb 7-1: unable to send the bmi data to the device: -71 [ 346.201242][ T43] usb 7-1: unable to get target info from device [ 346.201272][ T43] usb 7-1: could not get target info (-71) [ 346.300207][ T43] usb 7-1: could not probe fw (-71) [ 346.846354][T12571] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 348.171525][T12624] __nla_validate_parse: 2 callbacks suppressed [ 348.171548][T12624] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3231'. [ 348.171582][T12624] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3231'. [ 348.171599][T12624] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3231'. [ 348.473859][T12633] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3236'. [ 348.479935][ T5330] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 348.643241][ T5330] usb 2-1: unable to get BOS descriptor or descriptor too short [ 348.644719][ T5330] usb 2-1: not running at top speed; connect to a high speed hub [ 348.647396][ T5330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.647422][ T5330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.671598][ T5330] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 348.671678][ T5330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.672040][ T5330] usb 2-1: Product: syz [ 348.672075][ T5330] usb 2-1: Manufacturer: syz [ 348.672115][ T5330] usb 2-1: SerialNumber: syz [ 348.801474][T12643] netlink: 'syz.4.3242': attribute type 10 has an invalid length. [ 348.864351][T12643] syz_tun: entered promiscuous mode [ 348.883935][T12643] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 349.242283][ T5610] kernel read not supported for file /vga_arbiter (pid: 5610 comm: kworker/0:6) [ 349.496157][ T5330] usb 2-1: USB disconnect, device number 12 [ 349.619264][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.779939][ T37] audit: type=1326 audit(1783982289.267:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12670 comm="syz.4.3257" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 349.779999][ T37] audit: type=1326 audit(1783982289.267:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12670 comm="syz.4.3257" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 349.784166][ T37] audit: type=1326 audit(1783982289.277:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12670 comm="syz.4.3257" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 349.784480][ T37] audit: type=1326 audit(1783982289.277:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12670 comm="syz.4.3257" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 350.298051][T12689] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 350.402778][T12692] tmpfs: Bad value for 'mpol' [ 350.503097][T12696] netlink: 'syz.3.3265': attribute type 11 has an invalid length. [ 351.082523][ T37] audit: type=1326 audit(1783982290.577:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12718 comm="syz.6.3278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88b06de59 code=0x7ffc0000 [ 351.085409][ T37] audit: type=1326 audit(1783982290.577:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12718 comm="syz.6.3278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88b06de59 code=0x7ffc0000 [ 351.089456][ T37] audit: type=1326 audit(1783982290.577:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12718 comm="syz.6.3278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88b06de59 code=0x7ffc0000 [ 351.165829][ T37] audit: type=1326 audit(1783982290.577:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12718 comm="syz.6.3278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fe88b06de59 code=0x7ffc0000 [ 351.165887][ T37] audit: type=1326 audit(1783982290.637:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12718 comm="syz.6.3278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88b06de59 code=0x7ffc0000 [ 351.165934][ T37] audit: type=1326 audit(1783982290.657:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12718 comm="syz.6.3278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88b06de59 code=0x7ffc0000 [ 351.426846][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3283'. [ 351.426869][T12728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3283'. [ 351.989878][ T5330] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 352.141474][ T5330] usb 7-1: Using ep0 maxpacket: 16 [ 352.153744][ T5330] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 352.153827][ T5330] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.153888][ T5330] usb 7-1: Product: syz [ 352.153924][ T5330] usb 7-1: Manufacturer: syz [ 352.153940][ T5330] usb 7-1: SerialNumber: syz [ 352.219694][ T5330] usb 7-1: config 0 descriptor?? [ 352.249928][ T5330] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 352.653929][T12769] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3301'. [ 352.686550][ T5330] ssu100 7-1:0.0: probe with driver ssu100 failed with error -71 [ 352.710875][ T5330] usb 7-1: USB disconnect, device number 5 [ 352.896753][T12775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3305'. [ 353.057476][T12781] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3309'. [ 353.166529][T12785] netlink: 'syz.4.3310': attribute type 15 has an invalid length. [ 353.534977][T12797] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3316'. [ 353.535048][T12797] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3316'. [ 353.695303][T12801] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3318'. [ 353.751394][ T5330] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 353.791659][T12805] netlink: 'syz.6.3320': attribute type 1 has an invalid length. [ 353.791682][T12805] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3320'. [ 353.910011][ T5330] usb 5-1: Using ep0 maxpacket: 32 [ 353.917358][ T5330] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 353.943491][ T5330] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 353.943514][ T5330] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 353.943528][ T5330] usb 5-1: Product: syz [ 353.943539][ T5330] usb 5-1: Manufacturer: syz [ 353.943549][ T5330] usb 5-1: SerialNumber: syz [ 353.981199][ T5330] usb 5-1: config 0 descriptor?? [ 353.982960][T12795] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 353.985268][ T5330] hub 5-1:0.0: bad descriptor, ignoring hub [ 353.985293][ T5330] hub 5-1:0.0: probe with driver hub failed with error -5 [ 354.303263][ T5330] usb 5-1: USB disconnect, device number 17 [ 354.728437][ T5602] Bluetooth: hci6: unknown advertising packet type: 0x06 [ 355.149379][T12843] netlink: 'syz.3.3337': attribute type 1 has an invalid length. [ 355.149427][T12843] netlink: 'syz.3.3337': attribute type 1 has an invalid length. [ 355.449565][T12855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3344'. [ 355.589901][ T5711] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 355.669973][T12862] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 4, id = 0 [ 355.762923][ T5711] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 355.762958][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.762980][ T5711] usb 5-1: Product: syz [ 355.762995][ T5711] usb 5-1: Manufacturer: syz [ 355.763010][ T5711] usb 5-1: SerialNumber: syz [ 355.821683][ T5711] usb 5-1: config 0 descriptor?? [ 355.877605][ T5711] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 356.254858][ T31] usb 5-1: USB disconnect, device number 18 [ 356.428110][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3357'. [ 356.827618][T12901] netlink: 324 bytes leftover after parsing attributes in process `syz.6.3364'. [ 357.404340][T12926] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 357.559851][ T5711] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 357.724602][ T5711] usb 7-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 357.724642][ T5711] usb 7-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 357.724673][ T5711] usb 7-1: config 1 interface 0 has no altsetting 0 [ 357.726271][ T5711] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.726301][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 357.726323][ T5711] usb 7-1: SerialNumber: syz [ 357.740128][ T5610] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 357.814235][ T5711] hub 7-1:1.0: bad descriptor, ignoring hub [ 357.814280][ T5711] hub 7-1:1.0: probe with driver hub failed with error -5 [ 357.815368][ T5711] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 357.892513][ T5610] usb 4-1: Using ep0 maxpacket: 32 [ 357.895506][ T5610] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 357.895532][ T5610] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 357.895555][ T5610] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 357.895577][ T5610] usb 4-1: config 1 has no interface number 0 [ 357.895631][ T5610] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 357.895659][ T5610] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 357.895683][ T5610] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 357.895726][ T5610] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 357.895751][ T5610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.976787][ T5610] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 358.072474][ T5711] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 358.130812][ T5711] usb 7-1: USB disconnect, device number 6 [ 358.250257][ T5610] snd_usb_pod 4-1:1.1: cannot start listening: -90 [ 358.250590][ T5610] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 358.251399][ T5610] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 358.365575][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 358.431546][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 358.432739][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 358.435010][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 358.436609][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 358.546832][ T5711] usb 4-1: USB disconnect, device number 18 [ 358.872599][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 358.872620][ T37] audit: type=1326 audit(1783982298.367:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.4.3389" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 358.872945][ T37] audit: type=1326 audit(1783982298.367:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.4.3389" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 358.876838][ T37] audit: type=1326 audit(1783982298.367:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.4.3389" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 358.877008][ T37] audit: type=1326 audit(1783982298.367:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.4.3389" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 358.878104][ T37] audit: type=1326 audit(1783982298.367:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.4.3389" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 358.878421][ T37] audit: type=1326 audit(1783982298.367:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.4.3389" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 358.879040][ T37] audit: type=1326 audit(1783982298.367:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.4.3389" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 358.879092][ T37] audit: type=1326 audit(1783982298.367:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.4.3389" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 358.879487][ T37] audit: type=1326 audit(1783982298.367:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.4.3389" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 359.848620][T12983] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3401'. [ 359.910056][T12985] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 360.229878][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3406'. [ 360.503567][T13004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.611858][ T5602] Bluetooth: hci7: command tx timeout [ 360.937390][T13016] sock: sock_timestamping_bind_phc: sock not bind to device [ 360.956195][T13019] tmpfs: Bad value for 'mpol' [ 361.247813][T13027] netlink: 'syz.4.3421': attribute type 21 has an invalid length. [ 361.310369][T13027] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3421'. [ 361.469536][T13037] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3424'. [ 362.084680][T12942] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.087390][T12942] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.087686][T12942] bridge_slave_0: entered allmulticast mode [ 362.112916][T12942] bridge_slave_0: entered promiscuous mode [ 362.129311][T12942] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.138363][T12942] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.138657][T12942] bridge_slave_1: entered allmulticast mode [ 362.163299][T12942] bridge_slave_1: entered promiscuous mode [ 362.312796][ T37] audit: type=1326 audit(1783982301.807:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13065 comm="syz.3.3439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb08ebde59 code=0x7ffc0000 [ 362.418562][T12942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.444474][T12942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.499979][ T5330] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 362.550480][T12942] team0: Port device team_slave_0 added [ 362.555842][T12942] team0: Port device team_slave_1 added [ 362.620583][T12942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.620602][T12942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.620632][T12942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.684830][ T5330] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 362.684874][ T5330] usb 7-1: config 0 has no interface number 0 [ 362.684934][ T5330] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 362.684960][ T5330] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 362.684989][ T5330] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 362.685017][ T5330] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 362.685046][ T5330] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 362.685097][ T5330] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 362.685123][ T5330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.689826][ T5602] Bluetooth: hci7: command tx timeout [ 362.792363][ T5330] usb 7-1: config 0 descriptor?? [ 362.793440][T13061] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 362.819516][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3442'. [ 362.846641][T12942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.846660][T12942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.846693][T12942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.017390][T12942] hsr_slave_0: entered promiscuous mode [ 363.033165][T12942] hsr_slave_1: entered promiscuous mode [ 363.036205][T12942] debugfs: 'hsr0' already exists in 'hsr' [ 363.036232][T12942] Cannot create hsr debugfs directory [ 363.115952][ T5330] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 363.165775][ T5330] usb 7-1: USB disconnect, device number 7 [ 363.245696][ T5330] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 363.325741][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3449'. [ 363.458986][T13084] hsr0: left allmulticast mode [ 363.459011][T13084] hsr_slave_0: left allmulticast mode [ 363.459038][T13084] hsr_slave_1: left allmulticast mode [ 363.459254][T13084] hsr0: left promiscuous mode [ 363.483605][T13084] bridge0: port 2(hsr0) entered disabled state [ 363.671941][T13084] bridge_slave_0: left allmulticast mode [ 363.671977][T13084] bridge_slave_0: left promiscuous mode [ 363.672255][T13084] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.841342][T13100] misc userio: No port type given on /dev/userio [ 364.270519][T13116] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3464'. [ 364.769813][ T5602] Bluetooth: hci7: command tx timeout [ 365.643294][T12942] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 365.731948][T12942] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 365.736554][T12942] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 365.950621][T12942] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 365.954151][T12942] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 366.042645][T12942] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 366.047137][T12942] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 366.053113][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3492'. [ 366.087108][T13173] tmpfs: Bad value for 'mpol' [ 366.118269][T12942] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 366.247369][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 366.288739][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 366.301589][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 366.305245][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 366.324631][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 366.850158][ T5602] Bluetooth: hci7: command tx timeout [ 367.001531][T12942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.115004][T12942] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.173431][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.173631][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.219085][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.219221][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.413022][ T5711] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 367.595020][ T5711] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 367.595049][ T5711] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 367.595086][ T5711] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 367.595127][ T5711] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 367.597852][ T5711] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 367.597883][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 367.597905][ T5711] usb 5-1: SerialNumber: syz [ 367.711781][ T5711] cdc_acm 5-1:1.0: invalid descriptor buffer length [ 367.711806][ T5711] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 367.711822][ T5711] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 367.711871][ T5711] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 367.949370][ T5330] usb 5-1: USB disconnect, device number 19 [ 368.450138][ T5602] Bluetooth: hci8: command tx timeout [ 369.492343][T12942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.529878][ T5711] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 369.711276][ T5711] usb 5-1: Using ep0 maxpacket: 16 [ 369.713610][ T5711] usb 5-1: config index 0 descriptor too short (expected 4495, got 71) [ 369.713638][ T5711] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 369.713660][ T5711] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.713681][ T5711] usb 5-1: config 0 has no interface number 0 [ 369.719008][ T5711] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 369.719037][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.719058][ T5711] usb 5-1: Product: syz [ 369.719074][ T5711] usb 5-1: Manufacturer: syz [ 369.719089][ T5711] usb 5-1: SerialNumber: syz [ 369.827225][ T5711] usb 5-1: config 0 descriptor?? [ 370.053464][ T5711] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 370.053545][ T5711] uvcvideo 5-1:0.105: No valid video chain found. [ 370.093786][ T5711] usb 5-1: USB disconnect, device number 20 [ 370.143067][ T5608] udevd[5608]: setting mode of /dev/bus/usb/005/020 to 020664 failed: No such file or directory [ 370.143276][ T5608] udevd[5608]: setting owner of /dev/bus/usb/005/020 to uid=0, gid=0 failed: No such file or directory [ 370.377403][T13174] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.377674][T13174] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.377918][T13174] bridge_slave_0: entered allmulticast mode [ 370.421672][T13174] bridge_slave_0: entered promiscuous mode [ 370.437456][T13174] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.437849][T13174] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.438120][T13174] bridge_slave_1: entered allmulticast mode [ 370.465008][T13174] bridge_slave_1: entered promiscuous mode [ 370.520088][ T31] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 370.530543][ T5602] Bluetooth: hci8: command tx timeout [ 370.593701][T13174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.609666][T13174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.684729][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 370.688840][T13310] netlink: 'syz.4.3542': attribute type 26 has an invalid length. [ 370.693651][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 370.719606][ T31] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 370.719638][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.719661][ T31] usb 7-1: Product: syz [ 370.719676][ T31] usb 7-1: Manufacturer: syz [ 370.719692][ T31] usb 7-1: SerialNumber: syz [ 370.762409][ T31] usb 7-1: config 0 descriptor?? [ 370.858837][T13174] team0: Port device team_slave_0 added [ 370.892443][T13174] team0: Port device team_slave_1 added [ 370.995075][ T5610] usb 7-1: USB disconnect, device number 8 [ 371.168975][T13174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.168994][T13174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.169026][T13174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.283532][T13174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.283551][T13174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.283582][T13174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.457386][T12942] veth0_vlan: entered promiscuous mode [ 371.532091][T13174] hsr_slave_0: entered promiscuous mode [ 371.533544][T13174] hsr_slave_1: entered promiscuous mode [ 371.534555][T13174] debugfs: 'hsr0' already exists in 'hsr' [ 371.534580][T13174] Cannot create hsr debugfs directory [ 371.619506][T13328] netlink: 'syz.4.3551': attribute type 10 has an invalid length. [ 371.619529][T13328] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3551'. [ 371.714739][T13328] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 371.766722][T12942] veth1_vlan: entered promiscuous mode [ 371.932475][T13336] libceph: resolve 'c' (ret=-3): failed [ 372.610209][ T5602] Bluetooth: hci8: command tx timeout [ 372.661472][T12942] veth0_macvtap: entered promiscuous mode [ 372.748396][T12942] veth1_macvtap: entered promiscuous mode [ 372.957367][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3566'. [ 373.375302][T12942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.596948][T12942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.675250][ T1527] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.689025][ T1527] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.689291][ T1527] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.709348][ T1527] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.845930][T13174] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 373.975601][T13174] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.990717][T13174] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 374.085345][T13174] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 374.401507][T13174] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 374.474651][T13174] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 374.546974][T13174] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 374.613321][T13174] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 374.698527][ T59] Bluetooth: hci8: command tx timeout [ 375.379579][ T1504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.379601][ T1504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.644764][T13437] : renamed from bridge_slave_0 [ 375.761694][ T1504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.761716][ T1504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.993910][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 375.993977][ T37] audit: type=1326 audit(1783982315.487:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.4.3605" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 376.003484][ T37] audit: type=1326 audit(1783982315.487:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.4.3605" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 376.029972][ T37] audit: type=1326 audit(1783982315.517:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.4.3605" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 376.030030][ T37] audit: type=1326 audit(1783982315.517:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.4.3605" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 376.030078][ T37] audit: type=1326 audit(1783982315.517:332): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=13449 comm="syz.4.3605" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 376.030123][ T37] audit: type=1326 audit(1783982315.517:333): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=13449 comm="syz.4.3605" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 376.032546][ T37] audit: type=1326 audit(1783982315.527:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.4.3605" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 376.032711][ T37] audit: type=1326 audit(1783982315.527:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.4.3605" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 376.032827][ T37] audit: type=1326 audit(1783982315.527:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.4.3605" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 376.129953][ T5609] Bluetooth: hci5: command 0x0406 tx timeout [ 376.333682][T13174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.434127][T13174] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.466182][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.466392][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.520825][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.520958][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.686095][T13459] netlink: 'syz.6.3610': attribute type 5 has an invalid length. [ 377.306935][T13482] netlink: 'syz.6.3620': attribute type 1 has an invalid length. [ 377.306959][T13482] netlink: 'syz.6.3620': attribute type 2 has an invalid length. [ 377.307029][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3620'. [ 377.592944][T13494] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 377.592984][T13494] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 377.593010][T13494] CIFS mount error: No usable UNC path provided in device string! [ 377.593010][T13494] [ 377.593244][T13494] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 379.114035][T13174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.195179][T13550] tmpfs: Bad value for 'mpol' [ 380.157434][T13174] veth0_vlan: entered promiscuous mode [ 380.210556][T13174] veth1_vlan: entered promiscuous mode [ 380.517529][T13174] veth0_macvtap: entered promiscuous mode [ 380.574082][T13174] veth1_macvtap: entered promiscuous mode [ 380.778284][T13174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.864478][T13174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.957819][T13618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3680'. [ 381.014522][ T123] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.016366][ T123] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.016930][ T123] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.017467][ T123] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.054183][T13645] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3693'. [ 382.199960][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.199983][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.464769][ T37] audit: type=1326 audit(1783982321.957:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13653 comm="syz.4.3700" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 382.464829][ T37] audit: type=1326 audit(1783982321.957:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13653 comm="syz.4.3700" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 382.469276][ T37] audit: type=1326 audit(1783982321.957:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13653 comm="syz.4.3700" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 382.529942][ T37] audit: type=1326 audit(1783982321.987:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13653 comm="syz.4.3700" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 382.552618][ T37] audit: type=1326 audit(1783982322.047:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13653 