last executing test programs: 6.306812119s ago: executing program 4 (id=29555): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x2c}}, 0x20008801) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/47, 0x2f}], 0x1}, 0x2140) 6.144825243s ago: executing program 4 (id=29558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.273667671s ago: executing program 2 (id=29570): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xba) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) 5.077490035s ago: executing program 2 (id=29575): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 4.915906818s ago: executing program 4 (id=29578): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2e3}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe3000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.901802708s ago: executing program 2 (id=29579): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x5c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3.673148039s ago: executing program 4 (id=29598): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0x9) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f00000000c0)=0xf73f) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000580)=0x1) 3.275560502s ago: executing program 4 (id=29606): socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x34) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x200066ad, 0xc000, 0x1, 0x14}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.154551068s ago: executing program 4 (id=29609): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2.887205974s ago: executing program 0 (id=29614): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="5fb90c5c4426cc8fa8574be842c1", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4048004) 2.475244918s ago: executing program 0 (id=29618): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 2.105142745s ago: executing program 0 (id=29622): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4) lseek(r2, 0x40, 0x1) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 1.586403956s ago: executing program 0 (id=29629): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 1.143970159s ago: executing program 0 (id=29635): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000693000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x3545, 0xf69, 0x3e, 0x0, 0x0) 1.085853409s ago: executing program 1 (id=29636): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x2000d840) sendto$packet(r1, 0x0, 0x0, 0x810, 0x0, 0x0) 1.076033645s ago: executing program 2 (id=29637): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001080), 0x280040, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) unshare(0x26020480) setns(r0, 0x0) 978.251257ms ago: executing program 3 (id=29638): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1f90}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x0, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000200)=0x28) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x0, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x2, 'syz0\x00'}, &(0x7f0000000200)=0x28) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0xa, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1f90}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x48}}, 0x0) 859.643454ms ago: executing program 1 (id=29639): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000080)=""/170, 0xaa}], 0x2}, 0x2001) 844.502802ms ago: executing program 0 (id=29640): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) read(r0, &(0x7f0000001000)=""/4096, 0x1000) 780.193891ms ago: executing program 3 (id=29641): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x78d4a000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 779.565549ms ago: executing program 2 (id=29642): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) 603.418817ms ago: executing program 2 (id=29643): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffeef}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 603.235823ms ago: executing program 1 (id=29644): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x21c, 0x3}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x10010400) 527.139185ms ago: executing program 3 (id=29645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x4008880) close(r0) recvfrom(r1, 0x0, 0x0, 0x40002062, 0x0, 0x0) 372.758843ms ago: executing program 3 (id=29646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010004000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a440000000c0a030000000000000000000a0000060900020073797a31000000000900010073797a310000ddff17000380100000800c000180060001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 369.224564ms ago: executing program 1 (id=29647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) 146.836812ms ago: executing program 3 (id=29648): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="cf", 0xffa6}], 0x1, &(0x7f00000006c0)=ANY=[], 0x7}}], 0x1, 0x4044044) 146.687995ms ago: executing program 1 (id=29649): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x44f3, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 1.491532ms ago: executing program 1 (id=29650): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x9}, 0xbd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000002240)=""/220, 0xdc}], 0x2}, 0x7}], 0x1, 0x102, 0x0) 0s ago: executing program 3 (id=29651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0xb, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x1, 0x0, 0x8, 0x0, 0x10, 0x0, 0x4, 0x80, 0x9, 0x80, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0xff, 0xff, 0x6, '\x00', 0x0, 0x1}) kernel console output (not intermixed with test programs): 11122][ T36] audit: type=1326 audit(2000001090.637:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18435 comm="syz.0.21849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1057.111169][ T36] audit: type=1326 audit(2000001090.637:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18435 comm="syz.0.21849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1057.111208][ T36] audit: type=1326 audit(2000001090.637:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18435 comm="syz.0.21849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1057.111247][ T36] audit: type=1326 audit(2000001090.637:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18435 comm="syz.0.21849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1057.122806][ T36] audit: type=1326 audit(2000001090.647:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18435 comm="syz.0.21849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1057.122853][ T36] audit: type=1326 audit(2000001090.647:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18435 comm="syz.0.21849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1057.475515][T18452] netlink: 'syz.2.21857': attribute type 12 has an invalid length. [ 1057.769078][T18466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21863'. [ 1057.785924][T18468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21864'. [ 1058.316414][T18489] vim2m vim2m.0: Removing vim2m [ 1059.391585][T18531] 9p: Bad value for 'dfltgid' [ 1059.391598][T18531] 9p: Bad value for 'dfltgid' [ 1060.059144][T18562] netlink: 'syz.0.21911': attribute type 10 has an invalid length. [ 1060.274209][T18562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1060.334598][T18562] @: (slave netdevsim1): Enslaving as an active interface with an up link [ 1061.655703][T18660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21959'. [ 1061.655757][T18660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21959'. [ 1061.932208][T18680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21968'. [ 1063.066052][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 1063.066069][ T36] audit: type=1326 audit(2000001096.587:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18696 comm="syz.2.21974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3027de0d9 code=0x7fc00000 [ 1063.468528][T18779] PM: suspend entry (deep) [ 1063.878595][ T5804] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 1064.054540][ T5804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.054594][ T5804] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1064.054621][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1064.054760][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1064.054784][ T5804] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1064.111111][ T5804] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1064.111139][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1064.111160][ T5804] usb 5-1: Product: syz [ 1064.111174][ T5804] usb 5-1: Manufacturer: syz [ 1064.111196][ T5804] usb 5-1: SerialNumber: syz [ 1064.131405][ T5804] usb 5-1: config 0 descriptor?? [ 1064.162457][ T1181] Filesystems sync: 0.689 seconds [ 1064.349483][ T5804] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1064.349501][ T5804] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1064.549132][ T5804] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 1064.549167][ T5804] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1064.549187][ T5804] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1064.752145][ T5804] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 1064.954094][ T5804] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1064.954434][ T5804] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 1065.010931][ T5804] usb 5-1: USB disconnect, device number 109 [ 1065.213806][T18850] gtp0: entered allmulticast mode [ 1065.625358][T18779] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1065.626216][T18779] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1065.626394][T18779] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1065.626565][T18779] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1065.626653][T18779] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1066.087904][T18779] Freezing user space processes [ 1066.176096][T18779] Freezing user space processes completed (elapsed 0.088 seconds) [ 1066.176558][T18779] OOM killer disabled. [ 1066.176567][T18779] Freezing remaining freezable tasks [ 1066.207222][T18779] Freezing remaining freezable tasks completed (elapsed 0.030 seconds) [ 1066.226165][T18779] printk: Suspending console(s) (use no_console_suspend to debug) [ 1067.618373][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 1067.701680][ T5802] Bluetooth: hci3: command 0x0406 tx timeout [ 1067.701719][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 1067.701746][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 1067.725435][T18779] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 1067.725538][T18779] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 1067.725634][T18779] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 1067.725729][T18779] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 1067.725823][T18779] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 1067.725925][T18779] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 1067.726020][T18779] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 1067.726116][T18779] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 1067.726210][T18779] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 1067.726306][T18779] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 1067.726402][T18779] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 1067.726498][T18779] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 1067.726593][T18779] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 1067.726687][T18779] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 1067.726783][T18779] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 1067.761815][ T1404] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1068.687989][T18779] ACPI: PM: Preparing to enter system sleep state S3 [ 1068.692763][T18779] ACPI: PM: Saving platform NVS memory [ 1068.708578][T18779] Disabling non-boot CPUs ... [ 1068.850045][T18779] smpboot: CPU 1 is now offline [ 1068.971372][T18779] ACPI: PM: Low-level resume complete [ 1068.971447][T18779] ACPI: PM: Restoring platform NVS memory [ 1069.002247][T18779] Enabling non-boot CPUs ... [ 1069.007389][T18779] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1069.097371][T18779] CPU1 is up [ 1069.102242][T18779] ACPI: PM: Waking up from system sleep state S3 [ 1069.380266][T19005] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 1069.803752][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 1070.246813][T18779] OOM killer enabled. [ 1070.246824][T18779] Restarting tasks: Starting [ 1070.629570][T18779] Restarting tasks: Done [ 1070.691862][T18896] netlink: 'syz.4.22070': attribute type 10 has an invalid length. [ 1070.718440][T18779] random: crng reseeded on system resumption [ 1070.732295][T18779] PM: suspend exit [ 1070.987974][T18896] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1070.997818][T18896] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1072.063992][ T5804] input: PS/2 Generic Mouse as /devices/platform/i8042/serio1/input/input43 [ 1073.390354][T19189] netlink: 48 bytes leftover after parsing attributes in process `syz.0.22136'. [ 1073.392601][T19189] netlink: 48 bytes leftover after parsing attributes in process `syz.0.22136'. [ 1073.536014][T19197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22140'. [ 1074.636577][T19265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22171'. [ 1074.763367][ T5804] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1074.924574][ T5804] usb 5-1: Using ep0 maxpacket: 32 [ 1074.927092][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.927122][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.927214][ T5804] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1074.927237][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.944826][ T5804] usb 5-1: config 0 descriptor?? [ 1074.962072][T19273] block2mtd: error: cannot open device ›¿Ta4 [ 1075.388056][ T5804] ft260 0003:0403:6030.0027: unknown main item tag 0x0 [ 1075.388094][ T5804] ft260 0003:0403:6030.0027: unknown main item tag 0x0 [ 1075.586250][ T5804] ft260 0003:0403:6030.0027: chip code: 0000 0000 [ 1075.792062][ T5804] ft260 0003:0403:6030.0027: failed to retrieve system status [ 1075.792472][ T5804] ft260 0003:0403:6030.0027: probe with driver ft260 failed with error -71 [ 1075.816152][ T5804] usb 5-1: USB disconnect, device number 110 [ 1076.142351][T19330] netlink: 252 bytes leftover after parsing attributes in process `syz.0.22203'. [ 1076.482518][T19350] netlink: 'syz.4.22211': attribute type 2 has an invalid length. [ 1076.482539][T19350] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.22211'. [ 1077.089220][T19390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22231'. [ 1077.089250][T19390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22231'. [ 1077.571628][T19420] netlink: 'syz.2.22246': attribute type 34 has an invalid length. [ 1078.364741][ T5804] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1078.523544][ T5804] usb 5-1: Using ep0 maxpacket: 16 [ 1078.525837][ T5804] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.525869][ T5804] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.525892][ T5804] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1078.525919][ T5804] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1078.525952][ T5804] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1078.525975][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.550639][ T5804] usb 5-1: config 0 descriptor?? [ 1078.999152][ T5804] hid (null): usage index exceeded [ 1079.203246][ T5804] usb 5-1: USB disconnect, device number 111 [ 1079.318634][T19525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22296'. [ 1080.014554][T19571] console message test [ 1080.250181][T19587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22326'. [ 1080.549422][T19610] netlink: 'syz.2.22338': attribute type 1 has an invalid length. [ 1080.549442][T19610] netlink: 228 bytes leftover after parsing attributes in process `syz.2.22338'. [ 1080.897527][T19631] netlink: 'syz.4.22347': attribute type 1 has an invalid length. syzkaller syzkaller login: [ 1083.815249][T19772] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(11) [ 1084.052466][T19789] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22420'. [ 1084.128767][T19793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22421'. [ 1084.923237][ T59] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 1085.152068][ T36] audit: type=1326 audit(2000001118.679:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19849 comm="syz.2.22451" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3027de0d9 code=0x0 [ 1086.067111][T19902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22483'. [ 1087.496856][T19972] tipc: Started in network mode [ 1087.496886][T19972] tipc: Node identity 0010000000000000002, cluster identity 1 [ 1087.898508][T19995] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22522'. [ 1087.952680][T19999] netlink: 168 bytes leftover after parsing attributes in process `syz.2.22519'. [ 1088.753472][ T200] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1088.868596][T20050] netlink: 23 bytes leftover after parsing attributes in process `syz.0.22547'. [ 1088.904062][ T200] usb 5-1: Using ep0 maxpacket: 8 [ 1088.909997][ T200] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1088.910026][ T200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.910046][ T200] usb 5-1: Product: syz [ 1088.910060][ T200] usb 5-1: Manufacturer: syz [ 1088.910075][ T200] usb 5-1: SerialNumber: syz [ 1088.969049][ T200] usb 5-1: config 0 descriptor?? [ 1089.002703][ T200] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1089.635062][ T200] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1089.635641][ T200] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1089.671911][ T200] usb 5-1: USB disconnect, device number 112 [ 1093.037210][T20281] sctp: [Deprecated]: syz.2.22656 (pid 20281) Use of int in maxseg socket option. [ 1093.037210][T20281] Use struct sctp_assoc_value instead [ 1093.725269][T20327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22679'. [ 1093.725292][T20327] netlink: 52 bytes leftover after parsing attributes in process `syz.4.22679'. [ 1093.811091][T20332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22681'. [ 1093.811121][T20332] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22681'. [ 1093.811747][T20332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22681'. [ 1093.811769][T20332] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22681'. [ 1094.024852][T20344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22686'. [ 1095.392928][T20427] tipc: New replicast peer: 255.255.255.255 [ 1095.597827][T20427] tipc: Enabled bearer , priority 10 [ 1095.777888][T20445] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1095.778105][T20445] pimreg1: linktype set to 769 [ 1096.526657][ T6027] tipc: Node number set to 4227858432 [ 1096.742177][T20495] sctp: [Deprecated]: syz.4.22758 (pid 20495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1096.742177][T20495] Use struct sctp_sack_info instead [ 1097.042156][T20520] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1097.042313][T20520] syzkaller0: linktype set to 0 [ 1099.144879][T20641] program syz.2.22825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1100.839950][T20722] block2mtd: illegal erase size [ 1102.019046][ T36] audit: type=1326 audit(2000001135.539:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20776 comm="syz.2.22893" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3027de0d9 code=0x0 [ 1102.324515][T20794] netlink: 40 bytes leftover after parsing attributes in process `syz.4.22902'. [ 1103.769219][T20883] program syz.4.22945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1104.175691][T20906] 9p: Bad value for 'rfdno' [ 1104.273533][ T6151] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1104.425980][ T6151] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.426039][ T6151] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1104.428045][ T6151] usb 5-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 1104.428074][ T6151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1104.428095][ T6151] usb 5-1: Product: syz [ 1104.428110][ T6151] usb 5-1: Manufacturer: syz [ 1104.481248][T20924] : renamed from virt_wifi0 [ 1104.508238][ T6151] usb_debug 5-1:1.0: debug converter detected [ 1104.522753][ T6151] usb 5-1: debug converter now attached to ttyUSB0 [ 1104.679238][T20936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22970'. [ 1104.751301][T20939] /dev/nbd0: Can't lookup blockdev [ 1104.815704][ T6151] usb 5-1: USB disconnect, device number 113 [ 1104.862517][ T6151] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 1104.865788][ T6151] usb_debug 5-1:1.0: device disconnected [ 1105.558063][T20983] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1105.558080][T20983] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1107.810601][T21118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23055'. [ 1108.683542][ T5317] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1108.843639][ T5317] usb 5-1: Using ep0 maxpacket: 16 [ 1108.846267][ T5317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.846317][ T5317] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1108.846341][ T5317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.898589][ T5317] usb 5-1: config 0 descriptor?? [ 1109.349703][ T5317] mcp2221 0003:04D8:00DD.0029: unknown main item tag 0x0 [ 1109.353389][ T5317] mcp2221 0003:04D8:00DD.0029: unknown main item tag 0x0 [ 1109.353422][ T5317] mcp2221 0003:04D8:00DD.0029: unknown main item tag 0x0 [ 1109.353450][ T5317] mcp2221 0003:04D8:00DD.0029: unknown main item tag 0x0 [ 1109.353477][ T5317] mcp2221 0003:04D8:00DD.0029: unknown main item tag 0x0 [ 1109.354467][ T5317] mcp2221 0003:04D8:00DD.0029: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1109.537036][ C0] usb 5-1: input irq status -75 received [ 1110.105158][ T5317] usb 5-1: USB disconnect, device number 114 [ 1110.132178][T21252] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 1110.718048][ T200] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1110.863427][ T200] usb 3-1: Using ep0 maxpacket: 32 [ 1110.865670][ T200] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1110.865697][ T200] usb 3-1: config 0 has no interface number 0 [ 1110.868305][ T200] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1110.868334][ T200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.868355][ T200] usb 3-1: Product: syz [ 1110.868369][ T200] usb 3-1: Manufacturer: syz [ 1110.868384][ T200] usb 3-1: SerialNumber: syz [ 1110.937138][ T200] usb 3-1: config 0 descriptor?? [ 1110.955603][ T200] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1111.229304][ T200] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1111.334873][ T200] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1111.622423][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1111.624150][ T6151] usb 3-1: USB disconnect, device number 123 [ 1111.667922][ T6151] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1111.688374][ T6151] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1111.698236][ T6151] quatech2 3-1:0.51: device disconnected [ 1112.532968][T21369] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23178'. [ 1113.989086][T21453] netlink: 140 bytes leftover after parsing attributes in process `syz.2.23217'. [ 1113.991605][T21453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23217'. [ 1114.980815][T21515] netlink: 165 bytes leftover after parsing attributes in process `syz.4.23246'. [ 1115.888241][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.246944][T21598] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1116.272648][ T36] audit: type=1326 audit(2000001149.799:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21600 comm="syz.0.23286" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9389e3e0d9 code=0x0 [ 1116.631762][ T5789] kernel write not supported for file /input/mice (pid: 5789 comm: kworker/0:6) [ 1117.473432][ T6151] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1117.628891][ T6151] usb 3-1: Using ep0 maxpacket: 16 [ 1117.636739][ T6151] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1117.636773][ T6151] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1117.636807][ T6151] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1117.636829][ T6151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.638773][T21681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23324'. [ 1117.662346][ T6151] usb 3-1: config 0 descriptor?? [ 1118.119081][ T6151] pantherlord 0003:0F30:0111.002A: unknown main item tag 0x0 [ 1118.119119][ T6151] pantherlord 0003:0F30:0111.002A: unknown main item tag 0x0 [ 1118.119146][ T6151] pantherlord 0003:0F30:0111.002A: unknown main item tag 0x0 [ 1118.119172][ T6151] pantherlord 0003:0F30:0111.002A: unknown main item tag 0x0 [ 1118.119198][ T6151] pantherlord 0003:0F30:0111.002A: unknown main item tag 0x0 [ 1118.119233][ T6151] pantherlord 0003:0F30:0111.002A: unknown main item tag 0x0 [ 1118.119261][ T6151] pantherlord 0003:0F30:0111.002A: unknown main item tag 0x0 [ 1118.119289][ T6151] pantherlord 0003:0F30:0111.002A: unknown main item tag 0x0 [ 1118.119317][ T6151] pantherlord 0003:0F30:0111.002A: unknown main item tag 0x0 [ 1118.119344][ T6151] pantherlord 0003:0F30:0111.002A: unknown main item tag 0x0 [ 1118.133094][ T6151] pantherlord 0003:0F30:0111.002A: hidraw0: USB HID v0.07 Device [HID 0f30:0111] on usb-dummy_hcd.2-1/input0 [ 1118.133144][ T6151] pantherlord 0003:0F30:0111.002A: no output reports found [ 1118.316288][ T200] usb 3-1: USB disconnect, device number 124 [ 1118.564398][T21726] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1118.608891][ T200] team_slave_0: entered promiscuous mode [ 1118.609017][ T200] žÿ: entered promiscuous mode [ 1118.632019][ T200] bond_slave_0: entered promiscuous mode [ 1118.632063][ T200] bond_slave_1: entered promiscuous mode [ 1118.650130][ T200] dummy0: entered promiscuous mode [ 1118.650248][ T200] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 1119.777224][T21789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23376'. [ 1120.330816][T21817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23391'. [ 1120.888117][T21852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23407'. [ 1121.416900][T21890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23424'. [ 1122.875453][T21972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23467'. [ 1123.555882][T22017] binder: 22016:22017 ioctl c0306201 0 returned -14 [ 1123.627716][T22020] sit0: entered promiscuous mode [ 1123.667577][T22020] netlink: 'syz.0.23489': attribute type 1 has an invalid length. [ 1123.667603][T22020] netlink: 1 bytes leftover after parsing attributes in process `syz.0.23489'. [ 1124.055898][T22049] program syz.4.23503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1124.130973][T22054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23505'. [ 1124.131007][T22054] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23505'. [ 1124.167709][T22054] ip6gretap1: entered allmulticast mode [ 1124.812911][ T36] audit: type=1326 audit(2000001158.339:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22042 comm="syz.0.23499" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9389e3e0d9 code=0x7fc00000 [ 1124.928444][T22104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.23529'. [ 1125.520875][T22139] batadv_slave_1: entered promiscuous mode [ 1125.521930][T22138] batadv_slave_1: left promiscuous mode [ 1127.272005][T22239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23593'. [ 1127.343988][ T5789] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1127.493476][ T5789] usb 5-1: Using ep0 maxpacket: 8 [ 1127.498305][ T5789] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1127.498333][ T5789] usb 5-1: config 0 has no interface number 0 [ 1127.500643][ T5789] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1127.500670][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.500699][ T5789] usb 5-1: Product: syz [ 1127.500713][ T5789] usb 5-1: Manufacturer: syz [ 1127.500727][ T5789] usb 5-1: SerialNumber: syz [ 1127.566716][ T5789] usb 5-1: config 0 descriptor?? [ 1127.770642][ T5789] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1127.770849][ T5789] uvcvideo 5-1:0.31: No valid video chain found. [ 1127.827836][ T5789] usb 5-1: USB disconnect, device number 115 [ 1127.850292][T22269] zero sized request [ 1128.499581][T22317] C: renamed from veth1_to_team (while UP) [ 1128.530361][T22317] netlink: 'syz.2.23630': attribute type 8 has an invalid length. [ 1128.530943][T22317] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1130.111061][T22401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23671'. [ 1130.111086][T22401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23671'. [ 1130.111112][T22401] netlink: 'syz.2.23671': attribute type 19 has an invalid length. [ 1130.111127][T22401] netlink: 'syz.2.23671': attribute type 20 has an invalid length. [ 1131.870283][T22507] hfsplus: unable to find HFS+ superblock [ 1133.309608][ T36] audit: type=1326 audit(2000001166.839:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22611 comm="syz.0.23774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1133.309660][ T36] audit: type=1326 audit(2000001166.839:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22611 comm="syz.0.23774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1133.309703][ T36] audit: type=1326 audit(2000001166.839:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22611 comm="syz.0.23774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1133.309948][ T36] audit: type=1326 audit(2000001166.839:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22611 comm="syz.0.23774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1133.313103][ T36] audit: type=1326 audit(2000001166.839:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22611 comm="syz.0.23774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1133.893399][ T5789] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1133.904588][T22643] kAFS: bad VL server IP address [ 1134.043492][ T5789] usb 5-1: Using ep0 maxpacket: 32 [ 1134.048981][ T5789] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1134.049011][ T5789] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1134.049045][ T5789] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1134.049065][ T5789] usb 5-1: config 1 has no interface number 0 [ 1134.049109][ T5789] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1134.049136][ T5789] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1134.049178][ T5789] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1134.049202][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.151728][ T5789] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1134.422579][ T5789] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1134.792407][ T5804] usb 5-1: USB disconnect, device number 116 [ 1134.862404][ T5804] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1135.230313][T22720] program syz.2.23825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1135.818098][T22757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23840'. [ 1135.818143][T22757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23840'. [ 1137.632455][T22837] input: syz1 as /devices/virtual/input/input45 [ 1139.038255][T22866] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1139.038294][T22866] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.222021][T22926] sg_write: data in/out 355776/136 bytes for SCSI command 0x0-- guessing data in; [ 1139.222021][T22926] program syz.4.23925 not setting count and/or reply_len properly [ 1139.389200][T22936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23926'. [ 1139.863714][ T5789] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1139.888752][T18940] wlan1: Trigger new scan to find an IBSS to join [ 1139.958000][T22866] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1139.958038][T22866] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.013452][ T5789] usb 3-1: Using ep0 maxpacket: 8 [ 1140.015282][ T5789] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.015305][ T5789] usb 3-1: config 0 has no interfaces? [ 1140.017373][ T5789] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1140.017398][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.017416][ T5789] usb 3-1: Product: syz [ 1140.017430][ T5789] usb 3-1: Manufacturer: syz [ 1140.017443][ T5789] usb 3-1: SerialNumber: syz [ 1140.098849][ T5789] usb 3-1: config 0 descriptor?? [ 1140.443840][T22951] netlink: 136 bytes leftover after parsing attributes in process `syz.2.23933'. [ 1140.443865][T22951] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1140.452345][ T5789] usb 3-1: USB disconnect, device number 125 [ 1140.768710][T22866] @: (slave netdevsim1): Releasing backup interface [ 1140.882162][T22866] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1140.884411][T22866] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.471441][T22866] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1141.471480][T22866] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.855303][T23057] kAFS: bad VL server IP address [ 1143.070659][T23130] bcache: register_bcache() error : failed to open device [ 1144.195192][T23211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24059'. [ 1144.790339][T23241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24072'. [ 1144.790371][T23241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24072'. [ 1144.923485][T18948] wlan1: Trigger new scan to find an IBSS to join [ 1145.242519][T23272] kAFS: bad VL server IP address [ 1145.723445][ T5804] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1145.875639][T18940] wlan1: Creating new IBSS network, BSSID a6:1b:95:26:c0:e8 [ 1145.889008][ T5804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1145.892504][ T5804] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 8 [ 1145.892534][ T5804] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 1145.892557][ T5804] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1145.892583][ T5804] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1145.906886][ T5804] usb 5-1: string descriptor 0 read error: -22 [ 1145.907016][ T5804] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1145.907039][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.935365][T23288] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1145.935736][T23288] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1145.948095][ T5804] usb 5-1: No union descriptors [ 1146.208410][ T5804] usb 5-1: USB disconnect, device number 117 [ 1146.210675][T23324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24113'. [ 1146.318725][T23334] netlink: 'syz.2.24119': attribute type 3 has an invalid length. [ 1146.697102][T23355] pim6reg: tun_chr_ioctl cmd 1074025676 [ 1146.697125][T23355] pim6reg: owner set to 0 [ 1148.042598][T23437] isofs_fill_super: bread failed, dev=loop9, iso_blknum=16, block=32 [ 1148.600903][T23481] sch_tbf: burst 7 is lower than device bond_slave_1 mtu (1514) ! [ 1149.216017][ T59] Bluetooth: hci0: Zero size dump init pkt [ 1149.360744][T23535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24212'. [ 1150.341174][T23594] kvm: user requested TSC rate below hardware speed [ 1150.761337][ T36] audit: type=1800 audit(2000001184.259:959): pid=23619 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.24255" name="blkio.bfq.time_recursive" dev="tmpfs" ino=17621 res=0 errno=0 [ 1151.328601][T23658] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 1151.328624][T23658] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1151.386519][T23658] overlayfs: failed to get uuid (3485/file2, err=-13); falling back to uuid=null. [ 1152.370165][T23730] netlink: 104 bytes leftover after parsing attributes in process `syz.4.24307'. [ 1154.122424][T23749] syz.2.24318 (23749): drop_caches: 2 [ 1155.453728][T23902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24386'. [ 1155.453817][T23902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24386'. [ 1155.643541][T23902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24386'. [ 1155.643610][T23902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24386'. [ 1155.906058][T23902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24386'. [ 1155.906156][T23902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24386'. [ 1156.036579][ T36] audit: type=1326 audit(2000001189.569:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23940 comm="syz.2.24407" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3027de0d9 code=0x7ffc0000 [ 1156.037298][ T36] audit: type=1326 audit(2000001189.569:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23940 comm="syz.2.24407" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3027de0d9 code=0x7ffc0000 [ 1156.039364][ T36] audit: type=1326 audit(2000001189.569:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23940 comm="syz.2.24407" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3027de0d9 code=0x7ffc0000 [ 1156.039534][ T36] audit: type=1326 audit(2000001189.569:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23940 comm="syz.2.24407" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb3027de0d9 code=0x7ffc0000 [ 1156.039663][ T36] audit: type=1326 audit(2000001189.569:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23940 comm="syz.2.24407" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3027de0d9 code=0x7ffc0000 [ 1156.039814][ T36] audit: type=1326 audit(2000001189.569:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23940 comm="syz.2.24407" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3027de0d9 code=0x7ffc0000 [ 1156.040013][ T36] audit: type=1326 audit(2000001189.569:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23940 comm="syz.2.24407" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3027de0d9 code=0x7ffc0000 [ 1156.040249][ T36] audit: type=1326 audit(2000001189.569:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23940 comm="syz.2.24407" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3027de0d9 code=0x7ffc0000 [ 1156.040505][ T36] audit: type=1326 audit(2000001189.569:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23940 comm="syz.2.24407" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb3027de0d9 code=0x7ffc0000 [ 1156.040659][ T36] audit: type=1326 audit(2000001189.569:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23940 comm="syz.2.24407" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3027de0d9 code=0x7ffc0000 [ 1157.556742][T24022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24445'. [ 1158.088615][T24055] scsi_dev_info_list_add_str: bad dev info string 'endo€â*r' 'm' '' [ 1159.736713][ T6151] kernel write not supported for file /snd/seq (pid: 6151 comm: kworker/1:7) [ 1160.799473][T24128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.050217][T24128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.109760][T24231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24549'. [ 1162.700805][T24128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.301976][T24128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.493479][ T200] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1163.648938][ T200] usb 3-1: Using ep0 maxpacket: 32 [ 1163.659786][ T200] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1163.659813][ T200] usb 3-1: config 0 has no interface number 0 [ 1163.663823][ T200] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1163.663851][ T200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.663872][ T200] usb 3-1: Product: syz [ 1163.663890][ T200] usb 3-1: Manufacturer: syz [ 1163.663905][ T200] usb 3-1: SerialNumber: syz [ 1163.720288][ T200] usb 3-1: config 0 descriptor?? [ 1163.765837][ T200] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1164.060970][ T200] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1164.143836][ T200] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1164.179176][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 228 [ 1164.385377][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1164.393426][ T5804] usb 3-1: USB disconnect, device number 126 [ 1164.431902][ T5804] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1164.485779][ T5804] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1164.492176][ T5804] quatech2 3-1:0.51: device disconnected [ 1164.595983][T24353] sock: sock_timestamping_bind_phc: sock not bind to device [ 1165.228265][T24394] XFS (mtdblock0): Invalid superblock magic number [ 1166.388763][T24464] netlink: 'syz.4.24655': attribute type 10 has an invalid length. [ 1166.388786][T24464] netlink: 'syz.4.24655': attribute type 4 has an invalid length. [ 1166.388800][T24464] netlink: 116 bytes leftover after parsing attributes in process `syz.4.24655'. [ 1166.566489][T24464] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1166.882764][T24489] netlink: 64 bytes leftover after parsing attributes in process `syz.4.24666'. [ 1167.704273][T24536] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1167.704290][T24536] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1169.227004][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 1169.227022][ T36] audit: type=1326 audit(2000001458.752:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24612 comm="syz.2.24728" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3027de0d9 code=0x7ffc0000 [ 1169.227071][ T36] audit: type=1326 audit(2000001458.752:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24612 comm="syz.2.24728" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3027de0d9 code=0x7ffc0000 [ 1169.230095][ T36] audit: type=1326 audit(2000001458.752:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24612 comm="syz.2.24728" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fb3027de0d9 code=0x7ffc0000 [ 1169.282299][ T36] audit: type=1326 audit(2000001458.802:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24612 comm="syz.2.24728" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3027de0d9 code=0x7ffc0000 [ 1169.282356][ T36] audit: type=1326 audit(2000001458.802:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24612 comm="syz.2.24728" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fb3027de0d9 code=0x7ffc0000 [ 1169.282395][ T36] audit: type=1326 audit(2000001458.802:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24612 comm="syz.2.24728" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3027de0d9 code=0x7ffc0000 [ 1169.471679][T24625] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.24733'. [ 1171.912897][T24733] €Â speed is unknown, defaulting to 1000 [ 1171.967426][T24733] wg1 speed is unknown, defaulting to 1000 [ 1172.274702][T24797] netlink: 'syz.2.24818': attribute type 10 has an invalid length. [ 1172.274724][T24797] netlink: 152 bytes leftover after parsing attributes in process `syz.2.24818'. [ 1174.508487][T24909] bridge0: port 1(syz_tun) entered blocking state [ 1174.522889][T24909] bridge0: port 1(syz_tun) entered disabled state [ 1174.523749][T24909] syz_tun: entered allmulticast mode [ 1174.831206][T24909] syz_tun: entered promiscuous mode [ 1175.326256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.326487][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.326677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.420246][T24940] nvme_fcloop: unknown parameter or missing value 'w' [ 1175.627515][T24956] netlink: 'syz.4.24891': attribute type 12 has an invalid length. [ 1176.665734][T25012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24920'. [ 1177.333621][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.965234][T18948] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1178.559237][T25106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24965'. [ 1181.004780][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 1181.025589][T25123] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1181.084969][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.088851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.089046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.362744][T25297] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1181.782844][T25123] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1181.789813][T25123] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1181.790098][T25123] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1182.129937][T25348] netlink: 'syz.2.25081': attribute type 7 has an invalid length. [ 1182.538366][T25373] netlink: 'syz.4.25093': attribute type 3 has an invalid length. [ 1182.538388][T25373] netlink: 'syz.4.25093': attribute type 1 has an invalid length. [ 1182.538402][T25373] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.25093'. [ 1182.985170][ T5789] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1183.085169][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 1183.135112][ T5789] usb 5-1: Using ep0 maxpacket: 16 [ 1183.138677][ T5789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.138711][ T5789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.138734][ T5789] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1183.138776][ T5789] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1183.138799][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.208725][ T5789] usb 5-1: config 0 descriptor?? [ 1183.666677][ T5789] hid_parser_main: 30 callbacks suppressed [ 1183.666700][ T5789] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 1183.666730][ T5789] microsoft 0003:045E:07DA.002B: ignoring exceeding usage max [ 1183.710078][ T5789] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002B/input/input47 [ 1183.815225][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 1183.824623][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 1184.157497][ T5789] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1184.182502][ T5789] usb 5-1: USB disconnect, device number 118 [ 1184.452119][T25460] fido_id[25460]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1185.785423][ T6151] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1185.946969][ T6151] usb 5-1: Using ep0 maxpacket: 16 [ 1185.949857][ T6151] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1185.949877][ T6151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1185.953750][ T6151] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1185.953777][ T6151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.953795][ T6151] usb 5-1: Product: syz [ 1185.953803][ T6151] usb 5-1: Manufacturer: syz [ 1185.953810][ T6151] usb 5-1: SerialNumber: syz [ 1185.978716][ T6151] usb 5-1: config 0 descriptor?? [ 1186.088508][ T6151] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1186.088531][ T6151] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1186.655047][ T6151] em28xx 5-1:0.0: chip ID is em2828X [ 1186.845615][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.845873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.846065][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.863170][ T6151] usb 5-1: USB disconnect, device number 119 [ 1186.867807][ T6151] em28xx 5-1:0.0: Disconnecting em28xx [ 1187.073571][ T6151] em28xx 5-1:0.0: Freeing device [ 1189.071809][T25675] netlink: 'syz.2.25239': attribute type 2 has an invalid length. [ 1189.071835][T25675] netlink: 'syz.2.25239': attribute type 1 has an invalid length. [ 1189.071860][T25675] nbd: illegal input index 65544 [ 1189.397373][T25666] vim2m vim2m.0: Device registered as /dev/video3 [ 1190.698485][ T5804] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1190.849191][ T5804] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1190.849222][ T5804] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1190.851706][ T5804] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1190.851739][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.851759][ T5804] usb 3-1: Product: syz [ 1190.851774][ T5804] usb 3-1: Manufacturer: syz [ 1190.851788][ T5804] usb 3-1: SerialNumber: syz [ 1190.889015][ T5804] usb 3-1: config 0 descriptor?? [ 1190.890972][T25750] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1190.891102][T25750] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1191.098352][T25750] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1191.098550][T25750] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1191.504725][ T5804] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1191.670378][T25813] ALSA: seq fatal error: cannot create timer (-22) [ 1191.705467][ T5804] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1191.752602][ T5804] usb 3-1: USB disconnect, device number 127 [ 1192.606333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.606549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.606734][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.343448][T25967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25371'. [ 1194.343496][T25967] team0: Cannot enslave team device to itself [ 1194.674469][T25982] sock: sock_set_timeout: `syz.2.25383' (pid 25982) tries to set negative timeout [ 1195.140359][T26008] gretap0: entered promiscuous mode [ 1195.219767][T26008] macvlan0: entered promiscuous mode [ 1195.233813][T26008] gretap0: left promiscuous mode [ 1195.288114][T26018] netlink: 64 bytes leftover after parsing attributes in process `syz.0.25399'. [ 1195.690135][T26040] netlink: 'syz.2.25409': attribute type 1 has an invalid length. [ 1195.690153][T26040] netlink: 84 bytes leftover after parsing attributes in process `syz.2.25409'. [ 1195.690169][T26040] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25409'. [ 1196.237405][T26073] netlink: 44 bytes leftover after parsing attributes in process `syz.0.25429'. [ 1196.237433][T26073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25429'. [ 1196.322318][T26081] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 1196.642018][T26102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25443'. [ 1196.972333][T26112] PID 26112 killed due to inadequate hugepage pool [ 1198.367079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.367301][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.367489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.377004][ T200] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1198.527298][ T200] usb 3-1: Using ep0 maxpacket: 16 [ 1198.530176][ T200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.530209][ T200] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1198.530253][ T200] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 1198.530278][ T200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.553935][ T200] usb 3-1: config 0 descriptor?? [ 1198.687512][T26218] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25497'. [ 1198.997152][ T200] kye 0003:0458:5005.002C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1199.036451][ T200] kye 0003:0458:5005.002C: hidraw0: USB HID v0.00 Mouse [HID 0458:5005] on usb-dummy_hcd.2-1/input0 [ 1199.036488][ T200] kye 0003:0458:5005.002C: tablet-enabling feature report not found [ 1199.036504][ T200] kye 0003:0458:5005.002C: tablet enabling failed [ 1199.865270][T26276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25522'. [ 1199.865296][T26276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25522'. [ 1200.218503][ T5740] usb 3-1: USB disconnect, device number 2 [ 1200.407177][ T6151] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1200.558745][ T6151] usb 5-1: Using ep0 maxpacket: 32 [ 1200.561909][ T6151] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1200.561937][ T6151] usb 5-1: config 0 has no interface number 0 [ 1200.561996][ T6151] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1200.562021][ T6151] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1200.562044][ T6151] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1200.566776][ T6151] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1200.566805][ T6151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.566824][ T6151] usb 5-1: Product: syz [ 1200.566838][ T6151] usb 5-1: Manufacturer: syz [ 1200.566851][ T6151] usb 5-1: SerialNumber: syz [ 1200.653267][ T6151] usb 5-1: config 0 descriptor?? [ 1201.063204][ T6151] appletouch 5-1:0.85: Geyser mode initialized. [ 1201.079356][ T6151] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input48 [ 1201.323463][T26361] 9p: Unknown uid 00000000004294967295 [ 1201.346866][ T5740] usb 5-1: USB disconnect, device number 120 [ 1201.505827][ T5740] appletouch 5-1:0.85: input: appletouch disconnected [ 1202.932383][T26439] netlink: 428 bytes leftover after parsing attributes in process `syz.2.25599'. [ 1202.932415][T26439] netlink: 104 bytes leftover after parsing attributes in process `syz.2.25599'. [ 1203.366338][T26461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.25609'. [ 1203.407629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.407847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.531136][T26535] netlink: 36 bytes leftover after parsing attributes in process `syz.0.25639'. [ 1204.599457][T26538] device-mapper: ioctl: only supply one of name or uuid, cmd(6) [ 1204.823616][T26553] tipc: Enabling of bearer rejected, failed to enable media [ 1205.367764][ T5740] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1205.519974][ T5740] usb 5-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=61.47 [ 1205.520007][ T5740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.528051][ T5740] usb 5-1: config 0 descriptor?? [ 1205.564706][ T5740] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 1206.373304][ T5740] gspca_stv06xx: I2C: Read error writing address: -71 [ 1206.393315][ T5740] usb 5-1: USB disconnect, device number 121 [ 1206.688038][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.688203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.688318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.559827][T26782] netlink: 'syz.0.25756': attribute type 11 has an invalid length. [ 1208.559851][T26782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25756'. [ 1209.284627][T26831] input: syz0 as /devices/virtual/input/input49 [ 1209.328304][T18948] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1210.053928][T26879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25801'. [ 1211.563684][T26966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25837'. [ 1211.780690][ T6027] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1211.928555][ T6027] usb 5-1: Using ep0 maxpacket: 32 [ 1211.931262][ T6027] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1211.931287][ T6027] usb 5-1: config 0 has no interface number 0 [ 1211.931330][ T6027] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.931355][ T6027] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.931392][ T6027] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1211.931414][ T6027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.006188][ T6027] usb 5-1: config 0 descriptor?? [ 1212.642952][ T6027] uclogic 0003:28BD:0094.002D: failed retrieving string descriptor #100: -71 [ 1212.643019][ T6027] uclogic 0003:28BD:0094.002D: failed retrieving pen parameters: -71 [ 1212.643039][ T6027] uclogic 0003:28BD:0094.002D: pen probing failed: -71 [ 1212.643056][ T6027] uclogic 0003:28BD:0094.002D: failed probing parameters: -71 [ 1212.643166][ T6027] uclogic 0003:28BD:0094.002D: probe with driver uclogic failed with error -71 [ 1212.706504][ T6027] usb 5-1: USB disconnect, device number 122 [ 1212.928808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.929194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.929369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.368744][ T6027] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1213.518748][T27008] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1213.524955][ T6027] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1213.524988][ T6027] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.525011][ T6027] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1213.525053][ T6027] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1213.525077][ T6027] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.600333][ T6027] usb 3-1: config 0 descriptor?? [ 1213.672696][T27008] usb 5-1: config 0 interface 0 altsetting 89 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1213.672731][T27008] usb 5-1: config 0 interface 0 altsetting 89 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1213.672758][T27008] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1213.673018][T27008] usb 5-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 1213.673044][T27008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.736975][T27008] usb 5-1: config 0 descriptor?? [ 1213.745092][T27049] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1214.072487][ T6027] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1214.072528][ T6027] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1214.072784][ T6027] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1214.072816][ T6027] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1214.072844][ T6027] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1214.072871][ T6027] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1214.073293][ T6027] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1214.073322][ T6027] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1214.073349][ T6027] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1214.073376][ T6027] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1214.224666][ T6027] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1214.422791][ T6027] usb 5-1: USB disconnect, device number 123 [ 1214.528276][T27008] usb 3-1: USB disconnect, device number 3 [ 1215.234383][T27148] loop8: detected capacity change from 0 to 7 [ 1215.345121][T27148] Dev loop8: unable to read RDB block 7 [ 1215.345176][T27148] loop8: unable to read partition table [ 1215.345374][T27148] loop8: partition table beyond EOD, truncated [ 1215.345406][T27148] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 1217.483117][T27275] netlink: 52 bytes leftover after parsing attributes in process `syz.0.25985'. [ 1219.418395][T27403] loop5: detected capacity change from 0 to 7 [ 1219.501462][T27403] Dev loop5: unable to read RDB block 7 [ 1219.501507][T27403] loop5: unable to read partition table [ 1219.501706][T27403] loop5: partition table beyond EOD, truncated [ 1219.501738][T27403] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1219.503143][T27406] cifs: Bad value for 'source' [ 1219.717150][T27418] Invalid ELF header magic: != ELF [ 1219.813021][T27422] loop3: detected capacity change from 0 to 7 [ 1219.941887][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1219.942103][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1219.965624][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1219.965708][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1220.047194][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1220.047274][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1220.084140][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1220.084236][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1220.084471][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1220.084534][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1220.084724][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1220.084783][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1220.084945][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1220.085009][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1220.085053][T27422] ldm_validate_partition_table(): Disk read failed. [ 1220.086675][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1220.086721][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1220.088262][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1220.088304][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1220.088492][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1220.088530][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 1220.094857][T27422] Dev loop3: unable to read RDB block 0 [ 1220.102825][T27422] loop3: unable to read partition table [ 1220.103018][T27422] loop3: partition table beyond EOD, truncated [ 1220.103047][T27422] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 1220.139638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.139842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.140018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.140158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.420374][T27449] netlink: 'syz.0.26067': attribute type 83 has an invalid length. [ 1220.646118][T27008] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1220.800401][T27008] usb 5-1: Using ep0 maxpacket: 32 [ 1220.805839][T27008] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1220.805869][T27008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.839629][ T5740] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1220.845607][T27008] usb 5-1: config 0 descriptor?? [ 1220.963254][T27473] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1220.989700][ T5740] usb 3-1: Using ep0 maxpacket: 32 [ 1220.998629][ T5740] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1221.000068][ T5740] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1221.000162][ T5740] usb 3-1: can't read configurations, error -71 [ 1221.049004][T27008] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1221.064799][T27008] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1221.066018][T27008] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1221.066073][T27008] usb 