last executing test programs: 7m23.684813419s ago: executing program 0 (id=2592): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002940), 0x109001, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0xffffffffffffffff) 7m23.258516929s ago: executing program 0 (id=2596): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xa83e, 0x1e1c63) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000040)={0x0, 0x1000000, 0x101, 0x0, {0xfffffffa, 0x8, 0x7}}) 7m23.009606791s ago: executing program 0 (id=2600): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00'}) 7m22.125143189s ago: executing program 0 (id=2610): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x100f8, 0x0, 0x601, 0xffffffff}) 7m21.874732216s ago: executing program 0 (id=2613): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x40d, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40288}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x4004044) 7m21.458432783s ago: executing program 0 (id=2618): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 7m5.237091811s ago: executing program 32 (id=2618): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2m40.114661464s ago: executing program 3 (id=5663): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 2m39.6451576s ago: executing program 3 (id=5669): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x68, 0x5, 0x4, 0xc1, 0xffffffffffffffff, 0x1000000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r0, &(0x7f0000000580), 0x0}, 0x20) 2m39.192647132s ago: executing program 3 (id=5674): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x1) 2m38.833672304s ago: executing program 3 (id=5678): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 2m38.421221354s ago: executing program 3 (id=5683): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rt_sigsuspend(0x0, 0x0) 2m37.893290747s ago: executing program 3 (id=5688): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x4a301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x40, &(0x7f0000000000)={0x20, 0x1, 0x1, 0x12}, 0x8, 0x203ffffd, 0x300, 0x0, 0x3, 0x20000, 0x0}) 2m21.761816513s ago: executing program 33 (id=5688): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x4a301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x40, &(0x7f0000000000)={0x20, 0x1, 0x1, 0x12}, 0x8, 0x203ffffd, 0x300, 0x0, 0x3, 0x20000, 0x0}) 4.540711968s ago: executing program 2 (id=7128): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 4.237502535s ago: executing program 2 (id=7132): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7010040000dd04000000060001000500000008000900"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 3.969070066s ago: executing program 6 (id=7134): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x800000000, &(0x7f0000006680)) exit(0x100000000000035) 3.950813924s ago: executing program 4 (id=7135): syz_io_uring_setup(0xec6, 0x0, 0x0, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x342a1a05475d305d) 3.837137802s ago: executing program 2 (id=7137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) 3.573079476s ago: executing program 2 (id=7140): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000092ffe706e53f070c0000002a9000070900be0083000000000b09b80b32a2fdb30096"], 0x0}, 0x0) 3.564508449s ago: executing program 4 (id=7141): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 3.292196539s ago: executing program 4 (id=7144): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5) syz_io_uring_complete(r0, 0x0) 2.690005686s ago: executing program 6 (id=7149): r0 = syz_io_uring_setup(0x111, &(0x7f0000000200)={0x0, 0xfec9, 0x10000, 0x1, 0x3d4}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0xffffffff, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x4}, 0x1) 2.28425505s ago: executing program 4 (id=7151): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x1}, 0x6}) 2.206823719s ago: executing program 5 (id=7153): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x3, 0x6, 0x10, 0x5e}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 1.797411521s ago: executing program 5 (id=7156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701000008000000b702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 1.46134629s ago: executing program 6 (id=7157): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80f01, 0x10) 1.444420671s ago: executing program 5 (id=7158): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r0, &(0x7f0000000b00)=[{&(0x7f0000000580)='p', 0x1}, {&(0x7f0000000a80)='>', 0x1}, {&(0x7f00000006c0)='b', 0x1}, {&(0x7f0000000c40)="ba", 0x1}, {&(0x7f0000000240)='p', 0x1}, {&(0x7f0000000900)="cc", 0x1}, {&(0x7f0000000d40)='r', 0x1}], 0x7, 0xc) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000140)) 1.382008824s ago: executing program 1 (id=7159): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000000), 0x1, 0x0, 0x27}, 0x0) close(r1) 1.259244481s ago: executing program 2 (id=7160): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001880)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xd6}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc001}, 0x40c0) 1.201565142s ago: executing program 4 (id=7161): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) 1.096739772s ago: executing program 1 (id=7162): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b800800090000000000080009000000000008000a"], 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.081273918s ago: executing program 6 (id=7163): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0x5, 0x3, 0xffff, 0xfff, 'syz1\x00', 0x2}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc1105511, &(0x7f0000000040)) 1.039671752s ago: executing program 5 (id=7164): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, 0x0, 0x5}, 0x80, 0x0}, 0x20008110) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 856.385386ms ago: executing program 1 (id=7165): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) 854.851275ms ago: executing program 2 (id=7166): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0xfc, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x3, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' 16'], 0x0, 0x0, 0x0, 0x0}, 0x0) 762.60981ms ago: executing program 5 (id=7167): r0 = epoll_create(0x8) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x202, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x10000005}) 688.962914ms ago: executing program 6 (id=7168): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r1, 0xba87317d461c07c9, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4) 527.073834ms ago: executing program 1 (id=7169): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r0 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, 0x0) mq_getsetattr(r0, &(0x7f0000001080)={0x0, 0x20000000006, 0x8001, 0x55e}, 0x0) 413.638543ms ago: executing program 5 (id=7170): syz_usb_connect$midi(0x2, 0x3a, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x499, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0x1, 0xb, 0x50, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0xb5, [@midi_out_jack={0x7, 0x24, 0x3, 0x4, 0x3, 0x0, [], 0x7c}], [{{0x9, 0x5, 0x521aede4e6243dd5, 0x3, 0x8, 0x3, 0x2, 0x7, {0x6, 0x25, 0x1, 0x2, "8385"}}}]}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x21, &(0x7f0000000240)={0x5, 0xf, 0x21, 0x4, [@ptm_cap={0x3}, @generic={0x3, 0x10, 0xb}, @ssp_cap={0xc, 0x10, 0xa, 0x11, 0x0, 0x9, 0xf, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x46, 0x7, 0x605}]}}) pipe(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 226.446127ms ago: executing program 1 (id=7171): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000002820010000000000000000000000000000fe8000000000000000000000000000bb00000005000010000a000001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80, 0x2f}, 0x6e6bb2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0xfffd, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 137.831125ms ago: executing program 6 (id=7172): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x6, r0, 0x0, 0x0, 0xbc5, 0x0, 0x0, r0}]) 778.239µs ago: executing program 1 (id=7173): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000001000000000"], 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) 0s ago: executing program 4 (id=7174): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d00000012000030001280080001006873720024000280"], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): omm="syz.2.3828" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 498.449856][ T37] audit: type=1326 audit(1777715307.032:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14053 comm="syz.2.3828" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 498.449911][ T37] audit: type=1326 audit(1777715307.032:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14053 comm="syz.2.3828" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 498.449957][ T37] audit: type=1326 audit(1777715307.032:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14053 comm="syz.2.3828" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 499.657238][T14088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.332473][T14111] netlink: 'syz.5.3856': attribute type 3 has an invalid length. [ 500.982588][T14128] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 [ 502.150204][T14159] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3880'. [ 502.156934][T14159] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3880'. [ 502.517507][T14166] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3884'. [ 503.741915][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3900'. [ 503.975263][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 503.975283][ T37] audit: type=1326 audit(1777715312.205:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14204 comm="syz.2.3903" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 503.975333][ T37] audit: type=1326 audit(1777715312.205:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14204 comm="syz.2.3903" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 504.050201][ T37] audit: type=1326 audit(1777715312.270:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14204 comm="syz.2.3903" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 504.050260][ T37] audit: type=1326 audit(1777715312.270:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14204 comm="syz.2.3903" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 504.050307][ T37] audit: type=1326 audit(1777715312.270:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14204 comm="syz.2.3903" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 504.050355][ T37] audit: type=1326 audit(1777715312.270:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14204 comm="syz.2.3903" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 504.050402][ T37] audit: type=1326 audit(1777715312.270:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14204 comm="syz.2.3903" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 504.050448][ T37] audit: type=1326 audit(1777715312.270:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14204 comm="syz.2.3903" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 504.731553][T14227] IPv6: NLM_F_CREATE should be specified when creating new route [ 505.365657][T14249] netlink: zone id is out of range [ 505.365677][T14249] netlink: zone id is out of range [ 505.365686][T14249] netlink: get zone limit has 4 unknown bytes [ 506.417944][T14277] team0: entered promiscuous mode [ 506.418844][T14277] team_slave_0: entered promiscuous mode [ 506.419112][T14277] team_slave_1: entered promiscuous mode [ 508.168920][ T5729] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 508.331565][ T5729] usb 3-1: Using ep0 maxpacket: 32 [ 508.334228][ T5729] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 508.334256][ T5729] usb 3-1: config 0 has no interface number 0 [ 508.369144][ T5729] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 508.369177][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.369197][ T5729] usb 3-1: Product: syz [ 508.369212][ T5729] usb 3-1: Manufacturer: syz [ 508.369226][ T5729] usb 3-1: SerialNumber: syz [ 508.424778][ T5729] usb 3-1: config 0 descriptor?? [ 508.452191][ T5729] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 508.452222][ T5729] usb 3-1: selecting invalid altsetting 1 [ 508.452240][ T5729] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 508.554599][ T5729] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 508.558487][ T5729] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 508.558620][ T5729] usb 3-1: media controller created [ 508.625677][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.790807][ T9] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 508.962445][ T9] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 508.962473][ T9] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 508.962490][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 508.962523][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 508.962562][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 508.962582][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 508.962602][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 508.985310][ T9] usb 4-1: string descriptor 0 read error: -22 [ 508.985463][ T9] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 508.985487][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.016828][ T9] usb 4-1: config 0 descriptor?? [ 509.041194][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 509.041239][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 509.085019][ T5729] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 509.204482][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 509.285731][ T5729] usb 3-1: USB disconnect, device number 57 [ 509.365396][T14345] dlm: non-version read from control device 0 [ 509.635444][ T5850] usb 4-1: USB disconnect, device number 49 [ 510.440780][ T2389] pvrusb2: request_firmware fatal error with code=-110 [ 510.440800][ T2389] pvrusb2: Failure uploading firmware1 [ 510.440826][ T2389] pvrusb2: Device initialization was not successful. [ 510.440835][ T2389] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 510.440844][ T2389] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 510.440884][ T2389] pvrusb2: Failed to submit write-control URB status=-19 [ 510.443306][ T31] pvrusb2: Device being rendered inoperable [ 510.447551][ T2389] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 510.447577][ T2389] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 512.153387][T14408] syz.2.4002: vmalloc error: size 18446744073699065856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 512.250494][T14408] CPU: 0 UID: 0 PID: 14408 Comm: syz.2.4002 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 512.250523][T14408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 512.250536][T14408] Call Trace: [ 512.250544][T14408] [ 512.250553][T14408] dump_stack_lvl+0xe8/0x150 [ 512.250586][T14408] warn_alloc+0x263/0x3e0 [ 512.250610][T14408] ? unwind_get_return_address+0x4d/0x90 [ 512.250637][T14408] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 512.250660][T14408] ? arch_stack_walk+0xfb/0x150 [ 512.250688][T14408] ? 0xffffffffff600000 [ 512.250707][T14408] ? __pfx_warn_alloc+0x10/0x10 [ 512.250737][T14408] ? __pfx_stack_trace_save+0x10/0x10 [ 512.250758][T14408] ? __pfx_hlock_conflict+0x10/0x10 [ 512.250800][T14408] __vmalloc_node_range_noprof+0x132/0x1750 [ 512.250824][T14408] ? add_lock_to_list+0xc7/0x100 [ 512.250857][T14408] ? lockdep_unlock+0x5d/0xd0 [ 512.250879][T14408] ? __lock_acquire+0x146e/0x2cf0 [ 512.250911][T14408] ? 0xffffffffff600000 [ 512.250947][T14408] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 512.250981][T14408] ? 