comm="syz.4.3700" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 382.552730][ T37] audit: type=1326 audit(1783982322.047:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13653 comm="syz.4.3700" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 382.552881][ T37] audit: type=1326 audit(1783982322.047:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13653 comm="syz.4.3700" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 382.584121][ T37] audit: type=1326 audit(1783982322.057:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13653 comm="syz.4.3700" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 382.619819][ T37] audit: type=1326 audit(1783982322.107:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13653 comm="syz.4.3700" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 382.624003][ T37] audit: type=1326 audit(1783982322.107:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13653 comm="syz.4.3700" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 382.772561][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.772583][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.896657][T13661] ip6erspan0: entered allmulticast mode [ 383.088655][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3704'. [ 383.405827][T13678] cgroup: subsys name conflicts with all [ 383.642029][T13688] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3716'. [ 384.300974][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.301047][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.453362][ T5856] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 384.601914][ T5856] usb 7-1: Using ep0 maxpacket: 8 [ 384.605574][ T5856] usb 7-1: config 3 has an invalid interface number: 45 but max is 0 [ 384.605602][ T5856] usb 7-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 384.605623][ T5856] usb 7-1: config 3 has no interface number 0 [ 384.605672][ T5856] usb 7-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 384.605702][ T5856] usb 7-1: config 3 interface 45 has no altsetting 0 [ 384.685366][ T5856] usb 7-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 384.685398][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.685420][ T5856] usb 7-1: Product: syz [ 384.685435][ T5856] usb 7-1: Manufacturer: syz [ 384.685451][ T5856] usb 7-1: SerialNumber: syz [ 385.050255][ T5856] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 386.034236][ T5856] usb 7-1: USB disconnect, device number 9 [ 387.170893][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 388.230231][T13843] tmpfs: Bad value for 'mpol' [ 388.686903][T13858] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 388.997311][T13868] 8021q: VLANs not supported on lo [ 389.118236][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3806'. [ 389.118262][T13874] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3806'. [ 389.118288][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3806'. [ 389.118304][T13874] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3806'. [ 389.118389][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3806'. [ 389.489359][T13887] netlink: 'syz.8.3812': attribute type 61 has an invalid length. [ 389.489384][T13887] netlink: 'syz.8.3812': attribute type 62 has an invalid length. [ 389.664628][T13891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.683362][ T5330] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 389.859851][ T5330] usb 7-1: Using ep0 maxpacket: 16 [ 389.865161][ T5330] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 389.865194][ T5330] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 389.865224][ T5330] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.865267][ T5330] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 389.865292][ T5330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.937986][ T5330] usb 7-1: config 0 descriptor?? [ 389.968092][ T5330] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input20 [ 390.285063][ T5330] usb 7-1: USB disconnect, device number 10 [ 390.285149][ C0] pxrc 7-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 391.095046][T13925] netlink: 'syz.7.3828': attribute type 1 has an invalid length. [ 391.095069][T13925] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3828'. [ 393.561531][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 393.730129][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 393.733133][ T9] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 393.733188][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 393.733217][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 393.733246][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 393.791209][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 393.791241][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.791264][ T9] usb 7-1: Product: syz [ 393.791279][ T9] usb 7-1: Manufacturer: syz [ 393.791294][ T9] usb 7-1: SerialNumber: syz [ 393.840287][ T9] usb 7-1: config 0 descriptor?? [ 394.137275][ T9] appledisplay 7-1:0.0: Error while getting initial brightness: -71 [ 394.139969][ C0] usb 7-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 394.182191][ T9] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -71 [ 394.242968][ T9] usb 7-1: USB disconnect, device number 11 [ 394.411286][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 394.411305][ T37] audit: type=1326 audit(1783982333.907:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14050 comm="syz.8.3889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362ec9de59 code=0x7ffc0000 [ 394.413328][ T37] audit: type=1326 audit(1783982333.907:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14050 comm="syz.8.3889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362ec9de59 code=0x7ffc0000 [ 394.431790][ T37] audit: type=1326 audit(1783982333.927:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14050 comm="syz.8.3889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362ec9de59 code=0x7ffc0000 [ 394.431934][ T37] audit: type=1326 audit(1783982333.927:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14050 comm="syz.8.3889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f362ec9de59 code=0x7ffc0000 [ 394.432067][ T37] audit: type=1326 audit(1783982333.927:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14050 comm="syz.8.3889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362ec9de59 code=0x7ffc0000 [ 394.432207][ T37] audit: type=1326 audit(1783982333.927:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14050 comm="syz.8.3889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362ec9de59 code=0x7ffc0000 [ 394.442533][ T37] audit: type=1326 audit(1783982333.937:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14050 comm="syz.8.3889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362ec9de59 code=0x7ffc0000 [ 394.460483][ T37] audit: type=1326 audit(1783982333.937:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14050 comm="syz.8.3889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f362ec9de59 code=0x7ffc0000 [ 394.460731][ T37] audit: type=1326 audit(1783982333.947:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14050 comm="syz.8.3889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f362ec9de59 code=0x7ffc0000 [ 394.621135][T14053] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.149063][T14071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.347545][T14119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.615425][T14127] batadv1: entered promiscuous mode [ 396.615452][T14127] batadv1: entered allmulticast mode [ 398.282483][T14179] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3949'. [ 398.439323][T14188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3953'. [ 398.439471][T14188] Zero length message leads to an empty skb [ 398.679896][ T5330] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 398.835451][ T5330] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 398.835488][ T5330] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 398.835516][ T5330] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 398.872589][ T5330] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 398.872622][ T5330] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.872652][ T5330] usb 9-1: Product: syz [ 398.872668][ T5330] usb 9-1: Manufacturer: syz [ 398.872684][ T5330] usb 9-1: SerialNumber: syz [ 398.939234][ T5330] usb 9-1: config 0 descriptor?? [ 398.946880][T14186] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 398.947504][T14186] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 398.970827][ T5330] usb 9-1: ucan: probing device on interface #0 [ 399.182513][ T5853] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 399.333289][ T5853] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.350446][ T5853] usb 8-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 399.350476][ T5853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.350503][ T5853] usb 8-1: Product: syz [ 399.350514][ T5853] usb 8-1: Manufacturer: syz [ 399.350525][ T5853] usb 8-1: SerialNumber: syz [ 399.364369][ T5853] usb 8-1: config 0 descriptor?? [ 399.408705][ T5330] usb 9-1: ucan: failed to retrieve device info [ 399.408727][ T5330] usb 9-1: ucan: probe failed; try to update the device firmware [ 399.410959][ T5923] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 399.458938][ T5330] usb 9-1: USB disconnect, device number 2 [ 399.466194][ T5853] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 