5-1: media controller created [ 1221.114464][T27008] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1221.392440][T27008] az6027: usb out operation failed. (-71) [ 1221.392860][T27008] az6027: usb out operation failed. (-71) [ 1221.392875][T27008] stb0899_attach: Driver disabled by Kconfig [ 1221.392964][T27008] az6027: no front-end attached [ 1221.392964][T27008] [ 1221.393383][T27008] az6027: usb out operation failed. (-71) [ 1221.393396][T27008] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1221.443858][T27008] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input50 [ 1221.478533][T27008] dvb-usb: schedule remote query interval to 400 msecs. [ 1221.478557][T27008] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1221.500436][T27008] usb 5-1: USB disconnect, device number 124 [ 1221.740414][T27008] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1221.965431][T27512] sg_write: data in/out 421312/136 bytes for SCSI command 0x0-- guessing data in; [ 1221.965431][T27512] program syz.2.26097 not setting count and/or reply_len properly [ 1222.884365][T27562] 9p: Bad value for 'wfdno' [ 1223.500174][ T200] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1223.650374][ T200] usb 5-1: Using ep0 maxpacket: 32 [ 1223.671028][ T200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.671084][ T200] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1223.671106][ T200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.714958][ T200] usb 5-1: config 0 descriptor?? [ 1224.149027][ T200] hid_parser_main: 35 callbacks suppressed [ 1224.149051][ T200] logitech-hidpp-device 0003:046D:C086.0030: unknown main item tag 0x0 [ 1224.149083][ T200] logitech-hidpp-device 0003:046D:C086.0030: unknown main item tag 0x0 [ 1224.149111][ T200] logitech-hidpp-device 0003:046D:C086.0030: unknown main item tag 0x0 [ 1224.149139][ T200] logitech-hidpp-device 0003:046D:C086.0030: unknown main item tag 0x0 [ 1224.149167][ T200] logitech-hidpp-device 0003:046D:C086.0030: unknown main item tag 0x0 [ 1224.149194][ T200] logitech-hidpp-device 0003:046D:C086.0030: unknown main item tag 0x0 [ 1224.149221][ T200] logitech-hidpp-device 0003:046D:C086.0030: unknown main item tag 0x0 [ 1224.149249][ T200] logitech-hidpp-device 0003:046D:C086.0030: unknown main item tag 0x0 [ 1224.149276][ T200] logitech-hidpp-device 0003:046D:C086.0030: unknown main item tag 0x0 [ 1224.149303][ T200] logitech-hidpp-device 0003:046D:C086.0030: unknown main item tag 0x0 [ 1224.158116][ T200] logitech-hidpp-device 0003:046D:C086.0030: unexpected long global item [ 1224.159118][ T200] logitech-hidpp-device 0003:046D:C086.0030: hidpp_probe:parse failed [ 1224.159222][ T200] logitech-hidpp-device 0003:046D:C086.0030: probe with driver logitech-hidpp-device failed with error -22 [ 1224.346524][ T5740] usb 5-1: USB disconnect, device number 125 [ 1224.400051][T27008] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1224.550634][T27008] usb 3-1: Using ep0 maxpacket: 32 [ 1224.554701][T27008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 1224.554735][T27008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24819, setting to 1024 [ 1224.554777][T27008] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1224.554801][T27008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.610550][T27008] usb 3-1: config 0 descriptor?? [ 1224.615999][T27008] hub 3-1:0.0: USB hub found [ 1224.818652][T27008] hub 3-1:0.0: 1 port detected [ 1225.030297][T27008] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1225.030671][T27008] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1225.058278][T27008] usbhid 3-1:0.0: can't add hid device: -71 [ 1225.058407][T27008] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1225.105743][T27008] usb 3-1: USB disconnect, device number 6 [ 1225.893307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.893543][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.893730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.550591][T27008] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1228.721787][T27008] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1228.721819][T27008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.721841][T27008] usb 3-1: Product: syz [ 1228.721856][T27008] usb 3-1: Manufacturer: syz [ 1228.721871][T27008] usb 3-1: SerialNumber: syz [ 1228.838942][T27008] usb 3-1: config 0 descriptor?? [ 1228.865967][T27008] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 007 [ 1229.215724][ T5804] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1229.292030][T27008] (null): failure reading functionality [ 1229.308104][T27008] i2c i2c-1: failure reading functionality [ 1229.341961][T27008] i2c i2c-1: connected i2c-tiny-usb device [ 1229.377230][T27008] usb 3-1: USB disconnect, device number 7 [ 1229.389011][ T5804] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1229.389041][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.389061][ T5804] usb 5-1: Product: syz [ 1229.389076][ T5804] usb 5-1: Manufacturer: syz [ 1229.389091][ T5804] usb 5-1: SerialNumber: syz [ 1229.464668][ T5804] ums-karma 5-1:1.0: USB Mass Storage device detected [ 1229.482094][ T5804] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 1229.482094][ T5804] Please send a copy of this message to and [ 1229.922914][ T5804] ums-karma 5-1:1.0: probe with driver ums-karma failed with error -5 [ 1230.068323][ T5804] usb 5-1: USB disconnect, device number 126 [ 1230.449717][T27927] loop2: detected capacity change from 0 to 3 [ 1230.541944][T27927] Dev loop2: unable to read RDB block 3 [ 1230.542007][T27927] loop2: unable to read partition table [ 1230.542222][T27927] loop2: partition table beyond EOD, truncated [ 1230.542259][T27927] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1231.010941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.011131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.011307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.011511][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.100901][ T5804] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 1231.264948][ T5804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1231.266398][ T5804] usb 5-1: not running at top speed; connect to a high speed hub [ 1231.267590][ T5804] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.267640][ T5804] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1231.303538][ T5804] usb 5-1: New USB device found, idVendor=dead, idProduct=beef, bcdDevice= 1.00 [ 1231.303570][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.303590][ T5804] usb 5-1: Product: syz [ 1231.303605][ T5804] usb 5-1: Manufacturer: syz [ 1231.303619][ T5804] usb 5-1: SerialNumber: syz [ 1231.616516][ T5317] usb 5-1: USB disconnect, device number 127 [ 1232.948725][T28050] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.26359'. [ 1232.966541][ T36] audit: type=1326 audit(2000001522.485:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28051 comm="syz.2.26360" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3027de0d9 code=0x0 [ 1234.743896][T28141] ref_ctr_offset mismatch. inode: 0x4f60 offset: 0x0 ref_ctr_offset(old): 0x20040 ref_ctr_offset(new): 0x0 [ 1235.121907][T28157] loop8: detected capacity change from 0 to 7 [ 1235.123612][T28157] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 1235.125414][T28157] loop8: p1 start 1401545024 is beyond EOD, truncated [ 1235.125439][T28157] loop8: p2 start 1879513920 is beyond EOD, truncated [ 1235.125456][T28157] loop8: p3 start 2737222337 is beyond EOD, truncated [ 1235.125472][T28157] loop8: p4 start 1399688579 is beyond EOD, truncated [ 1235.125488][T28157] loop8: p5 start 1878206208 is beyond EOD, truncated [ 1235.125504][T28157] loop8: p6 start 3948687153 is beyond EOD, truncated [ 1235.125521][T28157] loop8: p7 start 1740591330 is beyond EOD, truncated [ 1235.125537][T28157] loop8: p8 start 3394965712 is beyond EOD, truncated [ 1235.125552][T28157] loop8: p9 start 99510641 is beyond EOD, truncated [ 1235.125568][T28157] loop8: p10 start 1318944454 is beyond EOD, truncated [ 1235.125584][T28157] loop8: p11 start 1842501597 is beyond EOD, truncated [ 1235.125600][T28157] loop8: p12 start 4293143335 is beyond EOD, truncated [ 1235.664511][T28182] netlink: 7 bytes leftover after parsing attributes in process `syz.0.26421'. [ 1235.908720][T28196] netlink: 284 bytes leftover after parsing attributes in process `syz.2.26427'. [ 1236.051568][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.051775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.051972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.088116][T28246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.119253][T28246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.119689][T28246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.120077][T28246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.166697][T28246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.167168][T28246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.167564][T28246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.649381][ T5740] kernel read not supported for file /8310/schedstat (pid: 5740 comm: kworker/1:3) [ 1238.778385][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.267169][T28350] netlink: 56 bytes leftover after parsing attributes in process `syz.4.26498'. [ 1240.189096][T28398] loop8: detected capacity change from 0 to 8 [ 1240.352172][T28398] Dev loop8: unable to read RDB block 8 [ 1240.352215][T28398] loop8: unable to read partition table [ 1240.352427][T28398] loop8: partition table beyond EOD, truncated [ 1240.352446][T28398] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1240.686587][T28424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.26534'. [ 1241.022790][T28442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26543'. [ 1241.332616][T19011] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1241.847608][ T5789] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1241.892281][ C0] net_ratelimit: 43 callbacks suppressed [ 1241.892310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.892521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.892721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.964270][T28480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1242.041062][ T5789] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.041091][ T5789] usb 5-1: config 0 has no interfaces? [ 1242.062133][ T5789] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1242.062164][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1242.062185][ T5789] usb 5-1: Product: syz [ 1242.062200][ T5789] usb 5-1: SerialNumber: syz [ 1242.099535][ T5789] usb 5-1: config 0 descriptor?? [ 1242.346076][ T5740] usb 5-1: USB disconnect, device number 2 [ 1243.200775][T28547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26594'. [ 1243.203553][ T5740] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1243.355776][ T5740] usb 5-1: Using ep0 maxpacket: 8 [ 1243.358165][ T5740] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1243.358192][ T5740] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1243.358217][ T5740] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1243.358242][ T5740] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 1243.358267][ T5740] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1243.358289][ T5740] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1243.358313][ T5740] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1243.358326][ T5740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.612340][ T5740] usb 5-1: GET_CAPABILITIES returned 0 [ 1243.612388][ T5740] usbtmc 5-1:16.0: can't read capabilities [ 1243.898111][ T5789] usb 5-1: USB disconnect, device number 3 [ 1244.269130][T28595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26618'. [ 1244.711056][ T5740] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1244.887407][ T5740] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1244.887438][ T5740] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1244.887459][ T5740] usb 3-1: Product: syz [ 1244.942734][ T5740] usb 3-1: config 0 descriptor?? [ 1244.956723][ T5740] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1244.965930][ T5740] usb 3-1: Detected FT232H [ 1245.156006][ T5740] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1245.600758][ T5740] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1245.769370][T27192] usb 3-1: USB disconnect, device number 8 [ 1246.070646][T27192] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1246.071482][T27192] ftdi_sio 3-1:0.0: device disconnected [ 1246.698163][T28713] sg_write: data in/out 409564/136 bytes for SCSI command 0x0-- guessing data in; [ 1246.698163][T28713] program syz.2.26675 not setting count and/or reply_len properly [ 1247.524875][T28741] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.26689'. [ 1247.653015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.653225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.653415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.873093][ T5789] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1248.023501][ T5789] usb 3-1: Using ep0 maxpacket: 16 [ 1248.026030][ T5789] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.026060][ T5789] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.026084][ T5789] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1248.026117][ T5789] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1248.026141][ T5789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.086803][ T5789] usb 3-1: config 0 descriptor?? [ 1248.269206][T28792] netlink: 'syz.0.26712': attribute type 10 has an invalid length. [ 1248.269295][T28792] netlink: 152 bytes leftover after parsing attributes in process `syz.0.26712'. [ 1248.510756][ T5789] nzxt-smart2 0003:1E71:2009.0031: item fetching failed at offset 0/5 [ 1248.511527][ T5789] nzxt-smart2 0003:1E71:2009.0031: probe with driver nzxt-smart2 failed with error -22 [ 1248.702465][ T5317] usb 3-1: USB disconnect, device number 9 [ 1250.711811][ T36] audit: type=1326 audit(2000001540.222:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28886 comm="syz.0.26760" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1250.713703][ T36] audit: type=1326 audit(2000001540.222:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28886 comm="syz.0.26760" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1250.715821][ T36] audit: type=1326 audit(2000001540.232:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28886 comm="syz.0.26760" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1250.716105][ T36] audit: type=1326 audit(2000001540.232:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28886 comm="syz.0.26760" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1250.716343][ T36] audit: type=1326 audit(2000001540.232:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28886 comm="syz.0.26760" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1250.716586][ T36] audit: type=1326 audit(2000001540.232:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28886 comm="syz.0.26760" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1250.716836][ T36] audit: type=1326 audit(2000001540.232:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28886 