0xffffffffff600000 [ 512.250997][T14408] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 512.251041][T14408] vmalloc_noprof+0xb2/0xe0 [ 512.251064][T14408] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 512.251091][T14408] ? 0xffffffffff600000 [ 512.251107][T14408] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 512.251134][T14408] ? dvb_demux_do_ioctl+0x323/0x540 [ 512.251163][T14408] dvb_demux_do_ioctl+0x460/0x540 [ 512.251188][T14408] ? 0xffffffffff600000 [ 512.251206][T14408] ? 0xffffffffff600000 [ 512.251222][T14408] dvb_usercopy+0x199/0x2e0 [ 512.251243][T14408] ? 0xffffffffff600000 [ 512.251259][T14408] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 512.251284][T14408] ? __pfx_dvb_usercopy+0x10/0x10 [ 512.251318][T14408] ? __fget_files+0x3a6/0x420 [ 512.251337][T14408] ? __fget_files+0x2a/0x420 [ 512.251355][T14408] ? 0xffffffffff600000 [ 512.251371][T14408] ? 0xffffffffff600000 [ 512.251387][T14408] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 512.251410][T14408] ? 0xffffffffff600000 [ 512.251427][T14408] dvb_demux_ioctl+0x29/0x40 [ 512.251453][T14408] __se_sys_ioctl+0xff/0x170 [ 512.251492][T14408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.251514][T14408] do_syscall_64+0x15f/0xf80 [ 512.251536][T14408] ? trace_irq_disable+0x3b/0x140 [ 512.251560][T14408] ? clear_bhb_loop+0x40/0x90 [ 512.251584][T14408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.251604][T14408] RIP: 0033:0x7ff405b1cdd9 [ 512.251624][T14408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.251642][T14408] RSP: 002b:00007ff403d6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 512.251667][T14408] RAX: ffffffffffffffda RBX: 00007ff405d95fa0 RCX: 00007ff405b1cdd9 [ 512.251684][T14408] RDX: ffffffffff600000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 512.251698][T14408] RBP: 00007ff405bb2d69 R08: 0000000000000000 R09: 0000000000000000 [ 512.251712][T14408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.251724][T14408] R13: 00007ff405d96038 R14: 00007ff405d95fa0 R15: 00007ffceffafbe8 [ 512.251747][T14408] ? 0xffffffffff600000 [ 512.251771][T14408] [ 512.284865][T14408] Mem-Info: [ 512.284880][T14408] active_anon:197 inactive_anon:6851 isolated_anon:2900 [ 512.284880][T14408] active_file:6098 inactive_file:46920 isolated_file:0 [ 512.284880][T14408] unevictable:768 dirty:389 writeback:0 [ 512.284880][T14408] slab_reclaimable:11480 slab_unreclaimable:108973 [ 512.284880][T14408] mapped:33067 shmem:4152 pagetables:1602 [ 512.284880][T14408] sec_pagetables:0 bounce:0 [ 512.284880][T14408] kernel_misc_reclaimable:0 [ 512.284880][T14408] free:1298621 free_pcp:8701 free_cma:0 [ 512.284963][T14408] Node 0 active_anon:788kB inactive_anon:27404kB active_file:24068kB inactive_file:187680kB unevictable:1536kB isolated(anon):11600kB isolated(file):0kB mapped:132208kB dirty:1556kB writeback:0kB shmem:15072kB kernel_stack:13508kB pagetables:6248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 512.285015][T14408] Node 1 active_anon:0kB inactive_anon:0kB active_file:324kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 512.285062][T14408] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 512.285121][T14408] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 512.285156][T14408] Node 0 DMA32 free:1241180kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:788kB inactive_anon:27404kB active_file:24068kB inactive_file:187680kB unevictable:1536kB writepending:1556kB zspages:0kB present:3129332kB managed:2566596kB mlocked:0kB bounce:0kB free_pcp:34672kB local_pcp:18592kB free_cma:0kB [ 512.285217][T14408] lowmem_reserve[]: 0 0 0 0 0 [ 512.285248][T14408] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:216kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 512.285301][T14408] lowmem_reserve[]: 0 0 0 0 0 [ 512.285333][T14408] Node 1 Normal free:3937944kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:324kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:132kB local_pcp:132kB free_cma:0kB [ 512.285390][T14408] lowmem_reserve[]: 0 0 0 0 0 [ 512.285422][T14408] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 512.321333][T14408] Node 0 DMA32: 2082*4kB (U) 2512*8kB (UME) 1495*16kB (UME) 284*32kB (UME) 310*64kB (UME) 729*128kB (UME) 478*256kB (UME) 322*512kB (UME) 153*1024kB (UME) 50*2048kB (UME) 127*4096kB (UM) = 1241080kB [ 512.321523][T14408] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 512.321620][T14408] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 6*16kB (U) 9*32kB (U) 3*64kB (U) 4*128kB (UM) 2*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3937892kB [ 512.321776][T14408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 512.321810][T14408] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 512.321826][T14408] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 512.321841][T14408] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 512.321856][T14408] 57187 total pagecache pages [ 512.321864][T14408] 0 pages in swap cache [ 512.321870][T14408] Free swap = 124996kB [ 512.321877][T14408] Total swap = 124996kB [ 512.321885][T14408] 2097051 pages RAM [ 512.321891][T14408] 0 pages HighMem/MovableOnly [ 512.321899][T14408] 423733 pages reserved [ 512.321905][T14408] 0 pages cma reserved [ 512.433137][T14412] capability: warning: `syz.4.4004' uses deprecated v2 capabilities in a way that may be insecure [ 515.517715][T14477] netlink: 'syz.5.4035': attribute type 1 has an invalid length. [ 516.954328][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4048'. [ 517.168082][T14509] netlink: 'syz.5.4050': attribute type 61 has an invalid length. [ 517.478111][T14514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4054'. [ 517.859773][T14524] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4058'. [ 519.750033][T14588] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4090'. [ 519.750066][T14588] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4090'. [ 519.750083][T14588] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4090'. [ 520.031872][T14588] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4090'. [ 520.031904][T14588] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4090'. [ 520.031922][T14588] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4090'. [ 521.222311][ T5729] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 521.388019][ T5729] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.388084][ T5729] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 521.388107][ T5729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.492008][ T5729] usb 6-1: config 0 descriptor?? [ 521.993176][ T5729] ath6kl: Failed to read usb control message: -71 [ 521.993234][ T5729] ath6kl: Unable to read the bmi data from the device: -71 [ 521.993248][ T5729] ath6kl: Unable to recv target info: -71 [ 521.994259][ T5729] ath6kl: Failed to init ath6kl core: -71 [ 521.994858][ T5729] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 522.079509][ T5729] usb 6-1: USB disconnect, device number 5 [ 522.900015][ T37] audit: type=1326 audit(1777715329.902:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14661 comm="syz.5.4125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 522.901153][ T37] audit: type=1326 audit(1777715329.912:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14661 comm="syz.5.4125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 522.920065][ T37] audit: type=1326 audit(1777715329.912:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14661 comm="syz.5.4125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 522.929452][ T37] audit: type=1326 audit(1777715329.930:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14661 comm="syz.5.4125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 522.929502][ T37] audit: type=1326 audit(1777715329.930:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14661 comm="syz.5.4125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 522.929543][ T37] audit: type=1326 audit(1777715329.930:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14661 comm="syz.5.4125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 522.929583][ T37] audit: type=1326 audit(1777715329.930:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14661 comm="syz.5.4125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 522.933760][ T37] audit: type=1326 audit(1777715329.940:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14661 comm="syz.5.4125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 522.933811][ T37] audit: type=1326 audit(1777715329.940:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14661 comm="syz.5.4125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 523.109166][T14668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4127'. [ 523.109254][T14668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4127'. [ 524.236309][T14705] dummy0: entered promiscuous mode [ 524.236340][T14705] dummy0: entered allmulticast mode [ 525.247807][T14731] comedi comedi0: Minor -1 is invalid! [ 525.390568][T14738] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4154'. [ 525.612272][T14746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.199793][T14767] netlink: 'syz.5.4171': attribute type 3 has an invalid length. [ 526.704331][T14787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4179'. [ 526.846719][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.846803][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.847753][ T1334] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 528.700328][T14839] netlink: 'syz.5.4207': attribute type 7 has an invalid length. [ 528.794699][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4209'. [ 529.585035][T14867] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 530.529852][T14891] openvswitch: netlink: IP tunnel dst address not specified [ 530.704054][T14897] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 530.745913][T14897] bond1 (unregistering): Released all slaves [ 531.949345][T14935] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4253'. [ 532.041158][T14939] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4254'. [ 532.178238][T14939] team_slave_0: left promiscuous mode [ 532.252391][T14939] team0 (unregistering): Port device team_slave_0 removed [ 532.253039][T14939] team_slave_1: left promiscuous mode [ 532.352926][T14939] team0 (unregistering): Port device team_slave_1 removed [ 533.196632][ T5729] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 533.249110][ T4981] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 533.308507][T14976] netlink: 'syz.4.4272': attribute type 10 has an invalid length. [ 533.361713][ T5729] usb 6-1: config index 0 descriptor too short (expected 64653, got 45) [ 533.375140][ T5729] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 533.375174][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.375197][ T5729] usb 6-1: Product: syz [ 533.375213][ T5729] usb 6-1: Manufacturer: syz [ 533.375228][ T5729] usb 6-1: SerialNumber: syz [ 533.423763][ T4981] usb 4-1: Using ep0 maxpacket: 32 [ 533.433729][ T4981] usb 4-1: unable to get BOS descriptor or descriptor too short [ 533.441920][ T4981] usb 4-1: config 3 has an invalid interface number: 2 but max is 1 [ 533.441947][ T4981] usb 4-1: config 3 has an invalid interface number: 19 but max is 1 [ 533.441966][ T4981] usb 4-1: config 3 has no interface number 0 [ 533.441981][ T4981] usb 4-1: config 3 has no interface number 1 [ 533.442024][ T4981] usb 4-1: config 3 interface 19 has no altsetting 0 [ 533.456216][ T4981] usb 4-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=20.c1 [ 533.456262][ T4981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.456281][ T4981] usb 4-1: Product: syz [ 533.456295][ T4981] usb 4-1: Manufacturer: syz [ 533.456318][ T4981] usb 4-1: SerialNumber: syz [ 533.543507][T14979] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 533.753666][ T5729] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 533.753735][ T5729] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 533.753758][ T5729] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 533.863705][ T4981] rtsx_usb 4-1:3.2: probe with driver rtsx_usb failed with error -22 [ 533.915699][ T5729] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 533.939463][ T4981] rtsx_usb 4-1:3.19: probe with driver rtsx_usb failed with error -22 [ 533.971832][ T5729] usb 6-1: USB disconnect, device number 6 [ 534.005650][ T4981] usb 4-1: USB disconnect, device number 50 [ 536.287752][T15055] xfrm0 speed is unknown, defaulting to 1000 [ 538.256557][ T37] audit: type=1326 audit(1777715344.270:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15117 comm="syz.5.4343" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 538.256619][ T37] audit: type=1326 audit(1777715344.270:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15117 comm="syz.5.4343" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 538.331567][ T37] audit: type=1326 audit(1777715344.336:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15117 comm="syz.5.4343" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 538.331628][ T37] audit: type=1326 audit(1777715344.345:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15117 comm="syz.5.4343" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 538.331677][ T37] audit: type=1326 audit(1777715344.345:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15117 comm="syz.5.4343" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f708f17e647 code=0x7ffc0000 [ 538.331721][ T37] audit: type=1326 audit(1777715344.345:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15117 comm="syz.5.4343" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f708f13d60e code=0x7ffc0000 [ 538.331770][ T37] audit: type=1326 audit(1777715344.345:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15117 comm="syz.5.4343" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f708f13d60e code=0x7ffc0000 [ 538.331816][ T37] audit: type=1326 audit(1777715344.345:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15117 comm="syz.5.4343" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f708f13d60e code=0x7ffc0000 [ 538.350250][ T37] audit: type=1326 audit(1777715344.354:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15117 comm="syz.5.4343" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f708f13d60e code=0x7ffc0000 [ 538.452490][ T37] audit: type=1326 audit(1777715344.429:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15117 comm="syz.5.4343" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 539.353416][T15147] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 539.979032][T15167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4366'. [ 542.103608][T15234] netlink: 6060 bytes leftover after parsing attributes in process `syz.5.4398'. [ 542.437291][T15242] binder: 15240:15242 ioctl c0306201 200000000540 returned -22 [ 542.536935][T15246] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4405'. [ 545.643392][T15313] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 545.707418][T15313] bond2 (unregistering): Released all slaves [ 547.129799][T15360] netlink: 448 bytes leftover after parsing attributes in process `syz.5.4460'. [ 547.424104][T15369] IPv6: NLM_F_CREATE should be specified when creating new route [ 547.424251][T15369] netlink: 'syz.2.4464': attribute type 1 has an invalid length. [ 547.521055][ T5729] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 547.695240][ T5729] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 547.695275][ T5729] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 547.695296][ T5729] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 