399.466258][ T5853] dvb-usb: bulk message failed: -22 (3/0) [ 399.532338][ T5618] udevd[5618]: setting mode of /dev/bus/usb/009/002 to 020664 failed: No such file or directory [ 399.532524][ T5618] udevd[5618]: setting owner of /dev/bus/usb/009/002 to uid=0, gid=0 failed: No such file or directory [ 399.599914][ T5923] usb 7-1: Using ep0 maxpacket: 32 [ 399.602489][ T5923] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.602512][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 399.602530][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 399.606195][ T5923] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 399.606215][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.606230][ T5923] usb 7-1: Product: syz [ 399.606240][ T5923] usb 7-1: Manufacturer: syz [ 399.606251][ T5923] usb 7-1: SerialNumber: syz [ 399.840646][ T5853] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 399.841643][ T5923] usb 7-1: config 0 descriptor?? [ 399.842453][T14210] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 399.848588][ T5853] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 399.848809][ T5853] usb 8-1: media controller created [ 399.932481][ T5853] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.981023][ T5923] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input21 [ 400.104104][ T31] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 400.211949][ C1] kbtab 7-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 400.250210][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 400.256572][ T31] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 400.256599][ T31] usb 5-1: config 0 has no interface number 0 [ 400.256762][ T31] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 400.256792][ T31] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 400.307993][ T31] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 400.308018][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.308032][ T31] usb 5-1: Product: syz [ 400.308043][ T31] usb 5-1: Manufacturer: syz [ 400.308054][ T31] usb 5-1: SerialNumber: syz [ 400.573135][ T31] usb 5-1: config 0 descriptor?? [ 400.586108][T14219] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 400.586299][T14219] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 400.653231][ T5923] usb 7-1: USB disconnect, device number 12 [ 400.653282][ C0] kbtab 7-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 400.731945][T14229] netlink: 22 bytes leftover after parsing attributes in process `syz.7.3974'. [ 400.870074][T14219] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 400.870219][T14219] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 400.878706][ T5853] dvb-usb: bulk message failed: -22 (6/0) [ 400.878795][ T5853] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 401.027317][ T5853] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input22 [ 401.108150][ T31] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 401.108429][ T31] asix 5-1:0.34: probe with driver asix failed with error -71 [ 401.141481][ T5853] dvb-usb: schedule remote query interval to 150 msecs. [ 401.141537][ T5853] dvb-usb: bulk message failed: -22 (3/0) [ 401.160022][ T5853] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 401.285761][ T5853] usb 8-1: USB disconnect, device number 2 [ 401.321682][ T31] usb 5-1: USB disconnect, device number 21 [ 401.433672][ T6249] dvb-usb: bulk message failed: -22 (1/0) [ 401.470550][ T6249] dvb-usb: error while querying for an remote control event. [ 401.903984][ T5853] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 402.209312][T14276] tipc: Enabling of bearer rejected, failed to enable media [ 402.396176][ T5853] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 402.540618][ T5853] usb 8-1: Using ep0 maxpacket: 16 [ 402.567675][ T5853] usb 8-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 402.567707][ T5853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.567728][ T5853] usb 8-1: Product: syz [ 402.567743][ T5853] usb 8-1: Manufacturer: syz [ 402.567759][ T5853] usb 8-1: SerialNumber: syz [ 402.641076][ T5853] usb 8-1: config 0 descriptor?? [ 402.723945][T14296] netlink: 'syz.4.4005': attribute type 3 has an invalid length. [ 402.882925][ T5853] speedtch 8-1:0.0: speedtch_bind: data interface not found! [ 402.883055][ T5853] speedtch 8-1:0.0: usbatm_usb_probe: bind failed: -19! [ 403.135479][ T9] usb 8-1: USB disconnect, device number 3 [ 403.901534][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 404.057386][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 404.061467][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 404.061525][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 404.061554][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 404.061582][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 404.110797][ T9] usb 9-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 404.110827][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.110849][ T9] usb 9-1: Product: syz [ 404.110865][ T9] usb 9-1: Manufacturer: syz [ 404.110881][ T9] usb 9-1: SerialNumber: syz [ 404.172153][ T9] usb 9-1: config 0 descriptor?? [ 404.173810][T14329] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 404.416083][ T9] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 404.488289][ T9] input: Griffin SoundKnob as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input23 [ 404.645673][T14356] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4033'. [ 404.724010][ T5923] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 404.889822][ T5923] usb 7-1: Using ep0 maxpacket: 32 [ 404.893697][ T5923] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 404.900975][ T5923] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 404.901053][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.901090][ T5923] usb 7-1: Product: syz [ 404.901106][ T5923] usb 7-1: Manufacturer: syz [ 404.901121][ T5923] usb 7-1: SerialNumber: syz [ 404.945383][ C0] powermate: config urb returned -71 [ 404.945621][ C0] powermate: config urb returned -71 [ 404.945850][ C0] powermate: config urb returned -71 [ 404.958290][ T5711] usb 9-1: USB disconnect, device number 3 [ 404.958290][ C0] powermate 9-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 405.008130][ T5923] usb 7-1: config 0 descriptor?? [ 405.008939][T14353] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 405.111026][ T5923] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 405.752384][ T5923] usb 7-1: USB disconnect, device number 13 [ 405.770100][ T5330] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 405.944831][ T5330] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 405.944861][ T5330] usb 8-1: config 0 has no interface number 0 [ 405.968388][ T5330] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 405.968417][ T5330] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.968435][ T5330] usb 8-1: Product: syz [ 405.968449][ T5330] usb 8-1: Manufacturer: syz [ 405.968463][ T5330] usb 8-1: SerialNumber: syz [ 406.017306][ T5330] usb 8-1: config 0 descriptor?? [ 406.270632][ T5330] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 406.307779][ T5330] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 406.308340][ T5330] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 406.308388][ T5330] usb 8-1: media controller created [ 406.362861][ T5330] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 406.434638][T14401] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 406.608536][ T5853] dummy0: entered promiscuous mode [ 406.686273][ T6149] udevd[6149]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.875074][ T5853] usb 8-1: USB disconnect, device number 4 [ 407.593039][T14432] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[13174] was attempted by " [ 409.360093][ T5853] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 409.686615][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.686645][ T5853] usb 5-1: config 0 has no interfaces? [ 409.686677][ T5853] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 409.686704][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.741853][ T5853] usb 5-1: config 0 descriptor?? [ 410.030180][ T5853] usb 5-1: USB disconnect, device number 22 [ 410.269660][T14523] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4113'. [ 410.481984][T14531] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4116'. [ 410.791052][T14542] netlink: 'syz.4.4122': attribute type 1 has an invalid length. [ 410.791075][T14542] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4122'. [ 411.739043][T14580] netlink: 4816 bytes leftover after parsing attributes in process `syz.7.4139'. [ 412.083506][T14595] autofs: Bad value for 'fd' [ 412.530041][ T5711] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 412.679877][ T5711] usb 5-1: Using ep0 maxpacket: 32 [ 412.682351][ T5711] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.682379][ T5711] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.687454][ T5711] usb 5-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice=5f.40 [ 412.687486][ T5711] usb 5-1: New USB device strings: Mfr=217, Product=141, SerialNumber=237 [ 412.687510][ T5711] usb 5-1: Product: syz [ 412.687526][ T5711] usb 5-1: Manufacturer: syz [ 412.687542][ T5711] usb 5-1: SerialNumber: syz [ 412.789983][T14619] netlink: 19 bytes leftover after parsing attributes in process `syz.8.4159'. [ 413.087899][ T5711] usb 5-1: 0:1 : does