comm="syz.0.26760" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1250.717191][ T36] audit: type=1326 audit(2000001540.232:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28886 comm="syz.0.26760" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1250.717460][ T36] audit: type=1326 audit(2000001540.232:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28886 comm="syz.0.26760" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1250.717711][ T36] audit: type=1326 audit(2000001540.232:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28886 comm="syz.0.26760" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9389e3e0d9 code=0x7ffc0000 [ 1251.048787][T28898] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1253.413652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.413886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.414083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.012707][T29065] netlink: 104 bytes leftover after parsing attributes in process `syz.0.26842'. [ 1255.594871][T29091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26856'. [ 1256.457037][T29140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.26880'. [ 1257.023124][T29173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26894'. [ 1257.023153][T29173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26894'. [ 1257.422634][T29199] loop8: detected capacity change from 0 to 7 [ 1257.467704][T29199] Dev loop8: unable to read RDB block 7 [ 1257.467763][T29199] loop8: unable to read partition table [ 1257.467976][T29199] loop8: partition table beyond EOD, truncated [ 1257.468008][T29199] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 1257.585726][T29206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.26909'. [ 1257.585754][T29206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.26909'. [ 1257.586350][T29206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.26909'. [ 1257.586371][T29206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.26909'. [ 1257.882870][T29216] erspan0: entered promiscuous mode [ 1257.883037][T29216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26914'. [ 1259.174315][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.174507][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.174699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.288003][T29343] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 1261.258474][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.447514][T29447] loop8: detected capacity change from 0 to 8 [ 1262.502125][T29447] Dev loop8: unable to read RDB block 8 [ 1262.502158][T29447] loop8: unable to read partition table [ 1262.502276][T29447] loop8: partition table beyond EOD, truncated [ 1262.502303][T29447] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1263.474323][ T5802] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1263.624732][ T6027] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1263.774813][ T6027] usb 3-1: Using ep0 maxpacket: 32 [ 1263.778326][ T6027] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1263.778356][ T6027] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.814376][ T6027] usb 3-1: config 0 descriptor?? [ 1263.845999][ T6027] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1264.047916][T29535] fuse: Bad value for 'fd' [ 1264.215016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.215235][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.215425][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.433451][T29552] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.27076'. [ 1264.865498][ T6027] gspca_sq930x: ucbus_write failed -71 [ 1264.865584][ T6027] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 1264.964987][ T6027] usb 3-1: USB disconnect, device number 10 [ 1265.364721][T29595] netlink: 132 bytes leftover after parsing attributes in process `syz.4.27096'. [ 1266.100741][T29637] loop8: detected capacity change from 0 to 7 [ 1266.120914][T29637] Dev loop8: unable to read RDB block 7 [ 1266.120966][T29637] loop8: unable to read partition table [ 1266.121155][T29637] loop8: partition table beyond EOD, truncated [ 1266.122883][T29637] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 1266.604211][T29665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27133'. [ 1266.604352][T29665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27133'. [ 1268.365428][ T5317] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1268.535366][ T5317] usb 5-1: Using ep0 maxpacket: 8 [ 1268.540616][ T5317] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1268.540644][ T5317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1268.540665][ T5317] usb 5-1: Product: syz [ 1268.540679][ T5317] usb 5-1: Manufacturer: syz [ 1268.540693][ T5317] usb 5-1: SerialNumber: syz [ 1268.586105][ T5317] usb 5-1: config 0 descriptor?? [ 1268.591883][ T5317] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1269.255752][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.255982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.256199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.425111][ T5317] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 1269.425233][ T5317] sq905 5-1:0.0: probe with driver sq905 failed with error -32 [ 1269.455600][ T5317] usb 5-1: USB disconnect, device number 4 [ 1269.675629][T27192] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1269.829483][T27192] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.829543][T27192] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1269.829565][T27192] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1269.829629][T27192] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1269.829654][T27192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.122561][T27192] cxacru_cm: 14 callbacks suppressed [ 1270.122659][T27192] cxacru 3-1:1.0: invalid response length to cm 0x90: 0 [ 1270.122721][T27192] cxacru 3-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 1270.123369][T27192] cxacru 3-1:1.0: probe with driver cxacru failed with error -22 [ 1270.335119][T27192] usb 3-1: USB disconnect, device number 11 [ 1270.563097][T29860] Invalid argument reading file caps for ./file0 [ 1272.896040][T27008] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1273.069207][T27008] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.069235][T27008] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1273.069316][T27008] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1273.071632][T27008] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1273.071659][T27008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.071678][T27008] usb 3-1: Product: syz [ 1273.071693][T27008] usb 3-1: Manufacturer: syz [ 1273.071706][T27008] usb 3-1: SerialNumber: syz [ 1273.124547][T27008] cdc_ncm 3-1:1.0: skipping garbage [ 1273.124581][T27008] cdc_ncm 3-1:1.0: invalid descriptor buffer length [ 1273.124599][T27008] usb 3-1: selecting invalid altsetting 1 [ 1273.337071][T18909] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1273.764273][T27008] usb 3-1: selecting invalid altsetting 1 [ 1273.764330][T27008] cdc_ncm 3-1:1.0: bind() failure [ 1273.961111][ T5317] usb 3-1: USB disconnect, device number 12 [ 1274.629849][T30077] netlink: 104 bytes leftover after parsing attributes in process `syz.4.27330'. [ 1274.714251][T30083] netlink: 56 bytes leftover after parsing attributes in process `syz.4.27333'. [ 1275.113013][T30104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27342'. [ 1275.113039][T30104] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1275.176227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.176423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.176611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.771521][T30140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27359'. [ 1275.773867][T30140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27359'. [ 1277.783117][T30242] ima: policy update failed [ 1277.784059][ T36] audit: type=1802 audit(2000001567.289:1009): pid=30242 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.0.27408" res=0 errno=0 [ 1279.809511][ T36] audit: type=1326 audit(2000001569.319:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30347 comm="syz.2.27461" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3027de0d9 code=0x0 [ 1279.936430][T30351] sctp: [Deprecated]: syz.4.27459 (pid 30351) Use of int in maxseg socket option. [ 1279.936430][T30351] Use struct sctp_assoc_value instead [ 1280.783196][T30407] netlink: 'syz.4.27484': attribute type 10 has an invalid length. [ 1280.952262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.952468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.952664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.139249][T30407] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1282.109759][T30467] loop5: detected capacity change from 0 to 7 [ 1282.421365][T30467] Dev loop5: unable to read RDB block 7 [ 1282.421418][T30467] loop5: unable to read partition table [ 1282.421615][T30467] loop5: partition table beyond EOD, truncated [ 1282.421653][T30467] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1282.545072][T30471] Dev loop5: unable to read RDB block 7 [ 1282.545117][T30471] loop5: unable to read partition table [ 1282.545315][T30471] loop5: partition table beyond EOD, truncated [ 1282.545347][T30471] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1282.885229][T30503] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 1284.617328][T27008] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1284.800462][T27008] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1284.800496][T27008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.800517][T27008] usb 3-1: Product: syz [ 1284.800532][T27008] usb 3-1: Manufacturer: syz [ 1284.800547][T27008] usb 3-1: SerialNumber: syz [ 1284.820466][T27008] usb 3-1: config 0 descriptor?? [ 1284.861343][T27008] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1285.467558][T27008] gspca_stk1135: reg_w 0x3 err -71 [ 1285.468828][T27008] gspca_stk1135: serial bus timeout: status=0x00 [ 1285.468844][T27008] gspca_stk1135: Sensor write failed [ 1285.468872][T27008] gspca_stk1135: serial bus timeout: status=0x00 [ 1285.468882][T27008] gspca_stk1135: Sensor write failed [ 1285.468907][T27008] gspca_stk1135: serial bus timeout: status=0x00 [ 1285.468917][T27008] gspca_stk1135: Sensor read failed [ 1285.468944][T27008] gspca_stk1135: serial bus timeout: status=0x00 [ 1285.468953][T27008] gspca_stk1135: Sensor read failed [ 1285.468961][T27008] gspca_stk1135: Detected sensor type unknown (0x0) [ 1285.469016][T27008] gspca_stk1135: serial bus timeout: status=0x00 [ 1285.469027][T27008] gspca_stk1135: Sensor read failed [ 1285.469052][T27008] gspca_stk1135: serial bus timeout: status=0x00 [ 1285.469062][T27008] gspca_stk1135: Sensor read failed [ 1285.469088][T27008] gspca_stk1135: serial bus timeout: status=0x00 [ 1285.469097][T27008] gspca_stk1135: Sensor write failed [ 1285.476130][T27008] gspca_stk1135: serial bus timeout: status=0x00 [ 1285.476147][T27008] gspca_stk1135: Sensor write failed [ 1285.476255][T27008] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1285.530056][T27008] usb 3-1: USB disconnect, device number 13 [ 1286.148325][T30669] netlink: 'syz.2.27606': attribute type 32 has an invalid length. [ 1286.148347][T30669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27606'. [ 1286.341995][T30669] bond3: option coupled_control: invalid value (46) [ 1286.462150][T30669] bond3 (unregistering): Released all slaves [ 1286.617647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.617831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.620387][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.392860][T30773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27655'. [ 1288.922322][T30797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1289.438049][T30814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.255064][T30848] netlink: 64 bytes leftover after parsing attributes in process `syz.0.27690'. [ 1290.669137][T30869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27702'. [ 1290.670596][T30869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27702'. [ 1291.818303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.818503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.818688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.126176][T30941] loop6: detected capacity change from 0 to 7 [ 1292.712639][T30968] VFS: file-max limit 0 reached [ 1293.098622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.236706][T30990] loop5: detected capacity change from 0 to 7 [ 1293.250772][T30990] Dev loop5: unable to read RDB block 7 [ 1293.250816][T30990] loop5: unable to read partition table [ 1293.251110][T30990] loop5: partition table beyond EOD, truncated [ 1293.251131][T30990] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1293.558722][T31001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27763'. [ 1295.523832][T31092] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 1296.046786][T31122] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1296.046803][T31122] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1296.675423][T31154] loop8: detected capacity change from 0 to 7 [ 1296.706117][T31154] Dev loop8: unable to read RDB block 7 [ 1296.706160][T31154] loop8: unable to read partition table [ 1296.706343][T31154] loop8: partition table beyond EOD, truncated [ 1296.706377][T31154] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 1296.938787][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.939000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.939209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.099062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.926777][T31267] lo: entered allmulticast mode [ 1298.932019][T31266] lo: left allmulticast mode [ 1298.999060][T27008] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1299.160582][T27008] usb 5-1: Using ep0 maxpacket: 16 [ 1299.163046][T27008] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1299.167281][T27008] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.167369][T27008] usb 5-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1299.174434][T27008] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1299.174462][T27008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.174482][T27008] usb 5-1: Product: syz [ 1299.174497][T27008] usb 5-1: Manufacturer: syz [ 1299.174511][T27008] usb 5-1: SerialNumber: syz [ 1299.269046][ T5317] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1299.422379][ T5317] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 1299.422437][ T5317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1299.422465][ T5317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1299.422503][ T5317] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1299.422526][ T5317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.436964][T27008] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1299.445241][T27008] snd-usb-audio 5-1:5.0: probe with driver snd-usb-audio failed with error -22 [ 1299.524360][ T5317] usb 3-1: config 0 descriptor?? [ 1299.659499][T27008] usb 5-1: 2:1 : can't get High Capability descriptor [ 1299.978219][ T5317] hid_parser_main: 241 callbacks suppressed [ 1299.978242][ T5317] logitech 0003:046D:C29C.0032: unknown main item tag 0x2 [ 1300.005973][ T5317] logitech 