547.695334][ T5729] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 547.695388][ T5729] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 547.695411][ T5729] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 547.695434][ T5729] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 547.739830][ T5729] usb 6-1: string descriptor 0 read error: -22 [ 547.740018][ T5729] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 547.740045][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.816428][ T5729] usb 6-1: config 0 descriptor?? [ 547.829464][ T5729] hub 6-1:0.0: bad descriptor, ignoring hub [ 547.829508][ T5729] hub 6-1:0.0: probe with driver hub failed with error -5 [ 547.856339][ T5729] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input19 [ 548.175091][ T4981] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 548.203691][ T5729] usb 6-1: USB disconnect, device number 7 [ 548.344177][ T4981] usb 3-1: Using ep0 maxpacket: 8 [ 548.369082][ T4981] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 548.369115][ T4981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 548.369136][ T4981] usb 3-1: Product: syz [ 548.369169][ T4981] usb 3-1: Manufacturer: syz [ 548.369183][ T4981] usb 3-1: SerialNumber: syz [ 548.481062][ T4981] usb 3-1: config 0 descriptor?? [ 548.517180][ T4981] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 548.562288][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4475'. [ 549.093814][ T4981] gspca_sn9c2028: read1 error -71 [ 549.094346][ T4981] gspca_sn9c2028: read1 error -71 [ 549.094444][ T4981] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 549.110480][ T4981] usb 3-1: USB disconnect, device number 58 [ 550.441647][T15425] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4492'. [ 550.765124][T15435] process 'syz.4.4496' launched '/dev/fd/3' with NULL argv: empty string added [ 551.733348][T15462] netlink: zone id is out of range [ 551.733366][T15462] netlink: zone id is out of range [ 551.733375][T15462] netlink: zone id is out of range [ 551.733384][T15462] netlink: zone id is out of range [ 551.733392][T15462] netlink: zone id is out of range [ 551.733401][T15462] netlink: zone id is out of range [ 551.733409][T15462] netlink: zone id is out of range [ 551.733417][T15462] netlink: zone id is out of range [ 551.733425][T15462] netlink: zone id is out of range [ 551.733433][T15462] netlink: zone id is out of range [ 552.700604][T15492] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4525'. [ 552.701182][T15492] unsupported nlmsg_type 40 [ 553.887422][T15526] Zero length message leads to an empty skb [ 554.017832][T15532] ieee802154 phy0 wpan0: encryption failed: -22 [ 554.715085][T15552] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4554'. [ 557.286872][T15624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4590'. [ 557.651235][T15620] bond1 (unregistering): Released all slaves [ 557.653695][T15635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4596'. [ 559.806077][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4624'. [ 560.581376][T15717] cifs: Unknown parameter ' [ 560.581376][T15717] @"2ach}#IT&:"1:ӭ'4,Zz-#L<]%gC [ 560.581376][T15717] SȘ8)' [ 560.662200][T15720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4636'. [ 562.633363][T15731] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.665473][T15731] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.370729][T15731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.428025][T15731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.436321][ T3373] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.485585][ T3373] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.485640][ T3373] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.485679][ T3373] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.342749][T15832] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.344526][T15832] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.508225][T15832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.535485][T15832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.141495][ T1371] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.142494][ T1371] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.142540][ T1371] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.142577][ T1371] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.359426][T15917] netlink: 'syz.4.4733': attribute type 1 has an invalid length. [ 572.799279][T15932] net_ratelimit: 16 callbacks suppressed [ 572.799301][T15932] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 573.085885][T15939] tmpfs: Bad value for 'mpol' [ 573.768396][T15963] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4751'. [ 576.075752][ T4981] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 576.103609][ T2389] pvrusb2: request_firmware fatal error with code=-110 [ 576.103627][ T2389] pvrusb2: Failure uploading firmware1 [ 576.118586][ T2389] pvrusb2: Device initialization was not successful. [ 576.118599][ T2389] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 576.118608][ T2389] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 576.147842][ T31] pvrusb2: Device being rendered inoperable [ 576.242608][ T4981] usb 4-1: Using ep0 maxpacket: 32 [ 576.258216][ T4981] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 576.258249][ T4981] usb 4-1: config 0 has no interface number 0 [ 576.258284][ T4981] usb 4-1: config 0 interface 255 has no altsetting 0 [ 576.273877][ T4981] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 576.273908][ T4981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.274031][ T4981] usb 4-1: Product: syz [ 576.274044][ T4981] usb 4-1: Manufacturer: syz [ 576.274057][ T4981] usb 4-1: SerialNumber: syz [ 576.310185][ T4981] usb 4-1: config 0 descriptor?? [ 576.355104][ T4981] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 576.437421][ T4981] dvb-usb: bulk message failed: -22 (4/0) [ 576.437445][ T4981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 576.437599][ T4981] dvb-usb: bulk message failed: -22 (5/0) [ 576.437615][ T4981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 576.999739][ T4981] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 577.001623][ T4981] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 577.001687][ T4981] usb 4-1: media controller created [ 577.136578][T16062] netlink: 'syz.4.4792': attribute type 3 has an invalid length. [ 577.317929][ T4981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 577.615422][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 577.684827][ T4981] ttusb2: set interface to alts=3 failed [ 577.802552][ T9] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 577.802584][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.802605][ T9] usb 6-1: config 0 has no interface number 0 [ 577.821538][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 577.821574][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.821595][ T9] usb 6-1: Product: syz [ 577.821609][ T9] usb 6-1: Manufacturer: syz [ 577.821624][ T9] usb 6-1: SerialNumber: syz [ 577.893855][ T9] usb 6-1: config 0 descriptor?? [ 578.085547][T16074] bond3 (unregistering): Released all slaves [ 578.116361][ T4981] DVB: Unable to find symbol tda10086_attach() [ 578.116379][ T4981] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 578.135001][ T4981] dvb-usb: bulk message failed: -22 (4/0) [ 578.135389][ T4981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 578.135946][ T4981] dvb-usb: bulk message failed: -22 (5/0) [ 578.135965][ T4981] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 578.136560][ T4981] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 578.250999][ T4981] usb 4-1: USB disconnect, device number 51 [ 578.439708][ T9] usb 6-1: probing VID:PID(0424:012C) Ё [ 578.656473][ T9] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 578.721650][ T9] vub300 6-1:0.133: probe with driver vub300 failed with error -22 [ 578.781798][ T9] usb 6-1: USB disconnect, device number 8 [ 579.216929][ T4981] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 579.973131][T16127] ip6gre1: entered promiscuous mode [ 579.973174][T16127] ip6gre1: entered allmulticast mode [ 580.109156][T16133] futex_wake_op: syz.2.4821 tries to shift op by 32; fix this program [ 580.816731][T16150] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4828'. [ 581.190132][T16161] 9pnet_virtio: no channels available for device syz [ 582.622794][T16206] snd_dummy snd_dummy.0: control 2:6:7:syz1:2047 is already present [ 584.510140][T16272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.933515][T16286] QAT: failed to copy from user cfg_data. [ 585.208676][ T5850] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 585.252993][T16297] netlink: 'syz.5.4900': attribute type 9 has an invalid length. [ 585.368583][ T5850] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 585.368615][ T5850] usb 3-1: config 0 has no interface number 0 [ 585.373430][ T5850] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 585.373464][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.373485][ T5850] usb 3-1: Product: syz [ 585.373498][ T5850] usb 3-1: Manufacturer: syz [ 585.373512][ T5850] usb 3-1: SerialNumber: syz [ 585.440562][ T5850] usb 3-1: config 0 descriptor?? [ 585.743432][ T5850] uvcvideo 3-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 585.743592][ T5850] uvcvideo 3-1:0.64: No valid video chain found. [ 585.771785][ T5850] usb 3-1: USB disconnect, device number 59 [ 588.625450][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 588.625470][ T37] audit: type=1326 audit(1777715391.386:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16381 comm="syz.3.4943" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563f75cdd9 code=0x7ffc0000 [ 588.625524][ T37] audit: type=1326 audit(1777715391.386:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16381 comm="syz.3.4943" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563f75cdd9 code=0x7ffc0000 [ 588.637149][ T37] audit: type=1326 audit(1777715391.395:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16381 comm="syz.3.4943" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563f75cdd9 code=0x7ffc0000 [ 588.637210][ T37] audit: type=1326 audit(1777715391.395:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16381 comm="syz.3.4943" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563f75cdd9 code=0x7ffc0000 [ 588.644500][ T37] audit: type=1326 audit(1777715391.405:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16381 comm="syz.3.4943" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f563f75cdd9 code=0x7ffc0000 [ 588.823791][ T37] audit: type=1326 audit(1777715391.564:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16381 comm="syz.3.4943" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f563f71d60e code=0x7ffc0000 [ 588.847397][ T37] audit: type=1326 audit(1777715391.592:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16381 comm="syz.3.4943" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f563f71d60e code=0x7ffc0000 [ 588.847450][ T37] audit: type=1326 audit(1777715391.592:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16381 comm="syz.3.4943" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563f75cdd9 code=0x7ffc0000 [ 588.847491][ T37] audit: type=1326 audit(1777715391.592:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16381 comm="syz.3.4943" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563f75cdd9 code=0x7ffc0000 [ 588.870631][ T37] audit: type=1326 audit(1777715391.611:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16381 comm="syz.3.4943" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f563f75cdd9 code=0x7ffc0000 [ 589.289558][T16399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4951'. [ 589.289609][T16399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4951'. [ 590.306713][T16434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4968'. [ 591.563528][T16478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4989'. [ 591.563567][T16478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4989'. [ 591.752300][T16478] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 592.523833][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 592.523916][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.426110][T16527] netlink: 'syz.2.5012': attribute type 1 has an invalid length. [ 593.426136][T16527] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5012'. [ 594.007154][T16540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5019'. [ 594.100152][T16547] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.5022'. [ 594.100187][T16547] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 594.452810][T16557] netlink: 'syz.2.5028': attribute type 15 has an invalid length. [ 595.138783][ T5850] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 595.299099][ T5850] usb 6-1: Using ep0 maxpacket: 32 [ 595.304452][ T5850] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 595.304483][ T5850] usb 6-1: config 0 has no interface number 0 [ 595.304529][ T5850] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 595.304551][ T5850] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 595.304577][ T5850] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 595.304678][ T5850] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 595.319472][ T5850] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 595.319503][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.319521][ T5850] usb 6-1: Product: syz [ 595.319535][ T5850] usb 6-1: Manufacturer: syz [ 595.319548][ T5850] usb 6-1: SerialNumber: syz [ 595.343936][ T5850] usb 6-1: config 0 descriptor?? [ 595.380605][ T5850] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input21 [ 595.776590][ T5729] usb 6-1: USB disconnect, device number 9 [ 596.798579][T16621] netlink: 'syz.3.5058': attribute type 4 has an invalid length. [ 596.798604][T16621] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.5058'. [ 598.839582][T16668] overlayfs: missing 'workdir' [ 599.526288][T16692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5094'. [ 599.526314][T16692] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5094'. [ 599.863526][T16699] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5099'. [ 599.863554][T16699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 601.014459][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 601.014479][ T37] audit: type=1326 audit(1777715402.976:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16732 comm="syz.2.5113" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 601.014532][ T37] audit: type=1326 audit(1777715402.976:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16732 comm="syz.2.5113" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 601.033008][ T37] audit: type=1326 audit(1777715402.994:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16732 comm="syz.2.5113" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 601.033820][ T37] audit: type=1326 audit(1777715402.994:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16732 comm="syz.2.5113" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 601.035830][ T37] audit: type=1326 audit(1777715402.994:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16732 comm="syz.2.5113" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 601.035877][ T37] audit: type=1326 audit(1777715402.994:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16732 comm="syz.2.5113" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 601.036123][ T37] audit: type=1326 audit(1777715402.994:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16732 