not exist [ 413.087990][ T5711] usb 5-1: unit 0 not found! [ 413.467101][ T5711] usb 5-1: USB disconnect, device number 23 [ 413.840474][ T37] audit: type=1326 audit(1783982353.327:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14652 comm="syz.4.4176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 413.840533][ T37] audit: type=1326 audit(1783982353.327:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14652 comm="syz.4.4176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 413.914282][ T37] audit: type=1326 audit(1783982353.407:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14652 comm="syz.4.4176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 413.914339][ T37] audit: type=1326 audit(1783982353.407:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14652 comm="syz.4.4176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 413.914395][ T37] audit: type=1326 audit(1783982353.407:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14652 comm="syz.4.4176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 413.914446][ T37] audit: type=1326 audit(1783982353.407:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14652 comm="syz.4.4176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 413.916808][ T37] audit: type=1326 audit(1783982353.407:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14652 comm="syz.4.4176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 413.916862][ T37] audit: type=1326 audit(1783982353.407:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14652 comm="syz.4.4176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 413.916913][ T37] audit: type=1326 audit(1783982353.407:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14652 comm="syz.4.4176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 413.917845][ T37] audit: type=1326 audit(1783982353.407:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14652 comm="syz.4.4176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 414.200325][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.060331][T14692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.147225][T14695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4195'. [ 415.674206][T14713] vivid-001: ================= START STATUS ================= [ 415.674343][T14713] vivid-001: Radio HW Seek Mode: Bounded [ 415.674447][T14713] vivid-001: Radio Programmable HW Seek: false [ 415.674468][T14713] vivid-001: RDS Rx I/O Mode: Block I/O [ 415.674488][T14713] vivid-001: Generate RBDS Instead of RDS: false [ 415.674508][T14713] vivid-001: RDS Reception: true [ 415.674551][T14713] vivid-001: RDS Program Type: 0 inactive [ 415.674602][T14713] vivid-001: RDS PS Name: inactive [ 415.674626][T14713] vivid-001: RDS Radio Text: inactive [ 415.674649][T14713] vivid-001: RDS Traffic Announcement: false inactive [ 415.674673][T14713] vivid-001: RDS Traffic Program: false inactive [ 415.674697][T14713] vivid-001: RDS Music: false inactive [ 415.674722][T14713] vivid-001: ================== END STATUS ================== [ 416.082722][ T5856] IPVS: starting estimator thread 0... [ 416.230048][T14729] IPVS: using max 8 ests per chain, 19200 per kthread [ 416.239892][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 416.389926][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 416.392365][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.392399][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.392441][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 416.392498][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.448584][ T9] usb 7-1: config 0 descriptor?? [ 416.474985][ T9] hub 7-1:0.0: USB hub found [ 416.661743][ T9] hub 7-1:0.0: 26 ports detected [ 416.662283][ T9] hub 7-1:0.0: insufficient power available to use all downstream ports [ 416.864428][ T9] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 416.864530][ T9] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 416.934521][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 416.934652][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 416.956589][ T9] usb 7-1: USB disconnect, device number 14 [ 418.174601][T14791] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4241'. [ 418.323401][T14795] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4243'. [ 418.323429][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4243'. [ 418.655601][T14812] overlayfs: failed to resolve '/@ӽvY΁Ɣe8': -2 [ 418.931527][ T5602] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:201' [ 418.931567][ T5602] CPU: 1 UID: 0 PID: 5602 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 418.931595][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 418.931610][ T5602] Workqueue: hci7 hci_rx_work [ 418.931743][ T5602] Call Trace: [ 418.931781][ T5602] [ 418.931841][ T5602] dump_stack_lvl+0xe8/0x150 [ 418.931933][ T5602] sysfs_create_dir_ns+0x271/0x2a0 [ 418.932003][ T5602] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 418.932074][ T5602] ? rt_spin_unlock+0x163/0x200 [ 418.932134][ T5602] kobject_add_internal+0x62c/0xce0 [ 418.932213][ T5602] kobject_add+0x163/0x240 [ 418.932236][ T5602] ? rt_spin_unlock+0x157/0x200 [ 418.932269][ T5602] ? __pfx_kobject_add+0x10/0x10 [ 418.932300][ T5602] ? get_device_parent+0x370/0x3a0 [ 418.932363][ T5602] device_add+0x3fa/0xb80 [ 418.932392][ T5602] hci_conn_add_sysfs+0xd5/0x210 [ 418.932462][ T5602] le_conn_complete_evt+0xfef/0x1580 [ 418.932524][ T5602] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 418.932551][ T5602] ? lockdep_hardirqs_on+0x7a/0x110 [ 418.932611][ T5602] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 418.932672][ T5602] ? rt_mutex_slowunlock+0x219/0x460 [ 418.932702][ T5602] ? skb_pull_data+0xf0/0x200 [ 418.932764][ T5602] hci_le_conn_complete_evt+0x187/0x470 [ 418.932799][ T5602] hci_event_packet+0x67a/0xf10 [ 418.932867][ T5602] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 418.932891][ T5602] ? __pfx_hci_event_packet+0x10/0x10 [ 418.932926][ T5602] ? rt_spin_unlock+0x157/0x200 [ 418.932963][ T5602] ? hci_send_to_monitor+0xe2/0x590 [ 418.932995][ T5602] hci_rx_work+0x3ee/0x1020 [ 418.933038][ T5602] ? process_scheduled_works+0xa20/0x14e0 [ 418.933092][ T5602] process_scheduled_works+0xa8e/0x14e0 [ 418.933151][ T5602] ? __pfx_process_scheduled_works+0x10/0x10 [ 418.933187][ T5602] ? assign_work+0x3cf/0x5d0 [ 418.933220][ T5602] worker_thread+0xa47/0xfb0 [ 418.933277][ T5602] kthread+0x388/0x470 [ 418.933339][ T5602] ? __pfx_worker_thread+0x10/0x10 [ 418.933364][ T5602] ? __pfx_kthread+0x10/0x10 [ 418.933399][ T5602] ret_from_fork+0x514/0xb70 [ 418.933488][ T5602] ? __pfx_ret_from_fork+0x10/0x10 [ 418.933522][ T5602] ? __switch_to+0xc89/0x1420 [ 418.933576][ T5602] ? __pfx_kthread+0x10/0x10 [ 418.933610][ T5602] ret_from_fork_asm+0x1a/0x30 [ 418.933648][ T5602] [ 418.933733][ T5602] kobject: kobject_add_internal failed for hci7:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 418.933776][ T5602] Bluetooth: hci7: failed to register connection device [ 419.712703][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4265'. [ 419.740353][ T5853] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 419.899859][ T5853] usb 8-1: Using ep0 maxpacket: 32 [ 419.902302][ T5853] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 419.902328][ T5853] usb 8-1: config 0 has no interface number 0 [ 419.908675][ T5853] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 419.908705][ T5853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.908727][ T5853] usb 8-1: Product: syz [ 419.908742][ T5853] usb 8-1: Manufacturer: syz [ 419.908758][ T5853] usb 8-1: SerialNumber: syz [ 420.000888][ T5853] usb 8-1: config 0 descriptor?? [ 420.019823][ T5853] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 420.019865][ T5853] usb 8-1: selecting invalid altsetting 1 [ 420.019883][ T5853] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 420.165276][ T5853] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 420.173443][ T5853] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 420.173491][ T5853] usb 8-1: media controller created [ 420.572417][ T5853] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.822893][ T9153] NFSD: Failed to start, no listeners configured. [ 421.411635][T14839] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 421.447406][ T5853] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 421.447466][ T5853] zl10353_read_register: readreg error (reg=127, ret==-71) [ 421.452636][ T5853] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 421.766347][ T5853] usb 8-1: USB disconnect, device number 5 [ 422.014711][T14910] xt_l2tp: missing protocol rule (udp|l2tpip) [ 422.213531][ T5602] Bluetooth: hci6: command 0x0406 tx timeout [ 423.281330][ T5853] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 423.313297][T14928] syz.7.4303 (14928) used greatest stack depth: 19744 bytes left [ 423.415228][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 423.415247][ T37] audit: type=1326 audit(1783982362.907:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.4.4319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 423.415296][ T37] audit: type=1326 audit(1783982362.907:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.4.4319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 423.461806][ T5853] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 423.461882][ T5853] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 423.461942][ T5853] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 423.462070][ T5853] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 423.462160][ T5853] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 423.505341][ T37] audit: type=1326 audit(1783982362.947:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.4.4319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 423.558452][ T37] audit: type=1326 audit(1783982363.017:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.4.4319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 423.563408][ T37] audit: type=1326 audit(1783982363.047:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.4.4319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 423.563463][ T37] audit: type=1326 audit(1783982363.047:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.4.4319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 423.563511][ T37] audit: type=1326 audit(1783982363.047:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.4.4319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 423.637280][ T5853] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 423.637370][ T5853] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 423.637431][ T5853] usb 7-1: Product: syz [ 423.637466][ T5853] usb 7-1: Manufacturer: syz [ 423.697690][ T37] audit: type=1326 audit(1783982363.187:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.4.4319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 423.697924][ T37] audit: type=1326 audit(1783982363.187:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.4.4319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 423.698134][ T37] audit: type=1326 audit(1783982363.187:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.4.4319" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f892c7cde59 code=0x7ffc0000 [ 423.809953][ T5853] cdc_wdm 7-1:1.0: skipping garbage [ 423.809974][ T5853] cdc_wdm 7-1:1.0: skipping garbage [ 424.031848][ T5853] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 424.031954][ T5853] cdc_wdm 7-1:1.0: Unknown control protocol [ 424.287081][ T5330] usb 7-1: USB disconnect, device number 15 [ 424.870288][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 425.023169][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 425.041400][ T9] usb 9-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 425.041432][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.041469][ T9] usb 9-1: Product: syz [ 425.041486][ T9] usb 9-1: Manufacturer: syz [ 425.041501][ T9] usb 9-1: SerialNumber: syz [ 425.093684][ T9] usb 9-1: config 0 descriptor?? [ 425.133328][ T9] radio-usb-si4713 9-1:0.0: Si4713 development board discovered: (10C4:8244) [ 425.742655][ T9] radio-usb-si4713 9-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 425.743153][ T9] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 425.778175][ T9] usb 9-1: USB disconnect, device number 4 [ 425.854852][ T6249] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 425.891414][ T38] INFO: task syz.5.2252:10556 blocked for more than 143 seconds. [ 425.891440][ T38] Not tainted syzkaller #0 [ 425.891452][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 425.891462][ T38] task:syz.5.2252 state:D stack:27064 pid:10556 tgid:10555 ppid:9650 task_flags:0x400140 flags:0x00080002 [ 425.891533][ T38] Call Trace: [ 425.891541][ T38] [ 425.891556][ T38] __schedule+0x16dc/0x5500 [ 425.891613][ T38] ? __pfx___schedule+0x10/0x10 [ 425.891645][ T38] ? irqentry_exit+0x218/0x8f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 425.891676][ T38] ? trace_irq_disable+0x3b/0x140 [ 425.891793][ T38] ? __pfx___schedule+0x10/0x10 [ 425.891821][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 425.891959][ T38] rt_mutex_schedule+0x76/0xf0 [ 425.892043][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 425.892079][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 425.892111][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 425.892143][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 425.892172][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 425.892212][ T38] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 425.892281][ T38] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 425.892318][ T38] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 425.892360][ T38] mutex_lock_nested+0x168/0x1d0 [ 425.892393][ T38] nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 425.892428][ T38] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 425.892463][ T38] ? rcu_is_watching+0x15/0xb0 [ 425.892581][ T38] ? trace_kmalloc+0x2a/0xf0 [ 425.892630][ T38] ? __kmalloc_noprof+0x43b/0x780 [ 425.892671][ T38] ? __nla_parse+0x40/0x60 [ 425.892751][ T38] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 425.892827][ T38] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 425.892866][ T38] genl_family_rcv_msg_doit+0x233/0x340 [ 425.892905][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 425.892949][ T38] ? bpf_lsm_capable+0x9/0x20 [ 425.892991][ T38] ? security_capable+0x7e/0x2c0 [ 425.893070][ T38] genl_rcv_msg+0x614/0x7a0 [ 425.893109][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 425.893135][ T38] ? ref_tracker_free+0x668/0x820 [ 425.893191][ T38] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 425.893222][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 425.893255][ T38] ? __asan_memcpy+0x40/0x70 [ 425.893309][ T38] ? __skb_clone+0x5c/0x6c0 [ 425.893347][ T38] netlink_rcv_skb+0x226/0x4a0 [ 425.893372][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 425.893405][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 425.893443][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.893465][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.893493][ T38] genl_rcv+0x28/0x40 [ 425.893529][ T38] netlink_unicast+0x7f5/0x990 [ 425.893601][ T38] netlink_sendmsg+0x813/0xb40 [ 425.893635][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.893663][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 425.893729][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.893753][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 425.893810][ T38] ____sys_sendmsg+0x565/0x870 [ 425.893834][ T38] ? __might_fault+0xaf/0x130 [ 425.893887][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.893922][ T38] ? import_iovec+0x73/0xa0 [ 425.893972][ T38] ___sys_sendmsg+0x2a5/0x360 [ 425.893995][ T38] ? __lock_acquire+0x683/0x2ce0 [ 425.894046][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.894074][ T38] ? futex_wait+0x2a2/0x390 [ 425.894161][ T38] ? __fget_files+0x2a/0x420 [ 425.894205][ T38] ? __fget_files+0x3a8/0x420 [ 425.894239][ T38] __x64_sys_sendmsg+0x1b7/0x290 [ 425.894267][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.894311][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.894342][ T38] do_syscall_64+0x174/0x580 [ 425.894375][ T38] ? trace_irq_disable+0x3b/0x140 [ 425.894409][ T38] ? clear_bhb_loop+0x40/0x90 [ 425.894438][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.894467][ T38] RIP: 0033:0x7f3cc3d2de59 [ 425.894488][ T38] RSP: 002b:00007f3cc1f86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.894519][ T38] RAX: ffffffffffffffda RBX: 00007f3cc3fb5fa0 RCX: 00007f3cc3d2de59 [ 425.894537][ T38] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 425.894553][ T38] RBP: 0000[ 425.894553][ T38] RBP: 00007f3cc3dc3e6f R08: 0000000000000000 R09: 0000000000000000 [ 425.894568][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.894582][ T38] R13: 00007f3cc3fb6038 R14: 00007f3cc3fb5fa0 R15: 00007fffa1f3ef88 [ 425.894618][ T38] [ 425.894664][ T38] [ 425.894664][ T38] Showing all locks held in the system: [ 425.894706][ T38] 3 locks held by kworker/0:0/9: [ 425.894745][ T38] #0: ffff88801a765938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 425.894827][ T38] #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 425.894879][ T38] #2: ffff88802a6ce210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 425.894985][ T38] 1 lock held by khungtaskd/38: [ 425.894996][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 425.895070][ T38] 2 locks held by getty/5348: [ 425.895081][ T38] #0: ffff88803646e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 425.895157][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 425.895243][ T38] 9 locks held by syz-executor/5599: [ 425.895279][ T38] 6 locks held by kworker/1:15/6249: [ 425.895289][ T38] #0: ffff88801a765938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 425.895333][ T38] #1: ffffc900061f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 425.895384][ T38] #2: ffff88802a566210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 425.895432][ T38] #3: ffff88802a5d7658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20ad/0x4cf0 [ 425.895481][ T38] #4: ffff888029c02e58 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20e1/0x4cf0 [ 425.895530][ T38] #5: ffffffff8ee58400 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1800 [ 425.895573][ T38] 2 locks held by syz.0.1592/9153: [ 425.895584][ T38] #0: ffffffff8f6220e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 425.895633][ T38] #1: ffffffff8e4e94b8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b9/0xc30 [ 425.895718][ T38] 2 locks held by syz.5.2252/10556: [ 425.895730][ T38] #0: ffffffff8f6220e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 425.895773][ T38] #1: ffffffff8e4e94b8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 425.895820][ T38] 2 locks held by