comm="syz.2.5113" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 601.039465][ T37] audit: type=1326 audit(1777715403.004:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16732 comm="syz.2.5113" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 601.045176][ T37] audit: type=1326 audit(1777715403.004:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16732 comm="syz.2.5113" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff405b1cdd9 code=0x7ffc0000 [ 601.311189][T16739] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5116'. [ 601.311220][T16739] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5116'. [ 604.350388][T16823] netlink: 'syz.3.5155': attribute type 3 has an invalid length. [ 604.350413][T16823] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5155'. [ 605.102557][T16847] netlink: 'syz.4.5165': attribute type 2 has an invalid length. [ 605.658563][ T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 605.819006][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 605.829553][ T31] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 605.844842][ T31] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 605.844875][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.844896][ T31] usb 5-1: Product: syz [ 605.844911][ T31] usb 5-1: Manufacturer: syz [ 605.844927][ T31] usb 5-1: SerialNumber: syz [ 605.901014][ T31] r8152-cfgselector 5-1: Unknown version 0x0000 [ 605.901044][ T31] r8152-cfgselector 5-1: config 0 descriptor?? [ 606.381383][ T9] r8152-cfgselector 5-1: USB disconnect, device number 11 [ 606.611910][T16881] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5183'. [ 606.611941][T16881] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5183'. [ 607.109079][T16893] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5188'. [ 607.635417][T16903] geneve3: entered promiscuous mode [ 607.635448][T16903] geneve3: entered allmulticast mode [ 607.683531][ T1371] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 607.683869][ T1371] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 607.683913][ T1371] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 607.683952][ T1371] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 608.954004][T16943] Unsupported ieee802154 address type: 0 [ 609.108215][T16946] netlink: 'syz.5.5214': attribute type 1 has an invalid length. [ 609.478589][T16956] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 610.269601][T16978] openvswitch: netlink: IP tunnel dst address not specified [ 611.094679][T16998] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5240'. [ 611.539518][ T5729] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 611.710925][ T5729] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 611.710959][ T5729] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 611.710979][ T5729] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 611.711031][ T5729] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 611.711058][ T5729] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 611.773607][ T5729] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 611.773643][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 611.773664][ T5729] usb 6-1: Product: syz [ 611.773679][ T5729] usb 6-1: Manufacturer: syz [ 611.863105][ T5729] cdc_wdm 6-1:1.0: skipping garbage [ 611.863130][ T5729] cdc_wdm 6-1:1.0: skipping garbage [ 611.867104][T16929] syz.3.5206 (16929): drop_caches: 2 [ 611.898146][ T5729] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 611.898171][ T5729] cdc_wdm 6-1:1.0: Unknown control protocol [ 612.319332][ T9] usb 6-1: USB disconnect, device number 10 [ 613.839211][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5275'. [ 613.839439][T17070] xfrm0: entered promiscuous mode [ 613.839463][T17070] xfrm0: entered allmulticast mode [ 613.927237][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5275'. [ 614.217542][T17077] tmpfs: Bad value for 'mpol' [ 614.833577][T17098] netlink: 'syz.3.5290': attribute type 1 has an invalid length. [ 614.833605][T17098] nbd: illegal input index 393224 [ 614.971529][T17102] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 616.253756][T17140] JFS: charset not found [ 616.893319][T17170] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5324'. [ 617.421327][T17184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.913769][T17205] Sensor A: ================= START STATUS ================= [ 617.913792][T17205] Sensor A: Test Pattern: 75% Colorbar [ 617.913817][T17205] Sensor A: Show Information: All [ 617.913836][T17205] Sensor A: Vertical Flip: false [ 617.913865][T17205] Sensor A: Horizontal Flip: false [ 617.913885][T17205] Sensor A: Brightness: 128 [ 617.913905][T17205] Sensor A: Contrast: 128 [ 617.913923][T17205] Sensor A: Hue: 0 [ 617.913941][T17205] Sensor A: Saturation: 128 [ 617.913959][T17205] Sensor A: Pixel Rate: 160000000 [ 617.913981][T17205] Sensor A: Horizontal Blanking: 800 [ 617.914000][T17205] Sensor A: Vertical Blanking: 3223 [ 617.914022][T17205] Sensor A: ================== END STATUS ================== [ 618.998458][ T31] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 619.010295][T17236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.160203][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 619.178984][ T31] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 619.179018][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.179038][ T31] usb 6-1: config 0 has no interface number 0 [ 619.192006][T17236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.229804][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 619.229841][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.229863][ T31] usb 6-1: Product: syz [ 619.229877][ T31] usb 6-1: Manufacturer: syz [ 619.229890][ T31] usb 6-1: SerialNumber: syz [ 619.285650][ T31] usb 6-1: config 0 descriptor?? [ 619.529431][ T31] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 619.529555][ T31] uvcvideo 6-1:0.31: No valid video chain found. [ 619.816033][ T5733] usb 6-1: USB disconnect, device number 11 [ 620.047329][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 620.206546][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 620.209092][ T31] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 620.209121][ T31] usb 5-1: config 2 has no interface number 0 [ 620.209170][ T31] usb 5-1: config 2 interface 31 has no altsetting 0 [ 620.269921][ T31] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 620.269957][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.269977][ T31] usb 5-1: Product: syz [ 620.269991][ T31] usb 5-1: Manufacturer: syz [ 620.270006][ T31] usb 5-1: SerialNumber: syz [ 620.845115][ T31] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 620.879532][ T31] usb 5-1: USB disconnect, device number 12 [ 621.915069][T17310] tc_dump_action: action bad kind [ 622.915424][T17348] team0: entered allmulticast mode [ 622.915450][T17348] team_slave_0: entered allmulticast mode [ 622.915477][T17348] team_slave_1: entered allmulticast mode [ 622.962112][T17349] 9p: Unknown access argument : -22 [ 622.987391][T17348] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.357441][T17360] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5411'. [ 625.175923][T17405] netlink: 'syz.2.5428': attribute type 1 has an invalid length. [ 625.971386][T17398] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 625.971417][T17398] netdevsim netdevsim5: Falling back to sysfs fallback for:  [ 626.764986][ T5729] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 626.943503][ T5729] usb 4-1: Using ep0 maxpacket: 32 [ 626.974098][ T5729] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 626.974136][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 627.015644][ T5729] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 627.015677][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.015708][ T5729] usb 4-1: Product: syz [ 627.015723][ T5729] usb 4-1: Manufacturer: syz [ 627.015737][ T5729] usb 4-1: SerialNumber: syz [ 627.087667][ T5729] usb 4-1: config 0 descriptor?? [ 627.101232][ T5729] hub 4-1:0.0: bad descriptor, ignoring hub [ 627.101279][ T5729] hub 4-1:0.0: probe with driver hub failed with error -5 [ 627.122354][ T5729] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 627.539882][ T5733] usb 4-1: USB disconnect, device number 52 [ 627.539971][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 629.019885][T17501] netlink: 312 bytes leftover after parsing attributes in process `syz.5.5469'. [ 631.070222][T17555] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5495'. [ 631.070257][T17555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5495'. [ 631.070272][T17555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5495'. [ 631.151067][T17557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.274747][T17563] xfrm0 speed is unknown, defaulting to 1000 [ 632.725709][T17613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5524'. [ 632.883250][T17618] netlink: 'syz.4.5528': attribute type 16 has an invalid length. [ 632.883276][T17618] netlink: 'syz.4.5528': attribute type 17 has an invalid length. [ 633.029009][T17626] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5530'. [ 633.388345][T17642] openvswitch: netlink: Flow key attr not present in new flow. [ 634.231363][T17658] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 634.231394][T17658] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 634.514607][T17666] sctp: [Deprecated]: syz.2.5549 (pid 17666) Use of int in maxseg socket option. [ 634.514607][T17666] Use struct sctp_assoc_value instead [ 634.720312][T17676] netlink: 'syz.5.5552': attribute type 1 has an invalid length. [ 635.618919][T17707] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5568'. [ 635.619279][T17707] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 635.691006][T17709] ieee802154 phy0 wpan0: encryption failed: -22 [ 636.024196][T17720] syz.3.5572 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 636.408538][T17738] veth1_to_batadv: entered allmulticast mode [ 636.752305][T17744] block nbd0: not configured, cannot reconfigure [ 637.858041][T17789] sctp: [Deprecated]: syz.4.5609 (pid 17789) Use of struct sctp_assoc_value in delayed_ack socket option. [ 637.858041][T17789] Use struct sctp_sack_info instead [ 638.125995][ T37] audit: type=1326 audit(1777715437.688:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.5613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563f75cdd9 code=0x7ffc0000 [ 638.126183][ T37] audit: type=1326 audit(1777715437.688:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.5613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563f75cdd9 code=0x7ffc0000 [ 638.207286][ T37] audit: type=1326 audit(1777715437.754:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.5613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563f75cdd9 code=0x7ffc0000 [ 638.207347][ T37] audit: type=1326 audit(1777715437.763:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.5613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563f75cdd9 code=0x7ffc0000 [ 638.207394][ T37] audit: type=1326 audit(1777715437.763:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.5613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f563f75cdd9 code=0x7ffc0000 [ 638.207441][ T37] audit: type=1326 audit(1777715437.763:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.5613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563f75cdd9 code=0x7ffc0000 [ 638.214579][ T37] audit: type=1326 audit(1777715437.763:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.5613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f563f75cdd9 code=0x7ffc0000 [ 638.214642][ T37] audit: type=1326 audit(1777715437.773:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.5613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563f75cdd9 code=0x7ffc0000 [ 638.224651][ T37] audit: type=1326 audit(1777715437.782:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.5613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f563f75cdd9 code=0x7ffc0000 [ 638.538206][T17811] netlink: 'syz.4.5622': attribute type 27 has an invalid length. [ 638.538233][T17811] netlink: 'syz.4.5622': attribute type 3 has an invalid length. [ 638.538246][T17811] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5622'. [ 639.459763][T17846] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 640.147452][T17866] Unsupported ieee802154 address type: 0 [ 640.207443][ T37] audit: type=1326 audit(1777715439.625:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17867 comm="syz.5.5644" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 643.235286][T17952] vivid-000: ================= START STATUS ================= [ 643.235310][T17952] vivid-000: Test Pattern: 75% Colorbar [ 643.235334][T17952] vivid-000: Fill Percentage of Frame: 100 [ 643.235355][T17952] vivid-000: Horizontal Movement: No Movement [ 643.235376][T17952] vivid-000: Vertical Movement: No Movement [ 643.235395][T17952] vivid-000: OSD Text Mode: All [ 643.235414][T17952] vivid-000: Show Border: false [ 643.235433][T17952] vivid-000: Show Square: false [ 643.235451][T17952] vivid-000: Sensor Flipped Horizontally: false [ 643.235471][T17952] vivid-000: Sensor Flipped Vertically: false [ 643.235490][T17952] vivid-000: Insert SAV Code in Image: true [ 643.235509][T17952] vivid-000: Insert EAV Code in Image: false [ 643.235529][T17952] vivid-000: Insert Video Guard Band: false [ 643.235547][T17952] vivid-000: Reduced Framerate: false [ 643.235565][T17952] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 643.235595][T17952] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 643.235614][T17952] vivid-000: Enable Capture Cropping: true [ 643.235630][T17952] vivid-000: Enable Capture Composing: true [ 643.235648][T17952] vivid-000: Enable Capture Scaler: true [ 643.235665][T17952] vivid-000: Timestamp Source: End of Frame [ 643.235683][T17952] vivid-000: Colorspace: sRGB [ 643.235701][T17952] vivid-000: Transfer Function: Default [ 643.235718][T17952] vivid-000: Y'CbCr Encoding: Default [ 643.235736][T17952] vivid-000: HSV Encoding: Hue 0-179 [ 643.235754][T17952] vivid-000: Quantization: Default [ 643.235772][T17952] vivid-000: Apply Alpha To Red Only: false [ 643.235791][T17952] vivid-000: Standard Aspect Ratio: 4x3 [ 643.235810][T17952] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 643.235833][T17952] vivid-000: DV Timings: 640x480p59 inactive [ 643.235855][T17952] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 643.235874][T17952] vivid-000: Maximum EDID Blocks: 256 [ 643.235892][T17952] vivid-000: Limited RGB Range (16-235): false [ 643.235910][T17952] vivid-000: Rx RGB Quantization Range: Automatic [ 643.235928][T17952] vivid-000: Power Present: 0x00000001 [ 643.235949][T17952] tpg source WxH: 640x360 (Y'CbCr) [ 643.235962][T17952] tpg field: 1 [ 643.235970][T17952] tpg crop: (0,0)/640x360 [ 643.235983][T17952] tpg compose: (0,0)/640x360 [ 643.235996][T17952] tpg colorspace: 6 [ 643.236003][T17952] tpg transfer function: 3/0 [ 643.236013][T17952] tpg Y'CbCr encoding: 1/0 [ 643.236022][T17952] tpg quantization: 2/0 [ 643.236030][T17952] tpg RGB range: 0/2 [ 643.236039][T17952] vivid-000: ================== END STATUS ================== [ 643.533355][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 643.533376][ T37] audit: type=1326 audit(1777715442.740:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17956 comm="syz.5.5682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 643.533429][ T37] audit: type=1326 audit(1777715442.740:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17956 comm="syz.5.5682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 643.570516][ T37] audit: type=1326 audit(1777715442.786:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17956 comm="syz.5.5682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 643.570571][ T37] audit: type=1326 audit(1777715442.786:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17956 comm="syz.5.5682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 643.570622][ T37] audit: type=1326 audit(1777715442.786:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17956 comm="syz.5.5682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 643.570663][ T37] audit: type=1326 audit(1777715442.786:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17956 comm="syz.5.5682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 643.570703][ T37] audit: type=1326 audit(1777715442.786:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17956 comm="syz.5.5682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 643.570744][ T37] audit: type=1326 audit(1777715442.786:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17956 comm="syz.5.5682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 644.636597][T17990] /dev/nullb0: Can't open blockdev [ 645.244874][ T5733] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 645.425628][ T5733] usb 5-1: Using ep0 maxpacket: 16 [ 645.428324][ T5733] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 645.428501][ T5733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 645.428540][ T5733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 645.432188][ T5733] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 645.432222][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.432241][ T5733] usb 5-1: Product: syz [ 645.432256][ T5733] usb 5-1: Manufacturer: syz [ 645.432270][ T5733] usb 5-1: SerialNumber: syz [ 645.438048][T18003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 645.454005][ T5733] usb 5-1: config 0 descriptor?? [ 645.484381][ T5733] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 645.771283][ T5733] usb 5-1: USB disconnect, device number 13 [ 646.897392][T18041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5717'. [ 646.941652][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5719'. [ 646.941690][T18044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5719'. [ 647.271365][T18052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5722'. [ 647.531842][T18059] ubi16: attaching mtd0 [ 647.642010][T18059] ubi16: scanning is finished [ 647.906494][ T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 648.082232][ T9] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 648.082265][ T9] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 648.082286][ T9] usb 6-1: config 8 has no interface number 0 [ 648.082333][ T9] usb 6-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 648.082363][ T9] usb 6-1: config 8 interface 80 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 648.083031][ T9] usb 6-1: config 8 interface 80 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 648.083081][ T9] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 648.083105][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.098051][T18059] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 648.098079][T18059] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 648.098098][T18059] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 648.098114][T18059] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 648.099740][T18059] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 648.099760][T18059] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 648.099777][T18059] ubi16: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2830487286 [ 648.099796][T18059] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 648.112260][T18070] ubi16: background thread "ubi_bgt16d" started, PID 18070 [ 648.271186][ T9] usb 6-1: NFC: intf ffff88803d3bc000 id ffffffff8e9627e0 [ 648.568441][ T31] usb 6-1: USB disconnect, device number 12 [ 650.155119][T18114] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5753'. [ 650.155152][T18114] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5753'. [ 651.626877][T18156] netlink: 'syz.4.5772': attribute type 3 has an invalid length. [ 652.878928][T18191] netlink: 'syz.5.5790': attribute type 1 has an invalid length. [ 652.879021][T18191] netlink: 'syz.5.5790': attribute type 1 has an invalid length. [ 652.879037][T18191] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5790'. [ 653.213730][T18199] No source specified [ 654.593722][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5814'. [ 654.692115][T18241] vxcan2: entered allmulticast mode [ 656.084246][ T31] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 656.254710][ T31] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 656.254744][ T31] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 656.254764][ T31] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 656.254785][ T31] usb 5-1: config 220 has no interface number 2 [ 656.254862][ T31] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 656.254891][ T31] usb 5-1: config 220 interface 0 has no altsetting 0 [ 656.254910][ T31] usb 5-1: config 220 interface 76 has no altsetting 0 [ 656.254927][ T31] usb 5-1: config 220 interface 1 has no altsetting 0 [ 656.275577][ T31] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 656.275608][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.275628][ T31] usb 5-1: Product: syz [ 656.275642][ T31] usb 5-1: Manufacturer: syz [ 656.275656][ T31] usb 5-1: SerialNumber: syz [ 656.599554][ T31] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 656.599593][ T31] uvcvideo 5-1:220.0: No valid video chain found. [ 656.599659][ T31] usb 5-1: selecting invalid altsetting 0 [ 656.694371][ T31] usb 5-1: selecting invalid altsetting 0 [ 656.694413][ T31] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 656.724529][ T31] usb 5-1: USB disconnect, device number 14 [ 657.446102][T18298] overlay: Bad value for 'workdir' [ 657.464943][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 657.637195][ T10] usb 3-1: config 2 has an invalid interface number: 140 but max is 0 [ 657.637230][ T10] usb 3-1: config 2 has no interface number 0 [ 657.637280][ T10] usb 3-1: config 2 interface 140 altsetting 13 bulk endpoint 0x9 has invalid maxpacket 16 [ 657.637307][ T10] usb 3-1: config 2 interface 140 has no altsetting 0 [ 657.643478][ T10] usb 3-1: New USB device found, idVendor=0707, idProduct=0201, bcdDevice=db.15 [ 657.643511][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.643531][ T10] usb 3-1: Product: syz [ 657.643547][ T10] usb 3-1: Manufacturer: syz [ 657.643562][ T10] usb 3-1: SerialNumber: syz [ 657.727880][T18292] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 657.986891][ T10] pegasus 3-1:2.140: Missing or invalid endpoints [ 658.030178][ T10] usb 3-1: USB disconnect, device number 60 [ 658.134406][T18304] bond2: Unable to set down delay as MII monitoring is disabled [ 658.205321][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 658.205399][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 658.235122][T18304] bond2 (unregistering): Released all slaves [ 659.156167][T18332] netlink: 4975 bytes leftover after parsing attributes in process `syz.5.5857'. [ 659.156211][T18332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.912177][T18374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5878'. [ 660.912204][T18374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5878'. [ 661.228905][ T5726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 661.312508][ T5726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 661.325309][ T5726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 661.355985][ T5726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 661.378188][ T5726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 661.474254][T18387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5883'. [ 661.477814][T18387] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5883'. [ 663.016649][T18427] fuse: Invalid rootmode [ 663.549725][T18376] xfrm0 speed is unknown, defaulting to 1000 [ 663.605782][ T5740] Bluetooth: hci0: command tx timeout [ 665.812650][ T5740] Bluetooth: hci0: command tx timeout [ 666.606548][T18376] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.606665][T18376] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.609167][T18376] bridge_slave_0: entered allmulticast mode [ 666.619487][T18376] bridge_slave_0: entered promiscuous mode [ 666.691745][T18376] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.691826][T18376] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.692013][T18376] bridge_slave_1: entered allmulticast mode [ 666.693958][T18376] bridge_slave_1: entered promiscuous mode [ 666.920080][T18376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.937653][T18376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.486179][T18376] team0: Port device team_slave_0 added [ 667.584706][T18376] team0: Port device team_slave_1 added [ 667.894294][T18376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.894312][T18376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.894341][T18376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.924060][T18376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.924078][T18376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.924104][T18376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.039682][ T5740] Bluetooth: hci0: command tx timeout [ 668.690680][T18376] hsr_slave_0: entered promiscuous mode [ 668.696344][T18376] hsr_slave_1: entered promiscuous mode [ 668.700863][T18376] debugfs: 'hsr0' already exists in 'hsr' [ 668.700892][T18376] Cannot create hsr debugfs directory [ 669.258753][ T5733] IPVS: starting estimator thread 0... [ 669.354689][T18557] IPVS: using max 8 ests per chain, 19200 per kthread [ 670.261811][ T5740] Bluetooth: hci0: command tx timeout [ 670.287719][ T31] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 670.287765][ T31] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 670.287791][ T31] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 670.287816][ T31] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 670.287840][ T31] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 670.287865][ T31] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 670.287890][ T31] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 670.287915][ T31] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 670.287940][ T31] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 670.287965][ T31] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 670.460810][ T31] hid-generic 0002:0004:0009.0001: hidraw0: HID v0.04 Device [syz0] on syz0 [ 670.874876][T18583] netlink: 'syz.5.5965': attribute type 2 has an invalid length. [ 670.956875][T18579] fido_id[18579]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 671.233016][T18587] comedi comedi3: pcmda12: I/O base address or length out of range [ 672.810694][T18626] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 672.874030][T18627] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5987'. [ 673.499352][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 673.678759][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 673.690789][ T10] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 673.690823][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.690842][ T10] usb 3-1: Product: syz [ 673.690855][ T10] usb 3-1: Manufacturer: syz [ 673.690869][ T10] usb 3-1: SerialNumber: syz [ 673.770933][ T10] usb 3-1: config 0 descriptor?? [ 673.792142][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 673.844521][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 673.950428][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 673.951352][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 673.951425][ T10] usb 3-1: media controller created [ 674.078775][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 674.487901][T18376] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 674.554984][T18376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 674.562736][T18376] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 674.607689][ T10] usb 3-1: selecting invalid altsetting 7 [ 674.607713][ T10] cxusb: set interface failed [ 674.607727][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 674.786777][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 674.786797][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 674.950078][T18376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 674.966888][ T10] rc_core: IR keymap rc-dvico-portable not found [ 674.966909][ T10] Registered IR keymap rc-empty [ 675.031784][T18376] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 675.126853][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 675.249346][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input25 [ 675.302351][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 675.302379][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 675.350293][ T10] usb 3-1: USB disconnect, device number 61 [ 675.399393][T18376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 675.512001][T18376] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 675.693130][T18376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 675.878870][T18658] xfrm0 speed is unknown, defaulting to 1000 [ 676.280399][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 676.687800][T18686] netlink: 'syz.5.6010': attribute type 1 has an invalid length. [ 678.641654][ T5850] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 678.665215][T18376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.814419][ T5850] usb 6-1: Using ep0 maxpacket: 32 [ 678.836847][ T5850] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 678.836881][ T5850] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.836901][ T5850] usb 6-1: config 0 has no interface number 0 [ 678.836971][ T5850] usb 6-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 678.836999][ T5850] usb 6-1: config 0 interface 85 has no altsetting 0 [ 678.843985][ T5850] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 678.844028][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.844050][ T5850] usb 6-1: Product: syz [ 678.844065][ T5850] usb 6-1: Manufacturer: syz [ 678.844206][ T5850] usb 6-1: SerialNumber: syz [ 678.961236][ T5850] usb 6-1: config 0 descriptor?? [ 679.064267][ T5850] appletouch 6-1:0.85: Could not find int-in endpoint [ 679.064308][ T5850] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 679.077695][ T5850] usbhid 6-1:0.85: couldn't find an input interrupt endpoint [ 679.179127][T18739] ALSA: mixer_oss: invalid OSS volume '' [ 679.180054][T18376] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.282214][ T185] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.292408][ T185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.605993][ T185] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.606156][ T185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.267064][T18756] netlink: 'syz.2.6039': attribute type 1 has an invalid length. [ 680.267090][T18756] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6039'. [ 681.617128][ T5733] usb 6-1: USB disconnect, device number 13 [ 685.819054][T18849] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 686.285829][T18376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.268823][ T5729] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 687.459597][ T5729] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 687.459632][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.459654][ T5729] usb 6-1: Product: syz [ 687.459668][ T5729] usb 