syz.2.3144/12437: [ 425.895830][ T38] #0: ffffffff8f6220e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 425.895876][ T38] #1: ffffffff8e4e94b8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 425.895958][ T38] 3 locks held by syz.1.3270/12705: [ 425.895969][ T38] #0: ffffffff8f6220e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 425.896012][ T38] #1: ffff888039984928 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 425.896050][ T38] #2: ffffffff8e4e94b8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdb/0x13f0 [ 425.896098][ T38] 6 locks held by syz.6.4350/15026: [ 425.896108][ T38] [ 425.896112][ T38] ============================================= [ 425.896112][ T38] [ 425.896120][ T38] NMI backtrace for cpu 0 [ 425.896133][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 425.896154][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 425.896164][ T38] Call Trace: [ 425.896172][ T38] [ 425.896180][ T38] dump_stack_lvl+0xe8/0x150 [ 425.896210][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 425.896234][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 425.896317][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 425.896350][ T38] sys_info+0x135/0x170 [ 425.896395][ T38] watchdog+0xfd7/0x1030 [ 425.896449][ T38] ? watchdog+0x1c7/0x1030 [ 425.896480][ T38] kthread+0x388/0x470 [ 425.896506][ T38] ? __pfx_watchdog+0x10/0x10 [ 425.896531][ T38] ? __pfx_kthread+0x10/0x10 [ 425.896559][ T38] ret_from_fork+0x514/0xb70 [ 425.896590][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 425.896618][ T38] ? __switch_to+0xc89/0x1420 [ 425.896646][ T38] ? __pfx_kthread+0x10/0x10 [ 425.896674][ T38] ret_from_fork_asm+0x1a/0x30 [ 425.896703][ T38] [ 425.896710][ T38] Sending NMI from CPU 0 to CPUs 1: [ 425.896743][ C1] NMI backtrace for cpu 1 [ 425.896765][ C1] CPU: 1 UID: 0 PID: 15026 Comm: syz.6.4350 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 425.896787][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 425.896798][ C1] RIP: 0010:__lock_acquire+0x17a5/0x2ce0 [ 425.896820][ C1] Code: 00 00 0f 83 84 01 00 00 4e 8b 3c e5 a0 a9 a5 95 ff c0 25 ff 0f 00 00 89 05 48 47 05 14 4d 85 ff 0f 84 ac 01 00 00 49 8b 47 10 <48> 85 c0 0f 84 38 0d 00 00 8b 0d 34 47 05 14 39 48 5c 0f 84 6a ff [ 425.896845][ C1] RSP: 0000:ffffc9001d4c71c8 EFLAGS: 00000082 [ 425.896861][ C1] RAX: ffffffff934ac5f8 RBX: 00000000000003cd RCX: ffffffff9633d768 [ 425.896875][ C1] RDX: ffffffff964d6948 RSI: ffff8880312a4af8 RDI: 00000000000003cd [ 425.896888][ C1] RBP: a845dd3fd526ac6c R08: ffffc9001d4c7190 R09: 0000000000000020 [ 425.896901][ C1] R10: 0000000000000000 R11: ffffffff81a13580 R12: 000000000000059e [ 425.896914][ C1] R13: ffff8880312a4af8 R14: ffff8880312a3e00 R15: ffffffff9633d768 [ 425.896928][ C1] FS: 00007fe8892c66c0(0000) GS:ffff888125d49000(0000) knlGS:0000000000000000 [ 425.896944][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.896957][ C1] CR2: 00002000000d3000 CR3: 000000003973a000 CR4: 00000000003526f0 [ 425.896973][ C1] Call Trace: [ 425.896980][ C1] [ 425.896999][ C1] ? ktime_get_update_offsets_now+0x5d/0x3e0 [ 425.897054][ C1] lock_acquire+0x106/0x350 [ 425.897071][ C1] ? ktime_get_update_offsets_now+0x5d/0x3e0 [ 425.897098][ C1] ? ktime_get_update_offsets_now+0x5d/0x3e0 [ 425.897119][ C1] seqcount_lockdep_reader_access+0x55/0x100 [ 425.897168][ C1] ? ktime_get_update_offsets_now+0x5d/0x3e0 [ 425.897190][ C1] ktime_get_update_offsets_now+0x5d/0x3e0 [ 425.897215][ C1] __hrtimer_rearm_deferred+0xde/0x430 [ 425.897243][ C1] finish_task_switch+0x3e3/0xc60 [ 425.897264][ C1] __schedule+0x16e4/0x5500 [ 425.897294][ C1] ? __lock_acquire+0x683/0x2ce0 [ 425.897318][ C1] ? search_extable+0x8f/0xd0 [ 425.897336][ C1] ? __pfx___schedule+0x10/0x10 [ 425.897363][ C1] ? __lock_acquire+0x683/0x2ce0 [ 425.897386][ C1] preempt_schedule_irq+0x4d/0xa0 [ 425.897414][ C1] irqentry_exit+0x14f/0x8f0 [ 425.897441][ C1] ? trace_irq_disable+0x3b/0x140 [ 425.897473][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 425.897494][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 425.897512][ C1] Code: ff ff ff e8 61 3c a1 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 2b a7 fc 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 d0 05 a5 09 cc 48 8d 3d b8 17 12 [ 425.897528][ C1] RSP: 0000:ffffc9001d4c7800 EFLAGS: 00000286 [ 425.897543][ C1] RAX: 92bc5978f8459800 RBX: 0000000000000000 RCX: 0000000000000046 [ 425.897555][ C1] RDX: 00000000d97d4069 RSI: ffffffff8daf19a2 RDI: ffffffff8bca6280 [ 425.897569][ C1] RBP: ffffffff8214a496 R08: ffffffff8214a496 R09: 0000000000000000 [ 425.897582][ C1] R10: 0000000000008000 R11: ffff888063b2acb0 R12: 0000000000000001 [ 425.897594][ C1] R13: ffff888063b2acb0 R14: 0000000000000001 R15: 0000000000000246 [ 425.897607][ C1] ? lock_mm_and_find_vma+0x36/0x340 [ 425.897651][ C1] ? lock_mm_and_find_vma+0x36/0x340 [ 425.897677][ C1] down_read_trylock+0x102/0x170 [ 425.897721][ C1] ? lock_mm_and_find_vma+0x36/0x340 [ 425.897741][ C1] ? __pfx_down_read_trylock+0x10/0x10 [ 425.897770][ C1] lock_mm_and_find_vma+0x36/0x340 [ 425.897789][ C1] ? do_user_addr_fault+0x2d5/0x1340 [ 425.897878][ C1] do_user_addr_fault+0x341/0x1340 [ 425.897912][ C1] ? trace_page_fault_kernel+0x84/0x1e0 [ 425.897942][ C1] exc_page_fault+0x6a/0xc0 [ 425.897970][ C1] asm_exc_page_fault+0x26/0x30 [ 425.897988][ C1] RIP: 0010:fault_in_readable+0x8e/0x130 [ 425.898035][ C1] Code: a9 00 00 00 0f 01 cb 0f ae e8 4d 85 f6 40 0f 95 c5 4c 89 ff 4c 89 f6 e8 10 95 b1 ff 4d 39 f7 0f 97 c0 40 84 c5 74 43 4d 89 f5 <41> 8a 45 00 88 44 24 07 49 81 e5 00 f0 ff ff 4d 8d a5 00 10 00 00 [ 425.898051][ C1] RSP: 0000:ffffc9001d4c7aa8 EFLAGS: 00050202 [ 425.898066][ C1] RAX: ffffffff8213a601 RBX: 0000000000000240 RCX: ffff8880312a3e00 [ 425.898079][ C1] RDX: 0000000000000002 RSI: 00002000000d3000 RDI: 00002000000d3240 [ 425.898092][ C1] RBP: ffffc9001d4c7c01 R08: 0000000000000000 R09: 0000000000000000 [ 425.898103][ C1] R10: 0000000000000100 R11: 0000000000000001 R12: 00007ffffffff000 [ 425.898115][ C1] R13: 00002000000d3000 R14: 00002000000d3000 R15: 00002000000d3240 [ 425.898132][ C1] ? fault_in_readable+0x81/0x130 [ 425.898162][ C1] ? fault_in_readable+0x80/0x130 [ 425.898191][ C1] fault_in_iov_iter_readable+0x1c8/0x310 [ 425.898245][ C1] generic_perform_write+0x75b/0x8b0 [ 425.898317][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 425.898346][ C1] ? generic_write_checks_count+0x426/0x530 [ 425.898413][ C1] ? file_update_time_flags+0x3b9/0x4b0 [ 425.898438][ C1] shmem_file_write_iter+0xfb/0x120 [ 425.898503][ C1] vfs_write+0x61e/0xbb0 [ 425.898530][ C1] ? __pfx_vfs_write+0x10/0x10 [ 425.898553][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 425.898581][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 425.898610][ C1] ? mutex_lock_nested+0x152/0x1d0 [ 425.898630][ C1] ? fdget_pos+0x252/0x320 [ 425.898652][ C1] ksys_write+0x156/0x270 [ 425.898674][ C1] ? __pfx_ksys_write+0x10/0x10 [ 425.898699][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.898718][ C1] do_syscall_64+0x174/0x580 [ 425.898746][ C1] ? trace_irq_disable+0x3b/0x140 [ 425.898776][ C1] ? clear_bhb_loop+0x40/0x90 [ 425.898797][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.898816][ C1] RIP: 0033:0x7fe88b06de59 [ 425.898831][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.898852][ C1] RSP: 002b:00007fe8892c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 425.898870][ C1] RAX: ffffffffffffffda RBX: 00007fe88b2f5fa0 RCX: 00007fe88b06de59 [ 425.898884][ C1] RDX: 000000003af4701e RSI: 0000200000000240 RDI: 0000000000000003 [ 425.898896][ C1] RBP: 00007fe88b103e6f R08: 0000000000000000 R09: 0000000000000000 [ 425.898907][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.898918][ C1] R13: 00007fe88b2f6038 R14: 00007fe88b2f5fa0 R15: 00007ffe40a8d428 [ 425.898940][ C1] [ 426.021646][ T6249] usb 5-1: Using ep0 maxpacket: 32 [ 426.073016][ T6249] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 426.170957][ T6249] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 426.171039][ T6249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.171091][ T6249] usb 5-1: Product: syz [ 426.171138][ T6249] usb 5-1: Manufacturer: syz [ 426.171170][ T6249] usb 5-1: SerialNumber: syz [ 426.314129][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 426.314200][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 426.314280][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 426.314322][ T38] Call Trace: [ 426.314345][ T38] [ 426.314374][ T38] vpanic+0x56c/0xa60 [ 426.314445][ T38] ? __pfx___schedule+0x10/0x10 [ 426.314531][ T38] ? __pfx_vpanic+0x10/0x10 [ 426.314614][ T38] panic+0xc5/0xd0 [ 426.314668][ T38] ? __pfx_panic+0x10/0x10 [ 426.314720][ T38] ? preempt_schedule_common+0x82/0xd0 [ 426.314805][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 426.314873][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 426.314956][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 426.315046][ T38] watchdog+0x1030/0x1030 [ 426.315151][ T38] ? watchdog+0x1c7/0x1030 [ 426.315254][ T38] kthread+0x388/0x470 [ 426.315348][ T38] ? __pfx_watchdog+0x10/0x10 [ 426.315429][ T38] ? __pfx_kthread+0x10/0x10 [ 426.315539][ T38] ret_from_fork+0x514/0xb70 [ 426.315644][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 426.315729][ T38] ? __switch_to+0xc89/0x1420 [ 426.315812][ T38] ? __pfx_kthread+0x10/0x10 [ 426.315891][ T38] ret_from_fork_asm+0x1a/0x30 [ 426.315986][ T38] [ 426.316605][ T38] Kernel Offset: disabled