6-1: Manufacturer: syz [ 687.459683][ T5729] usb 6-1: SerialNumber: syz [ 687.766604][ T5729] usb 6-1: config 0 descriptor?? [ 688.289077][ T5729] usb 6-1: ignoring: probably an ADSL modem [ 688.734287][ T5729] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 688.783159][ T5729] usb 6-1: USB disconnect, device number 14 [ 688.920151][T18376] veth0_vlan: entered promiscuous mode [ 688.972795][T18376] veth1_vlan: entered promiscuous mode [ 689.346024][T18376] veth0_macvtap: entered promiscuous mode [ 689.381258][T18376] veth1_macvtap: entered promiscuous mode [ 689.775902][T18376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.825554][T18376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.967109][ T3316] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.967166][ T3316] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.967204][ T3316] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.967240][ T3316] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.438824][T18928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.991134][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.991165][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.758037][T18965] netlink: 'syz.4.6130': attribute type 4 has an invalid length. [ 692.758062][T18965] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6130'. [ 693.280960][ T3316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.280984][ T3316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.305246][ T1602] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 693.473502][ T1602] usb 3-1: Using ep0 maxpacket: 32 [ 693.476416][ T1602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.476451][ T1602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.476492][ T1602] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 693.476517][ T1602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.539323][ T1602] usb 3-1: config 0 descriptor?? [ 693.566351][ T1602] hub 3-1:0.0: USB hub found [ 693.794992][ T1602] hub 3-1:0.0: 1 port detected [ 693.872972][T18988] netlink: 'syz.4.6141': attribute type 32 has an invalid length. [ 693.872996][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6141'. [ 693.994286][ T5733] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 694.015469][T18988] bond2: Setting coupled_control to off (0) [ 694.051413][ T1602] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 694.051445][ T1602] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 694.078160][ T1602] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 694.078186][ T1602] usbhid 3-1:0.0: can't add hid device: -22 [ 694.078302][ T1602] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 694.153451][ T5733] usb 6-1: Using ep0 maxpacket: 32 [ 694.238069][ T5733] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.238644][ T1602] usb 3-1: USB disconnect, device number 62 [ 694.261206][ T5733] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 694.261240][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.261262][ T5733] usb 6-1: Product: syz [ 694.261277][ T5733] usb 6-1: Manufacturer: syz [ 694.261293][ T5733] usb 6-1: SerialNumber: syz [ 694.415380][ T5733] usb 6-1: config 0 descriptor?? [ 694.788036][ T5733] usb 6-1: probing VID:PID(0424:012C) [ 694.802801][ T5733] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 694.864546][ T5733] vub300 6-1:0.0: probe with driver vub300 failed with error -22 [ 694.883202][ T5733] usb 6-1: USB disconnect, device number 15 [ 695.422414][T18999] netlink: set zone limit has 4 unknown bytes [ 697.460851][T19063] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6175'. [ 697.740785][T19069] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.6178'. [ 697.839670][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6179'. [ 698.617301][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 698.659159][T19079] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.6183'. [ 698.793198][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 698.796983][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 698.802043][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.802074][ T10] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 698.844709][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 698.844743][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.844764][ T10] usb 7-1: Product: syz [ 698.844778][ T10] usb 7-1: Manufacturer: syz [ 698.844793][ T10] usb 7-1: SerialNumber: syz [ 699.306102][ T10] usb 7-1: interface 2 not found [ 699.372031][ T10] usb 7-1: USB disconnect, device number 2 [ 701.016855][ T5850] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 701.183835][ T5850] usb 7-1: config 29 has an invalid interface number: 91 but max is 0 [ 701.183867][ T5850] usb 7-1: config 29 has no interface number 0 [ 701.183900][ T5850] usb 7-1: config 29 interface 91 has no altsetting 0 [ 701.203692][ T5850] usb 7-1: New USB device found, idVendor=50ff, idProduct=2657, bcdDevice=56.04 [ 701.203734][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.203753][ T5850] usb 7-1: Product: syz [ 701.203765][ T5850] usb 7-1: Manufacturer: syz [ 701.203778][ T5850] usb 7-1: SerialNumber: syz [ 701.772968][ T5850] cdc_eem 7-1:29.91: probe with driver cdc_eem failed with error -22 [ 701.796105][ T5850] usb 7-1: USB disconnect, device number 3 [ 702.985375][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6235'. [ 705.554788][T19255] netlink: 'syz.4.6266': attribute type 1 has an invalid length. [ 705.554811][T19255] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.6266'. [ 707.583441][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 707.751959][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 707.755560][ T31] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 707.755592][ T31] usb 7-1: config 0 has no interface number 0 [ 707.785343][ T31] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 707.785375][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.785396][ T31] usb 7-1: Product: syz [ 707.785410][ T31] usb 7-1: Manufacturer: syz [ 707.785422][ T31] usb 7-1: SerialNumber: syz [ 707.824631][ T31] usb 7-1: config 0 descriptor?? [ 707.862080][ T31] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 707.862120][ T31] usb 7-1: selecting invalid altsetting 1 [ 707.862136][ T31] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 707.883631][ T31] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 707.891567][ T31] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 707.891640][ T31] usb 7-1: media controller created [ 707.999912][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 709.345293][T19297] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 709.371489][ T31] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 709.371555][ T31] zl10353_read_register: readreg error (reg=127, ret==-71) [ 709.376691][ T31] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 709.827009][ T31] usb 7-1: USB disconnect, device number 4 [ 712.078022][T19363] hfs: can't find a HFS filesystem on dev nullb0 [ 712.814654][T19384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6328'. [ 713.413896][ T37] audit: type=1326 audit(1777715508.115:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19398 comm="syz.6.6337" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd49b9cdd9 code=0x0 [ 714.596951][T19424] bond2: option lacp_rate: invalid value (112) [ 714.650620][T19424] bond2 (unregistering): Released all slaves [ 717.238591][T19489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6378'. [ 718.026218][T19509] netlink: 392 bytes leftover after parsing attributes in process `syz.5.6387'. [ 718.945866][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 718.999928][ T5850] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 719.116476][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 719.122483][ T10] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 719.122520][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.166239][ T5850] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 719.166279][ T5850] usb 5-1: config 0 interface 0 has no altsetting 0 [ 719.166314][ T5850] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 719.166339][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.221827][ T10] usb 3-1: config 0 descriptor?? [ 719.231913][ T5850] usb 5-1: config 0 descriptor?? [ 719.233029][T19526] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 719.513462][ T10] usb 3-1: string descriptor 0 read error: -71 [ 719.513524][ T10] uvcvideo 3-1:0.0: Found Unit with invalid ID 0 [ 719.513586][ T10] uvcvideo 3-1:0.0: Found UVC 0.00 device (2833:0201) [ 719.513688][ T10] uvcvideo 3-1:0.0: No valid video chain found. [ 719.582930][ T10] usb 3-1: USB disconnect, device number 63 [ 719.765516][ T5850] hid (null): unknown global tag 0xc [ 719.974516][ T5850] hid_parser_main: 7 callbacks suppressed [ 719.974544][ T5850] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x0 [ 719.974577][ T5850] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x0 [ 719.974602][ T5850] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x0 [ 719.974625][ T5850] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x0 [ 719.974649][ T5850] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x0 [ 719.974672][ T5850] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x0 [ 719.974695][ T5850] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x0 [ 719.974718][ T5850] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x0 [ 719.974742][ T5850] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x0 [ 719.974766][ T5850] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x0 [ 719.975243][ T5850] mcp2200 0003:04D8:00DF.0002: unknown global tag 0xc [ 719.975261][ T5850] mcp2200 0003:04D8:00DF.0002: item 0 2 1 12 parsing failed [ 720.011907][ T5850] mcp2200 0003:04D8:00DF.0002: can't parse reports [ 720.012022][ T5850] mcp2200 0003:04D8:00DF.0002: probe with driver mcp2200 failed with error -22 [ 720.151115][ T5850] usb 5-1: USB disconnect, device number 15 [ 720.881266][T19552] netlink: 'syz.2.6407': attribute type 4 has an invalid length. [ 721.546431][ T5850] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 721.713907][ T5850] usb 3-1: Using ep0 maxpacket: 8 [ 721.716894][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.716930][ T5850] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 721.716976][ T5850] usb 3-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 721.716998][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.740485][ T5850] usb 3-1: config 0 descriptor?? [ 722.418413][ T5850] wacom 0003:056A:5000.0003: ignoring exceeding usage max [ 722.655555][ T10] usb 3-1: USB disconnect, device number 64 [ 723.361440][T19578] syz.6.6420 (19578) used greatest stack depth: 18528 bytes left [ 723.890023][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 727.603210][T19683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6468'. [ 730.698602][T19733] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 731.371806][ T37] audit: type=1326 audit(1777715524.914:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19768 comm="syz.6.6508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd49b9cdd9 code=0x7ffc0000 [ 731.385164][ T37] audit: type=1326 audit(1777715524.914:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19768 comm="syz.6.6508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd49b9cdd9 code=0x7ffc0000 [ 731.393622][ T37] audit: type=1326 audit(1777715524.933:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19768 comm="syz.6.6508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd49b9cdd9 code=0x7ffc0000 [ 731.393676][ T37] audit: type=1326 audit(1777715524.933:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19768 comm="syz.6.6508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd49b9cdd9 code=0x7ffc0000 [ 731.393718][ T37] audit: type=1326 audit(1777715524.933:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19768 comm="syz.6.6508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd49b9cdd9 code=0x7ffc0000 [ 731.393758][ T37] audit: type=1326 audit(1777715524.933:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19768 comm="syz.6.6508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd49b9cdd9 code=0x7ffc0000 [ 731.401702][ T37] audit: type=1326 audit(1777715524.933:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19768 comm="syz.6.6508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd49b9cdd9 code=0x7ffc0000 [ 731.428914][ T37] audit: type=1326 audit(1777715524.942:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19768 comm="syz.6.6508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd49b9cdd9 code=0x7ffc0000 [ 731.428973][ T37] audit: type=1326 audit(1777715524.971:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19768 comm="syz.6.6508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd49b9cdd9 code=0x7ffc0000 [ 731.429015][ T37] audit: type=1326 audit(1777715524.971:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19768 comm="syz.6.6508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7efd49b9cdd9 code=0x7ffc0000 [ 733.058634][T19798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6520'. [ 733.231161][T19800] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6521'. [ 734.136716][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 734.307397][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 734.311615][ T10] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 734.311646][ T10] usb 5-1: config 0 has no interface number 0 [ 734.311696][ T10] usb 5-1: config 0 interface 12 has no altsetting 0 [ 734.341763][ T10] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 734.341797][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.341817][ T10] usb 5-1: Product: syz [ 734.341832][ T10] usb 5-1: Manufacturer: syz [ 734.341857][ T10] usb 5-1: SerialNumber: syz [ 734.415011][ T10] usb 5-1: config 0 descriptor?? [ 734.526047][T19829] Bluetooth: MGMT ver 1.23 [ 735.147772][ T10] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 28 failed: -71 [ 735.147837][ T10] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 735.147854][ T10] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 735.147946][ T10] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 735.242659][ T10] usb 5-1: USB disconnect, device number 16 [ 737.311780][ T5740] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 737.470166][T19882] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6556'. [ 737.474097][T19882] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6556'. [ 737.506007][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 737.506028][ T37] audit: type=1326 audit(1777715530.648:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19881 comm="syz.4.6557" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb34f9ccdd9 code=0x0 [ 739.694323][ T31] IPVS: starting estimator thread 0... [ 739.781115][T19925] IPVS: using max 8 ests per chain, 19200 per kthread [ 739.975954][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6579'. [ 742.261409][ T1602] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 742.485370][ T1602] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.485432][ T1602] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 742.485459][ T1602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 742.485485][ T1602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 742.485508][ T1602] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 742.597429][ T1602] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 742.597465][ T1602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 742.597487][ T1602] usb 5-1: Product: syz [ 742.597598][ T1602] usb 5-1: Manufacturer: syz [ 742.597613][ T1602] usb 5-1: SerialNumber: syz [ 742.678999][ T1602] usb 5-1: config 0 descriptor?? [ 742.949305][ T1602] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 742.949334][ T1602] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 743.165139][ T1602] radio-si470x 5-1:0.0: software version 231, hardware version 33 [ 743.165172][ T1602] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 743.378927][ T1602] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 743.379007][ T1602] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 743.380184][ T1602] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 743.380788][ T1602] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 743.455508][ T1602] usb 5-1: USB disconnect, device number 17 [ 744.885253][T20016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6617'. [ 746.911655][ T5729] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 747.085134][ T5729] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.085164][ T5729] usb 3-1: config 0 has no interfaces? [ 747.093665][ T5729] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 747.093695][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.093714][ T5729] usb 3-1: Product: syz [ 747.093728][ T5729] usb 3-1: Manufacturer: syz [ 747.093741][ T5729] usb 3-1: SerialNumber: syz [ 747.124799][ T5729] usb 3-1: config 0 descriptor?? [ 747.432998][ T1602] usb 3-1: USB disconnect, device number 65 [ 747.584895][T20076] sg_write: data in/out 426972/130 bytes for SCSI command 0x0-- guessing data in; [ 747.584895][T20076] program syz.5.6645 not setting count and/or reply_len properly [ 748.326739][T20091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.052965][T20110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6660'. [ 750.118367][T20135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.951996][T20181] netlink: 7060 bytes leftover after parsing attributes in process `syz.6.6694'. [ 752.486561][T20194] Invalid source name [ 752.707531][ T5729] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 752.868093][ T5729] usb 5-1: Using ep0 maxpacket: 32 [ 752.875149][ T5729] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.875187][ T5729] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.875231][ T5729] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 752.875255][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.899957][ T5729] usb 5-1: config 0 descriptor?? [ 753.756158][ T5729] ft260 0003:0403:6030.0004: failed to retrieve chip version [ 753.757154][ T5729] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -71 [ 753.775497][ T5729] usb 5-1: USB disconnect, device number 18 [ 754.060619][T20223] No memory to map [ 757.758903][T20303] netlink: 'syz.4.6753': attribute type 1 has an invalid length. [ 759.633438][T20342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6773'. [ 759.967070][T20351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6777'. [ 759.970789][T20352] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6776'. [ 764.071129][T20450] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6822'. [ 764.689030][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6831'. [ 764.775521][T20468] netlink: 'syz.6.6831': attribute type 22 has an invalid length. [ 764.775547][T20468] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6831'. [ 765.147347][T20478] netlink: 1 bytes leftover after parsing attributes in process `syz.6.6838'. [ 767.524493][ T37] audit: type=1326 audit(1777715558.723:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20536 comm="syz.5.6863" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 767.524553][ T37] audit: type=1326 audit(1777715558.723:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20536 comm="syz.5.6863" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 767.596405][ T37] audit: type=1326 audit(1777715558.788:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20536 comm="syz.5.6863" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 767.596463][ T37] audit: type=1326 audit(1777715558.788:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20536 comm="syz.5.6863" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 767.596580][ T37] audit: type=1326 audit(1777715558.788:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20536 comm="syz.5.6863" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 767.596626][ T37] audit: type=1326 audit(1777715558.788:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20536 comm="syz.5.6863" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 767.644172][ T37] audit: type=1326 audit(1777715558.788:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20536 comm="syz.5.6863" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 767.644349][ T37] audit: type=1326 audit(1777715558.816:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20536 comm="syz.5.6863" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 767.644387][ T37] audit: type=1326 audit(1777715558.844:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20536 comm="syz.5.6863" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 767.691002][ T37] audit: type=1326 audit(1777715558.882:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20536 comm="syz.5.6863" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 768.625850][ T5729] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 768.796910][ T5729] usb 6-1: Using ep0 maxpacket: 8 [ 768.820013][ T5729] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 768.820046][ T5729] usb 6-1: config 0 has no interface number 0 [ 768.820095][ T5729] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 768.820119][ T5729] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 768.820143][ T5729] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 768.820168][ T5729] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 768.820210][ T5729] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 768.820232][ T5729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.943878][ T5729] usb 6-1: config 0 descriptor?? [ 768.988692][ T5729] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 769.286556][T20568] netlink: 'syz.2.6877': attribute type 1 has an invalid length. [ 769.467879][ T31] usb 6-1: USB disconnect, device number 16 [ 769.506131][ T31] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 770.490073][T20592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6889'. [ 770.935533][T18938] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 771.095915][T18938] usb 5-1: Using ep0 maxpacket: 32 [ 771.123624][T18938] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 771.123658][T18938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.123679][T18938] usb 5-1: Product: syz [ 771.123694][T18938] usb 5-1: Manufacturer: syz [ 771.123710][T18938] usb 5-1: SerialNumber: syz [ 771.182856][T18938] usb 5-1: config 0 descriptor?? [ 771.220968][T18938] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 771.221027][T18938] dvb-usb: bulk message failed: -22 (2/0) [ 771.564027][T18938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 771.565387][T18938] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 771.565461][T18938] usb 5-1: media controller created [ 771.764098][T18938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 771.974991][T20627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6906'. [ 772.334796][T18938] usb 5-1: selecting invalid altsetting 7 [ 772.334826][T18938] cxusb: set interface failed [ 772.334841][T18938] dvb-usb: bulk message failed: -22 (1/0) [ 772.673878][T18938] DVB: Unable to find symbol lgdt330x_attach() [ 772.673897][T18938] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 773.052369][T18938] rc_core: IR keymap rc-dvico-portable not found [ 773.052392][T18938] Registered IR keymap rc-empty [ 773.054896][T18938] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 773.083346][T18938] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input26 [ 773.232732][T18938] dvb-usb: schedule remote query interval to 100 msecs. [ 773.232761][T18938] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 773.252083][T18938] usb 5-1: USB disconnect, device number 19 [ 774.275712][T18938] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 776.121139][ T1602] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 776.293292][ T1602] usb 6-1: Using ep0 maxpacket: 8 [ 776.295632][ T1602] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 776.295664][ T1602] usb 6-1: config 0 has no interface number 0 [ 776.295712][ T1602] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 776.295738][ T1602] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 776.295765][ T1602] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 776.295792][ T1602] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 776.295838][ T1602] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 776.295863][ T1602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.331946][ T1602] usb 6-1: config 0 descriptor?? [ 776.510154][ T1602] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 776.769703][ T5729] usb 6-1: USB disconnect, device number 17 [ 776.815545][ T5729] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 779.231462][T20733] netlink: 'syz.2.6956': attribute type 3 has an invalid length. [ 779.231493][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6956'. [ 779.408193][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 779.408214][ T37] audit: type=1326 audit(1777715569.843:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20734 comm="syz.5.6958" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 779.408267][ T37] audit: type=1326 audit(1777715569.843:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20734 comm="syz.5.6958" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 779.410415][ T37] audit: type=1326 audit(1777715569.843:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20734 comm="syz.5.6958" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 779.550374][ T37] audit: type=1326 audit(1777715569.843:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20734 comm="syz.5.6958" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 779.550836][ T37] audit: type=1326 audit(1777715569.974:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20734 comm="syz.5.6958" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f708f13d60e code=0x7ffc0000 [ 779.551284][ T37] audit: type=1326 audit(1777715569.974:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20734 comm="syz.5.6958" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 779.551630][ T37] audit: type=1326 audit(1777715569.974:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20734 comm="syz.5.6958" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 779.673278][ T37] audit: type=1326 audit(1777715569.974:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20734 comm="syz.5.6958" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 779.673340][ T37] audit: type=1326 audit(1777715569.974:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20734 comm="syz.5.6958" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f708f17cdd9 code=0x7ffc0000 [ 780.061686][T20747] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6963'. [ 781.007099][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 781.263748][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 781.268212][ T10] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 781.268245][ T10] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 781.268266][ T10] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 781.268286][ T10] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 781.268305][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 781.268327][ T10] usb 6-1: config 0 has no interface number 0 [ 781.268372][ T10] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 781.268402][ T10] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 781.268431][ T10] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 781.268542][ T10] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 781.268572][ T10] usb 6-1: config 0 interface 125 has no altsetting 0 [ 781.268592][ T10] usb 6-1: config 0 interface 125 has no altsetting 2 [ 781.284640][ T10] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 781.284672][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.284692][ T10] usb 6-1: Product: syz [ 781.284706][ T10] usb 6-1: Manufacturer: syz [ 781.284720][ T10] usb 6-1: SerialNumber: syz [ 781.466296][ T10] usb 6-1: config 0 descriptor?? [ 781.523275][ T10] usb 6-1: selecting invalid altsetting 2 [ 782.269093][ C0] usb 6-1: async_complete: urb error -71 [ 782.269223][ C0] usb 6-1: async_complete: urb error -71 [ 782.279741][ T10] get_1284_register: usb error -71 [ 782.330677][ T10] usb 6-1: USB disconnect, device number 18 [ 783.177650][ T5729] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 783.338287][ T5729] usb 3-1: Using ep0 maxpacket: 32 [ 783.362107][ T5729] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.362144][ T5729] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.395117][ T5729] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 783.395151][ T5729] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 783.395171][ T5729] usb 3-1: Product: syz [ 783.395196][ T5729] usb 3-1: Manufacturer: syz [ 783.869541][ T5729] hub 3-1:4.0: USB hub found [ 784.123028][ T5729] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 784.493131][ T1602] usb 3-1: USB disconnect, device number 66 [ 784.778437][T20842] netlink: 'syz.4.7007': attribute type 1 has an invalid length. [ 784.905704][T20846] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 786.120932][T20880] genirq: Flags mismatch irq 5. 00202000 (pcl812) vs. 00202000 (pcmmio) [ 788.589657][ T5729] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 788.758788][ T5729] usb 6-1: Using ep0 maxpacket: 8 [ 788.763106][ T5729] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 788.786442][ T5729] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 788.786477][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.786498][ T5729] usb 6-1: Product: syz [ 788.786512][ T5729] usb 6-1: Manufacturer: syz [ 788.786527][ T5729] usb 6-1: SerialNumber: syz [ 788.899161][ T5729] usb 6-1: config 0 descriptor?? [ 788.918181][ T5729] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 788.918242][ T5729] usb 6-1: setting power ON [ 788.918263][ T5729] dvb-usb: bulk message failed: -22 (2/0) [ 789.021779][ T5729] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 789.023690][ T5729] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 789.023758][ T5729] usb 6-1: media controller created [ 789.072802][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 789.150227][ T5729] usb 6-1: selecting invalid altsetting 6 [ 789.150255][ T5729] usb 6-1: digital interface selection failed (-22) [ 789.150336][ T5729] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 789.151828][ T5729] usb 6-1: setting power OFF [ 789.152199][ T5729] dvb-usb: bulk message failed: -22 (2/0) [ 789.152223][ T5729] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 789.152236][ T5729] (NULL device *): no alternate interface [ 789.307194][ T5729] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 789.312665][ T5729] usb 6-1: USB disconnect, device number 19 [ 789.584608][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 790.565943][ T5729] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 790.651563][ T5733] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 790.745446][ T5729] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 790.745480][ T5729] usb 7-1: config 8 has no interface number 0 [ 790.745531][ T5729] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 790.745559][ T5729] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 790.745586][ T5729] usb 7-1: config 8 interface 177 has no altsetting 0 [ 790.745620][ T5729] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 790.745644][ T5729] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.839189][T20967] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 790.839427][T20967] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 790.873277][ C1] ir_toy 7-1:8.177: out urb status: -71 [ 790.943529][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.943568][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.943592][ T5733] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 790.943636][ T5733] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 790.943661][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.015162][ T5733] usb 3-1: config 0 descriptor?? [ 791.410500][ T5729] ir_toy 7-1:8.177: could not write reset command: -110 [ 791.411079][ T5729] ir_toy 7-1:8.177: probe with driver ir_toy failed with error -110 [ 791.529712][ T5729] usb 7-1: USB disconnect, device number 5 [ 791.599645][ T5733] steelseries 0003:1038:1410.0005: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 791.902700][ T5729] usb 3-1: USB disconnect, device number 67 [ 793.951027][T21006] vivid-000: kernel_thread() failed [ 794.906788][ T5729] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 795.067209][ T5729] usb 3-1: Using ep0 maxpacket: 8 [ 795.075641][ T5729] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 795.075786][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.075808][ T5729] usb 3-1: Product: syz [ 795.075822][ T5729] usb 3-1: Manufacturer: syz [ 795.075837][ T5729] usb 3-1: SerialNumber: syz [ 795.137357][ T5729] usb 3-1: config 0 descriptor?? [ 795.413513][ T5729] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 795.857427][ T5729] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 795.917934][ T5729] usb 3-1: USB disconnect, device number 68 [ 796.385589][T21072] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7115'. [ 796.385618][T21072] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7115'. [ 797.882878][T21108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7132'. [ 798.166254][T21118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 798.771870][ T5850] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 798.927000][ T5850] usb 3-1: Using ep0 maxpacket: 16 [ 798.930080][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.930119][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.930143][ T5850] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 798.930191][ T5850] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 798.930215][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.045172][ T5850] usb 3-1: config 0 descriptor?? [ 799.577353][ T5850] hid_parser_main: 80 callbacks suppressed [ 799.577382][ T5850] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 799.577411][ T5850] microsoft 0003:045E:07DA.0006: item fetching failed at offset 33/34 [ 799.611377][ T5850] microsoft 0003:045E:07DA.0006: parse failed [ 799.611501][ T5850] microsoft 0003:045E:07DA.0006: probe with driver microsoft failed with error -22 [ 799.831622][ T5850] usb 3-1: USB disconnect, device number 69 [ 801.493936][ T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 801.682055][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 801.694098][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 252: 255, using maximum allowed: 30 [ 801.694210][ T10] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 801.694240][ T10] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 801.694267][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 801.694386][ T10] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 801.694415][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.731988][ T10] usb 3-1: config 0 descriptor?? [ 801.748403][T21178] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 801.888861][ T38] INFO: task syz.3.5688:17976 blocked for more than 143 seconds. [ 801.888889][ T38] Not tainted syzkaller #0 [ 801.888900][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 801.888909][ T38] task:syz.3.5688 state:D stack:27664 pid:17976 tgid:17973 ppid:5724 task_flags:0x400040 flags:0x00080002 [ 801.888977][ T38] Call Trace: [ 801.888985][ T38] [ 801.888999][ T38] __schedule+0x1681/0x54c0 [ 801.889063][ T38] ? __pfx___schedule+0x10/0x10 [ 801.889084][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 801.889131][ T38] rt_mutex_schedule+0x76/0xf0 [ 801.889154][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 801.889205][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 801.889238][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 801.889271][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 801.889301][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 801.889343][ T38] ? usbdev_open+0x182/0x790 [ 801.889375][ T38] ? usbdev_open+0x182/0x790 [ 801.889410][ T38] ? usbdev_open+0x182/0x790 [ 801.889435][ T38] mutex_lock_nested+0x168/0x1d0 [ 801.889464][ T38] ? usbdev_open+0xa7/0x790 [ 801.889495][ T38] usbdev_open+0x182/0x790 [ 801.889527][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 801.889558][ T38] ? __pfx_usbdev_open+0x10/0x10 [ 801.889584][ T38] ? rt_spin_unlock+0x14f/0x200 [ 801.889620][ T38] ? rt_spin_unlock+0x160/0x200 [ 801.889655][ T38] chrdev_open+0x4d0/0x5f0 [ 801.889689][ T38] ? __pfx_chrdev_open+0x10/0x10 [ 801.889718][ T38] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 801.889749][ T38] ? __pfx_chrdev_open+0x10/0x10 [ 801.889778][ T38] do_dentry_open+0x83d/0x13e0 [ 801.889823][ T38] vfs_open+0x3b/0x350 [ 801.889851][ T38] ? path_openat+0x2e2b/0x38a0 [ 801.889880][ T38] path_openat+0x2e43/0x38a0 [ 801.889940][ T38] ? __pfx_path_openat+0x10/0x10 [ 801.889971][ T38] ? kasan_save_track+0x4f/0x80 [ 801.889990][ T38] ? kasan_save_track+0x3e/0x80 [ 801.890006][ T38] ? __kasan_slab_alloc+0x6c/0x80 [ 801.890027][ T38] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 801.890058][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 801.890092][ T38] do_file_open+0x23e/0x4a0 [ 801.890116][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 801.890145][ T38] ? __pfx_do_file_open+0x10/0x10 [ 801.890192][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 801.890248][ T38] ? alloc_fd+0x64e/0x6c0 [ 801.894316][ T38] do_sys_openat2+0x113/0x200 [ 801.897896][ T38] ? lapic_next_event+0x11/0x20 [ 801.897937][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 801.897981][ T38] __x64_sys_openat+0x138/0x170 [ 801.898010][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.898030][ T38] do_syscall_64+0x15f/0xf80 [ 801.898055][ T38] ? clear_bhb_loop+0x40/0x90 [ 801.898083][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.898105][ T38] RIP: 0033:0x7f563f71d60e [ 801.898125][ T38] RSP: 002b:00007f563d9b5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 801.898148][ T38] RAX: ffffffffffffffda RBX: 00007f563d9b66c0 RCX: 00007f563f71d60e [ 801.898163][ T38] RDX: 000000000004a301 RSI: 00007f563d9b5c00 RDI: ffffffffffffff9c [ 801.898178][ T38] RBP: 00007f563d9b5c00 R08: 0000000000000000 R09: 0000000000000000 [ 801.898191][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 801.898269][ T38] R13: 00007f563f9d6038 R14: 00007f563f9d5fa0 R15: 00007ffc7a047568 [ 801.898304][ T38] [ 801.898351][ T38] [ 801.898351][ T38] Showing all locks held in the system: [ 801.898361][ T38] 5 locks held by kworker/0:1/10: [ 801.898375][ T38] #0: ffff8880222ce538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 801.898430][ T38] #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 801.898480][ T38] #2: ffff88802aa68210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 801.898529][ T38] #3: ffff888061baa210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 801.898611][ T38] #4: ffff888038bfc1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 801.898661][ T38] 2 locks held by kworker/u8:1/13: [ 801.898674][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 801.898845][ T38] #1: ffffc90000127c40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 801.898900][ T38] 1 lock held by khungtaskd/38: [ 801.898943][ T38] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 801.899009][ T38] 5 locks held by kworker/u8:6/147: [ 801.899028][ T38] 3 locks held by kworker/0:2/1602: [ 801.899054][ T38] 6 locks held by kworker/u8:14/3343: [ 801.899066][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 801.941717][ T38] #1: ffffc9000ecafc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 801.941791][ T38] #2: ffff88803beaa310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 801.941855][ T38] #3: ffff888053414d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 801.986447][ T38] #4: ffff8880b88246c8 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x53/0x880 [ 801.986514][ T38] #5: ffff8880b883b820 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 801.986633][ T38] 4 locks held by kworker/u8:17/4306: [ 801.986647][ T38] 2 locks held by syslogd/4947: [ 801.986803][ T38] 2 locks held by getty/5353: [ 801.986820][ T38] #0: ffff8880373dc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 801.986876][ T38] #1: ffffc90003cb62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 801.988089][ T38] 4 locks held by syz-executor/5587: [ 801.988103][ T38] 1 lock held by syz-executor/5723: [ 801.988116][ T38] 3 locks held by kworker/u9:8/5740: [ 801.988126][ T38] #0: ffff88803f2ee138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 801.990773][ T38] #1: ffffc90004f7fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 801.992922][ T38] #2: ffff8880387e8f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 801.992991][ T38] 2 locks held by udevd/5742: [ 801.993011][ T38] 6 locks held by kworker/0:7/6021: [ 801.995017][ T38] #0: ffff8880222ce538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 801.995075][ T38] #1: ffffc90005f97c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 801.997441][ T38] #2: ffff88802aa50210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 801.997500][ T38] #3: ffff88802c396210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 801.999593][ T38] #4: ffff88802e0d61d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 802.000622][ T38] #5: ffff88801a00ae58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x87/0x560 [ 802.002801][ T38] 6 locks held by udevd/6160: [ 802.002826][ T38] 1 lock held by syz.3.5688/17976: [ 802.002837][ T38] #0: ffff88802aa50210 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x790 [ 802.004118][ T38] 9 locks held by syz-executor/18376: [ 802.004134][ T38] 3 locks held by kworker/0:4/18938: [ 802.004146][ T38] 1 lock held by syz.2.7166/21177: [ 802.005303][ T38] #0: ffff8880323681c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 802.009767][ T38] [ 802.009773][ T38] ============================================= [ 802.009773][ T38] [ 802.009782][ T38] NMI backtrace for cpu 0 [ 802.009802][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 802.009824][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 802.009834][ T38] Call Trace: [ 802.009843][ T38] [ 802.009850][ T38] dump_stack_lvl+0xe8/0x150 [ 802.009876][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 802.009903][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 802.009927][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 802.009963][ T38] sys_info+0x135/0x170 [ 802.009985][ T38] watchdog+0xfd3/0x1030 [ 802.010014][ T38] ? watchdog+0x1c9/0x1030 [ 802.010040][ T38] kthread+0x388/0x470 [ 802.010066][ T38] ? __pfx_watchdog+0x10/0x10 [ 802.010084][ T38] ? __pfx_kthread+0x10/0x10 [ 802.010111][ T38] ret_from_fork+0x514/0xb70 [ 802.010135][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 802.010155][ T38] ? __switch_to+0xc79/0x1410 [ 802.010186][ T38] ? __pfx_kthread+0x10/0x10 [ 802.010211][ T38] ret_from_fork_asm+0x1a/0x30 [ 802.010250][ T38] [ 802.010273][ T38] Sending NMI from CPU 0 to CPUs 1: [ 802.010301][ C1] NMI backtrace for cpu 1 [ 802.010317][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 802.010336][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 802.010346][ C1] RIP: 0010:delay_tsc+0x71/0xc0 [ 802.010371][ C1] Code: 00 00 e8 72 92 78 f6 65 8b 05 0b 78 4f 07 85 c0 74 1c f3 90 bf 01 00 00 00 e8 bb 90 78 f6 e8 16 78 01 00 39 c5 75 0e 0f 01 f9 <66> 90 eb bd e8 e6 42 18 f6 eb dd 4c 29 fb e8 fc 77 01 00 89 c5 0f [ 802.010385][ C1] RSP: 0018:ffffc900001679d0 EFLAGS: 00000246 [ 802.010400][ C1] RAX: 000000005b137ea3 RBX: 0000000000000899 RCX: 0000000000000001 [ 802.010413][ C1] RDX: 000000000000019d RSI: ffffffff8ba74d40 RDI: ffffffff8ba74d00 [ 802.010425][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 802.010436][ C1] R10: dffffc0000000000 R11: ffffffff8b1af7d0 R12: 1ffffffff3362d26 [ 802.010448][ C1] R13: 00000000ffffffff R14: 0000019d5b137b92 R15: 000000000000023a [ 802.010460][ C1] FS: 0000000000000000(0000) GS:ffff888126279000(0000) knlGS:0000000000000000 [ 802.010474][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 802.010486][ C1] CR2: 00007f861bcfa27c CR3: 00000000383ea000 CR4: 00000000003526f0 [ 802.010503][ C1] Call Trace: [ 802.010511][ C1] [ 802.010519][ C1] wait_for_lsr+0x166/0x2f0 [ 802.010545][ C1] serial8250_console_write+0x1391/0x1b90 [ 802.010574][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 802.010595][ C1] ? console_flush_one_record+0xfa/0xb90 [ 802.010619][ C1] ? console_flush_one_record+0x48f/0xb90 [ 802.010642][ C1] console_flush_one_record+0x68b/0xb90 [ 802.010665][ C1] ? console_flush_one_record+0xfa/0xb90 [ 802.010688][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 802.010711][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 802.010732][ C1] legacy_kthread_func+0x1b6/0x250 [ 802.010753][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 802.010773][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 802.010795][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 802.010818][ C1] kthread+0x388/0x470 [ 802.010840][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 802.010859][ C1] ? __pfx_kthread+0x10/0x10 [ 802.010880][ C1] ret_from_fork+0x514/0xb70 [ 802.010899][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 802.010917][ C1] ? __switch_to+0xc79/0x1410 [ 802.010942][ C1] ? __pfx_kthread+0x10/0x10 [ 802.010963][ C1] ret_from_fork_asm+0x1a/0x30 [ 802.010990][ C1] [ 802.018287][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 802.018310][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 802.018346][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 802.018358][ T38] Call Trace: [ 802.018366][ T38] [ 802.018374][ T38] vpanic+0x56c/0xa60 [ 802.018423][ T38] ? __pfx___schedule+0x10/0x10 [ 802.018444][ T38] ? __pfx_vpanic+0x10/0x10 [ 802.018480][ T38] panic+0xc5/0xd0 [ 802.018505][ T38] ? __pfx_panic+0x10/0x10 [ 802.018533][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 802.018649][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 802.018692][ T38] watchdog+0x102c/0x1030 [ 802.018724][ T38] ? watchdog+0x1c9/0x1030 [ 802.018751][ T38] kthread+0x388/0x470 [ 802.018778][ T38] ? __pfx_watchdog+0x10/0x10 [ 802.018799][ T38] ? __pfx_kthread+0x10/0x10 [ 802.018830][ T38] ret_from_fork+0x514/0xb70 [ 802.018859][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 802.018884][ T38] ? __switch_to+0xc79/0x1410 [ 802.018942][ T38] ? __pfx_kthread+0x10/0x10 [ 802.018973][ T38] ret_from_fork_asm+0x1a/0x30 [ 802.019019][ T38] [ 802.019615][ T38] Kernel Offset: disabled