0003:046D:C29C.0032: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 1300.010735][T27008] usb 5-1: USB disconnect, device number 5 [ 1300.230062][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.391422][ T5317] logitech 0003:046D:C29C.0032: no inputs found [ 1300.473353][ T5317] usb 3-1: USB disconnect, device number 14 [ 1300.492083][T31301] fido_id[31301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C29C.0032/report_descriptor': No such file or directory [ 1301.816625][T27008] libceph: connect (1)[c::]:6789 error -101 [ 1301.843754][T27008] libceph: mon0 (1)[c::]:6789 connect error [ 1301.919526][T27008] libceph: connect (1)[c::]:6789 error -101 [ 1301.919715][T27008] libceph: mon0 (1)[c::]:6789 connect error [ 1301.942358][T31360] ceph: No mds server is up or the cluster is laggy [ 1302.195938][ T6027] libceph: connect (1)[c::]:6789 error -101 [ 1302.196133][ T6027] libceph: mon0 (1)[c::]:6789 connect error [ 1302.522715][T31410] batadv_slave_1: entered promiscuous mode [ 1302.524677][T31409] batadv_slave_1: left promiscuous mode [ 1302.699562][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.699798][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.699988][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.724567][ T6027] libceph: connect (1)[c::]:6789 error -101 [ 1302.724746][ T6027] libceph: mon0 (1)[c::]:6789 connect error [ 1303.608567][T31455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27978'. [ 1303.608593][T31455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27978'. [ 1305.358535][T18909] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1305.479978][T31555] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1633771873 out of range (51000..2150000) [ 1305.994420][T27192] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1306.164006][T27192] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1306.164039][T27192] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1306.164063][T27192] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1306.206793][T27192] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1306.206825][T27192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.206846][T27192] usb 5-1: Product: syz [ 1306.206861][T27192] usb 5-1: Manufacturer: syz [ 1306.206876][T27192] usb 5-1: SerialNumber: syz [ 1306.334345][T27192] hub 5-1:1.0: bad descriptor, ignoring hub [ 1306.334382][T27192] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1306.548584][T27192] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1307.185156][T31643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28068'. [ 1307.185184][T31643] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1307.352367][T27008] usb 5-1: USB disconnect, device number 6 [ 1307.400522][T27008] usblp0: removed [ 1308.460302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1308.460505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1308.460681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1308.937625][T31728] VFS: file-max limit 0 reached [ 1309.385517][T31757] trusted_key: syz.0.28120 sent an empty control message without MSG_MORE. [ 1309.929806][T31784] netlink: 16 bytes leftover after parsing attributes in process `syz.2.28134'. [ 1310.584214][T31815] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1312.660600][ T5804] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1312.845847][ T5804] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1312.845878][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.845897][ T5804] usb 3-1: Product: syz [ 1312.845911][ T5804] usb 3-1: Manufacturer: syz [ 1312.845926][ T5804] usb 3-1: SerialNumber: syz [ 1312.855704][ T5804] usb 3-1: config 0 descriptor?? [ 1313.296048][T31872] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1313.323421][ T5804] usb 3-1: Firmware: major: 160, minor: 18, hardware type: UNKNOWN (79) [ 1313.529266][ T5804] usb 3-1: Read permanent extended address 24:11:1d:0b:70:a9:e0:a4 from device [ 1313.529292][ T5804] usb 3-1: atusb_probe: initialization failed, error = -524 [ 1313.529500][ T5804] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 1313.740490][ T5317] usb 3-1: USB disconnect, device number 15 [ 1314.220898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.221107][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.221293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.086132][T32036] device-mapper: ioctl: Invalid ioctl structure: uuid `ˆ$, name , dev 100 [ 1318.370860][T32148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.28306'. [ 1319.927376][T32220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28341'. [ 1319.927413][T32220] netlink: 'syz.2.28341': attribute type 14 has an invalid length. [ 1319.927427][T32220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28341'. [ 1319.932229][T32220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28341'. [ 1319.932259][T32220] netlink: 'syz.2.28341': attribute type 14 has an invalid length. [ 1319.932273][T32220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28341'. [ 1319.981509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.981737][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.981930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.522501][T32250] loop2: detected capacity change from 0 to 7 [ 1320.565121][T32250] Dev loop2: unable to read RDB block 7 [ 1320.565156][T32250] loop2: AHDI p1 p2 p3 [ 1320.565168][T32250] loop2: partition table partially beyond EOD, truncated [ 1320.565314][T32250] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1320.565324][T32250] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1320.626660][T32255] block2mtd: error: cannot open device [ 1322.167810][T32334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28397'. [ 1323.341909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.342138][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.342323][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.532128][ T5804] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1323.697550][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1323.697584][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1323.697622][ T5804] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1323.697645][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.754449][ T5804] usb 5-1: config 0 descriptor?? [ 1324.365622][ T5804] usb 5-1: string descriptor 0 read error: -22 [ 1324.578164][ T5804] uclogic 0003:256C:006D.0033: failed retrieving string descriptor #200: -71 [ 1324.578227][ T5804] uclogic 0003:256C:006D.0033: failed retrieving pen parameters: -71 [ 1324.578244][ T5804] uclogic 0003:256C:006D.0033: failed probing pen v2 parameters: -71 [ 1324.578309][ T5804] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 1324.578417][ T5804] uclogic 0003:256C:006D.0033: probe with driver uclogic failed with error -71 [ 1324.651761][ T5804] usb 5-1: USB disconnect, device number 7 [ 1325.983622][ T5740] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1326.134675][ T5740] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.134732][ T5740] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1326.137460][ T5740] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 1326.137489][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.137509][ T5740] usb 5-1: Product: syz [ 1326.137523][ T5740] usb 5-1: Manufacturer: syz [ 1326.137537][ T5740] usb 5-1: SerialNumber: syz [ 1326.429817][ T5740] dvbdev: DVB: registering new adapter (DEC3000-s) [ 1326.451386][ T5740] usb 5-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 1326.635675][ T5740] usb 5-1: selecting invalid altsetting 8 [ 1326.862789][ T5740] usb 5-1: USB disconnect, device number 8 [ 1327.249147][T32568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.28508'. [ 1327.891647][T32568] Set syz1 is full, maxelem 2076 reached [ 1328.302476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.434309][ T5804] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1329.582580][ T5804] usb 3-1: Using ep0 maxpacket: 8 [ 1329.585883][ T5804] usb 3-1: config 0 has no interfaces? [ 1329.585920][ T5804] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1329.585953][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.632804][ T5804] usb 3-1: config 0 descriptor?? [ 1329.837337][T32685] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 1330.097264][T32651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.114517][T32651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.133992][ T5804] usb 3-1: USB disconnect, device number 16 [ 1330.652705][ T200] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1330.814078][ T200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1330.814124][ T200] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1330.814148][ T200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.844982][ T200] usb 5-1: config 0 descriptor?? [ 1330.848201][T32711] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1331.321624][ T200] asus 0003:0B05:1ABE.0034: unknown main item tag 0x0 [ 1331.321663][ T200] asus 0003:0B05:1ABE.0034: unknown main item tag 0x0 [ 1331.321698][ T200] asus 0003:0B05:1ABE.0034: unknown main item tag 0x0 [ 1331.321726][ T200] asus 0003:0B05:1ABE.0034: unknown main item tag 0x0 [ 1331.321753][ T200] asus 0003:0B05:1ABE.0034: unknown main item tag 0x0 [ 1331.321778][ T200] asus 0003:0B05:1ABE.0034: unknown main item tag 0x0 [ 1331.321803][ T200] asus 0003:0B05:1ABE.0034: unknown main item tag 0x0 [ 1331.321828][ T200] asus 0003:0B05:1ABE.0034: unknown main item tag 0x0 [ 1331.321855][ T200] asus 0003:0B05:1ABE.0034: unknown main item tag 0x0 [ 1331.321880][ T200] asus 0003:0B05:1ABE.0034: unknown main item tag 0x0 [ 1331.349923][ T200] asus 0003:0B05:1ABE.0034: reserved main item tag 0xd [ 1331.393567][ T200] asus 0003:0B05:1ABE.0034: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.4-1/input0 [ 1331.490923][ T200] asus 0003:0B05:1ABE.0034: Asus handshake 5a failed to send: -71 [ 1331.490949][ T200] asus 0003:0B05:1ABE.0034: Failed to initialize 0x5a: -71. [ 1331.512944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.513153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.526092][ T200] usb 5-1: USB disconnect, device number 9 [ 1331.614028][T32758] fido_id[32758]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1332.929828][ T342] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1333.004671][ T361] netlink: 'syz.0.28634': attribute type 5 has an invalid length. [ 1333.004692][ T361] netlink: 'syz.0.28634': attribute type 6 has an invalid length. [ 1333.004705][ T361] netlink: 'syz.0.28634': attribute type 4 has an invalid length. [ 1333.004718][ T361] netlink: 'syz.0.28634': attribute type 5 has an invalid length. [ 1333.004731][ T361] netlink: 'syz.0.28634': attribute type 6 has an invalid length. [ 1333.004744][ T361] netlink: 209632 bytes leftover after parsing attributes in process `syz.0.28634'. [ 1333.123894][ T347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1333.380684][ T347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.645272][ T347] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1333.743890][T19011] smbdirect: ib_dev[syz0] removed [ 1333.790040][ T347] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1333.923930][ T347] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1334.084804][ T347] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 1334.184390][ T347] bond0 (unregistering): Released all slaves [ 1335.133419][ T5317] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1335.286469][ T5317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.286504][ T5317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1335.286527][ T5317] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1335.286567][ T5317] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1335.286591][ T5317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.304809][ T5317] usb 5-1: config 0 descriptor?? [ 1335.498592][ T467] netlink: 'syz.2.28684': attribute type 11 has an invalid length. [ 1335.808257][ T5317] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1336.087601][ T5740] usb 5-1: USB disconnect, device number 10 [ 1336.102212][ T494] fuse: Bad value for 'fd' [ 1336.111019][ T5804] kernel read not supported for file [fscontext] (pid: 5804 comm: kworker/1:4) [ 1336.231177][ T490] fido_id[490]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1337.084452][ T5317] kernel write not supported for file /9047/attr/prev (pid: 5317 comm: kworker/0:3) [ 1337.344186][T18945] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1338.738385][ T613] 9p: Invalid uid '0x00000000ffffffff' [ 1339.215574][ T625] 9p: Bad value for 'wfdno' [ 1339.647904][ T36] audit: type=1326 audit(2000001629.152:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=642 comm="syz.2.28765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3027de0d9 code=0x0 [ 1339.727845][ T649] fuse: Bad value for 'fd' [ 1339.983743][ T5740] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 1340.197334][ T5740] usb 3-1: string descriptor 0 read error: -22 [ 1340.197469][ T5740] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1340.197494][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.241928][ T5740] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1340.241985][ T5740] usb 3-1: MIDIStreaming interface descriptor not found [ 1341.474204][ T5317] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1341.624011][ T5317] usb 5-1: Using ep0 maxpacket: 32 [ 1341.630643][ T5317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.630675][ T5317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.630715][ T5317] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1341.630738][ T5317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.690583][ T5317] usb 5-1: config 0 descriptor?? [ 1341.711170][ T5317] hub 5-1:0.0: USB hub found [ 1341.908136][ T5317] hub 5-1:0.0: 1 port detected [ 1342.523747][ T5789] hub 5-1:0.0: activate --> -90 [ 1342.673801][ T5789] usb 3-1: USB disconnect, device number 17 [ 1342.938477][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 1342.953387][ T5740] usb 5-1: USB disconnect, device number 11 [ 1344.041417][ T824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28851'. [ 1344.351323][ T837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28857'. [ 1346.006739][ T907] binder: 906:907 ioctl c0306201 2000000001c0 returned -14 [ 1346.138560][ T915] binder: 913:915 ioctl c0306201 200000000640 returned -22 [ 1346.466566][ T932] netlink: 27 bytes leftover after parsing attributes in process `syz.2.28899'. [ 1351.310657][ T1197] bridge_slave_0: default FDB implementation only supports local addresses [ 1351.311955][ T1197] bridge_slave_0: default FDB implementation only supports local addresses [ 1352.628116][ T1269] netlink: 22 bytes leftover after parsing attributes in process `syz.2.29043'. [ 1352.770535][ T1282] netlink: 24 bytes leftover after parsing attributes in process `syz.4.29049'. [ 1352.965098][ T1282] netlink: 24 bytes leftover after parsing attributes in process `syz.4.29049'. [ 1353.311891][ T5802] Bluetooth: hci5: setting up ROME/QCA6390 Hüü[ 1354.326973][ T1341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29075'. [ 1354.577223][ T1341] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1354.799101][ T1341] bond0 (unregistering): Released all slaves [ 1355.745720][ T59] Bluetooth: hci5: command 0xfc00 tx timeout [ 1355.790902][ T5802] Bluetooth: hci5: Reading QCA version information failed (-110) [ 1355.812518][ T5802] Bluetooth: hci5: Retry BT power ON:0 Hüü[ 1357.568284][ T1460] netlink: 'syz.0.29125': attribute type 10 has an invalid length. [ 1357.747281][ T1460] @: (slave dummy0): Releasing backup interface [ 1357.825571][ T1469] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.29128'. [ 1357.919548][ T1460] team0: Port device dummy0 added Hü[ 1358.305870][ T59] Bluetooth: hci5: command 0xfc00 tx timeout [ 1358.306092][ T5802] Bluetooth: hci5: Reading QCA version information failed (-110) [ 1358.306115][ T5802] Bluetooth: hci5: Retry BT power ON:1 üHü[ 1360.626242][ T59] Bluetooth: hci5: command 0xfc00 tx timeout [ 1360.626310][ T5802] Bluetooth: hci5: Reading QCA version information failed (-110) [ 1360.626332][ T5802] Bluetooth: hci5: Retry BT power ON:2 ü[ 1361.669251][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.273657][ T1612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.29196'. [ 1362.946931][ T59] Bluetooth: hci5: command 0xfc00 tx timeout [ 1362.947003][ T5802] Bluetooth: hci5: Reading QCA version information failed (-110) [ 1363.431985][ T1653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29214'. [ 1364.773256][ T36] audit: type=1326 audit(2000001654.269:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1692 comm="syz.0.29232" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9389e3e0d9 code=0x0 [ 1366.879929][ T1780] tipc: Enabling of bearer rejected, failed to enable media [ 1368.401534][ T1838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.29298'. [ 1369.350261][T18987] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1370.021081][ T1890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29324'. [ 1371.646237][ T6027] hid_parser_main: 468 callbacks suppressed [ 1371.646261][ T6027] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1371.744984][ T6027] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1372.117642][ T1970] fuse: Bad value for 'fd' [ 1372.225635][ T1974] sctp: [Deprecated]: syz.4.29362 (pid 1974) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1372.225635][ T1974] Use struct sctp_sack_info instead [ 1372.759605][ T5804] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1372.909284][ T5804] usb 5-1: Using ep0 maxpacket: 8 [ 1372.915030][ T5804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1372.934775][ T5804] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1372.953890][ T5804] usb 5-1: string descriptor 0 read error: -22 [ 1372.953983][ T5804] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1372.954008][ T5804] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1373.005573][ T5804] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1373.018710][ T5804] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1373.025556][ T5804] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1373.025621][ T5804] usb 5-1: media controller created [ 1373.034767][ T1947] hid-generic 0000:0000:0000.0036: pid 1947 passed too short report [ 1373.083313][ T5804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1374.527894][ T5804] usb 5-1: USB disconnect, device number 12 [ 1376.844144][ T2104] netlink: 20 bytes leftover after parsing attributes in process `syz.4.29423'. [ 1377.657320][T18987] bond0: (slave netdevsim1): link status definitely down, disabling slave [ 1377.657643][T18987] bond0: (slave veth0_to_bond): link status definitely down, disabling slave [ 1377.722380][T18987] bond0: now running without any active interface! [ 1379.020167][ T2183] virt_wifi0: entered promiscuous mode [ 1381.078571][T27192] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1381.228571][T27192] usb 5-1: Using ep0 maxpacket: 16 [ 1381.230796][T27192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1381.230826][T27192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1381.230849][T27192] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1381.230890][T27192] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 1381.230913][T27192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.243254][T27192] usb 5-1: config 0 descriptor?? [ 1381.693003][T27192] corsair-psu 0003:1B1C:1C03.0037: hidraw0: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.4-1/input0 [ 1381.756396][T27192] corsair-psu 0003:1B1C:1C03.0037: unable to initialize device (-38) [ 1381.776166][T27192] corsair-psu 0003:1B1C:1C03.0037: probe with driver corsair-psu failed with error -38 [ 1381.874235][T27192] usb 5-1: USB disconnect, device number 13 [ 1381.922730][ T2279] fido_id[2279]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1384.118592][ T36] audit: type=1326 audit(2000001673.617:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2324 comm="syz.0.29524" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9389e3e0d9 code=0x0 [ 1384.651114][ T2325] gadgetfs: bound to dummy_udc driver [ 1384.979882][ T5804] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1384.980396][ C1] gadgetfs: connected [ 1384.981110][ T5804] gadgetfs: disconnected [ 1385.129208][ C1] gadgetfs: connected [ 1385.131035][ T5804] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1385.131087][ T5804] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1385.131111][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.272591][ C1] gadgetfs: configuration #1 [ 1385.274103][ T2360] loop2: detected capacity change from 0 to 7 [ 1385.474090][ T2360] Dev loop2: unable to read RDB block 7 [ 1385.474136][ T2360] loop2: unable to read partition table [ 1385.474329][ T2360] loop2: partition table beyond EOD, truncated [ 1385.474357][ T2360] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1385.709782][ T4949] Dev loop2: unable to read RDB block 7 [ 1385.709832][ T4949] loop2: unable to read partition table [ 1385.710055][ T4949] loop2: partition table beyond EOD, truncated [ 1386.516115][ T2325] gadgetfs: suspended from state 3 [ 1386.527145][ T5804] usb 2-1: USB disconnect, device number 45 [ 1386.583249][ T2325] gadgetfs: disconnected [ 1389.399568][ T2520] device-mapper: table: 248:0: zero-length target [ 1389.399586][ T2520] device-mapper: ioctl: error adding target to table [ 1389.709657][ T200] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1389.873669][ T200] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1389.873699][ T200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.973839][ T200] usb 5-1: probing VID:PID(0424:012C) [ 1389.988099][ T200] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 1389.988126][ T200] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1389.988145][ T200] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 1389.988163][ T200] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1389.988181][ T200] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1390.368582][ T200] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1390.569882][ T200] usb 5-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 1392.339017][ T200] usb 5-1: USB disconnect, device number 14 [ 1392.352932][ T5789] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 1392.402152][ T5789] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 1392.652599][ T200] USB vub300 remote SDIO host controller[0] now disconnected [ 1392.709974][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4487 [ 1392.709997][ C0] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 16, name: ktimers/0 [ 1392.710014][ C0] preempt_count: 0, expected: 0 [ 1392.710025][ C0] RCU nest depth: 2, expected: 0 [ 1392.710048][ C0] 5 locks held by ktimers/0/16: [ 1392.710135][ C0] #0: ffffffff8e059220 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1392.710277][ C0] #1: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1392.710347][ C0] #2: ffff8880b8626260 (&base->expiry_lock){+...}-{3:3}, at: __run_timer_base+0x11a/0x9b0 [ 1392.710394][ C0] #3: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1392.710444][ C0] #4: ffffc90000157a80 ((&vub300->inactivity_timer)){+...}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 1392.710502][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1392.710530][ C0] Tainted: [L]=SOFTLOCKUP [ 1392.710538][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1392.710550][ C0] Call Trace: [ 1392.710559][ C0] [ 1392.710568][ C0] dump_stack_lvl+0xe8/0x150 [ 1392.710600][ C0] __might_resched+0x329/0x480 [ 1392.710633][ C0] __cancel_work_sync+0x6d/0x110 [ 1392.710700][ C0] mmc_free_host+0x19/0x30 [ 1392.710798][ C0] call_timer_fn+0x192/0x5e0 [ 1392.710819][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1392.710892][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1392.710915][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1392.710959][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1392.710987][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1392.711012][ C0] __run_timer_base+0x67b/0x9b0 [ 1392.711049][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1392.711075][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1392.711101][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1392.711131][ C0] run_timer_softirq+0xb7/0x170 [ 1392.711153][ C0] handle_softirqs+0x1d9/0x6c0 [ 1392.711188][ C0] run_ktimerd+0x69/0x100 [ 1392.711214][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1392.711298][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1392.711333][ C0] kthread+0x388/0x470 [ 1392.711412][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1392.711435][ C0] ? __pfx_kthread+0x10/0x10 [ 1392.711464][ C0] ret_from_fork+0x514/0xb70 [ 1392.711560][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1392.711589][ C0] ? __switch_to+0xc89/0x1420 [ 1392.711648][ C0] ? __pfx_kthread+0x10/0x10 [ 1392.711683][ C0] ret_from_fork_asm+0x1a/0x30 [ 1392.711733][ C0] [ 1392.711950][ C0] [ 1392.711956][ C0] ============================= [ 1392.711964][ C0] WARNING: suspicious RCU usage [ 1392.712004][ C0] syzkaller #0 Tainted: G W L [ 1392.712017][ C0] ----------------------------- [ 1392.712051][ C0] kernel/rcu/srcutree.c:1487 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 1392.712068][ C0] [ 1392.712068][ C0] other info that might help us debug this: [ 1392.712068][ C0] [ 1392.712075][ C0] [ 1392.712075][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 1392.712087][ C0] 5 locks held by ktimers/0/16: [ 1392.712099][ C0] #0: ffffffff8e059220 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1392.712151][ C0] #1: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1392.712199][ C0] #2: ffff8880b8626260 (&base->expiry_lock){+...}-{3:3}, at: __run_timer_base+0x11a/0x9b0 [ 1392.712244][ C0] #3: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1392.712292][ C0] #4: ffffc90000157a80 ((&vub300->inactivity_timer)){+...}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 1392.712340][ C0] [ 1392.712340][ C0] stack backtrace: [ 1392.712391][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G W L syzkaller #0 PREEMPT_{RT,(full)} [ 1392.712420][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1392.712428][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1392.712439][ C0] Call Trace: [ 1392.712446][ C0] [ 1392.712455][ C0] dump_stack_lvl+0xe8/0x150 [ 1392.712483][ C0] lockdep_rcu_suspicious+0x13f/0x1d0 [ 1392.712539][ C0] __synchronize_srcu+0x157/0x2f0 [ 1392.712628][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 1392.712670][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1392.712695][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1392.712726][ C0] ? synchronize_srcu+0x20a/0x260 [ 1392.712748][ C0] wakeup_source_unregister+0x127/0x3d0 [ 1392.712823][ C0] mmc_host_classdev_release+0x47/0x100 [ 1392.712851][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 1392.712875][ C0] device_release+0xc4/0x1f0 [ 1392.712968][ C0] kobject_put+0x222/0x550 [ 1392.713021][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 1392.713046][ C0] call_timer_fn+0x192/0x5e0 [ 1392.713069][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1392.713092][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1392.713113][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1392.713148][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1392.713174][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1392.713199][ C0] __run_timer_base+0x67b/0x9b0 [ 1392.713235][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1392.713261][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1392.713286][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1392.713316][ C0] run_timer_softirq+0xb7/0x170 [ 1392.713338][ C0] handle_softirqs+0x1d9/0x6c0 [ 1392.713371][ C0] run_ktimerd+0x69/0x100 [ 1392.713397][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1392.713425][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1392.713457][ C0] kthread+0x388/0x470 [ 1392.713485][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1392.713507][ C0] ? __pfx_kthread+0x10/0x10 [ 1392.713536][ C0] ret_from_fork+0x514/0xb70 [ 1392.713566][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1392.713591][ C0] ? __switch_to+0xc89/0x1420 [ 1392.713617][ C0] ? __pfx_kthread+0x10/0x10 [ 1392.713643][ C0] ret_from_fork_asm+0x1a/0x30 [ 1392.713690][ C0] [ 1392.713790][ C0] ------------[ cut here ]------------ [ 1392.713799][ C0] Voluntary context switch within RCU read-side critical section! [ 1392.713811][ C0] WARNING: kernel/rcu/tree_plugin.h:332 at rcu_note_context_switch+0xc58/0xef0, CPU#0: ktimers/0/16 [ 1392.713891][ C0] Modules linked in: [ 1392.713910][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G W L syzkaller #0 PREEMPT_{RT,(full)} [ 1392.713939][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1392.713956][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1392.713968][ C0] RIP: 0010:rcu_note_context_switch+0xc58/0xef0 [ 1392.713997][ C0] Code: 00 41 c6 45 00 00 48 8b 3d 85 a9 03 0e 48 81 c4 a8 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ff 5f ff ff 48 8d 3d 38 a4 07 0e <67> 48 0f b9 3a e9 6f f4 ff ff 90 0f 0b 90 45 84 e4 0f 84 3e f4 ff [ 1392.714013][ C0] RSP: 0018:ffffc900001572c0 EFLAGS: 00010002 [ 1392.714030][ C0] RAX: 0000000000000000 RBX: ffff88801caa8000 RCX: 0000000080000002 [ 1392.714043][ C0] RDX: 0000000000000000 RSI: ffffffff8bca5960 RDI: ffffffff8fb2f060 [ 1392.714057][ C0] RBP: dffffc0000000000 R08: ffffffff8faf4937 R09: 1ffffffff1f5e926 [ 1392.714070][ C0] R10: dffffc0000000000 R11: fffffbfff1f5e927 R12: 0000000000000000 [ 1392.714083][ C0] R13: dffffc0000000000 R14: ffff8880b863c940 R15: ffff88801caa84c4 [ 1392.714096][ C0] FS: 0000000000000000(0000) GS:ffff888125c46000(0000) knlGS:0000000000000000 [ 1392.714111][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1392.714125][ C0] CR2: 00007f2cd3e95690 CR3: 000000003f140000 CR4: 00000000003526f0 [ 1392.714141][ C0] Call Trace: [ 1392.714148][ C0] [ 1392.714160][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1392.714184][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1392.714247][ C0] ? rcu_is_watching+0x15/0xb0 [ 1392.714271][ C0] __schedule+0x293/0x5500 [ 1392.714305][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1392.714388][ C0] ? check_path+0x21/0x40 [ 1392.714409][ C0] ? check_noncircular+0xda/0x150 [ 1392.714440][ C0] ? __pfx___schedule+0x10/0x10 [ 1392.714474][ C0] ? schedule+0x90/0x2b0 [ 1392.714503][ C0] schedule+0x164/0x2b0 [ 1392.714532][ C0] schedule_timeout+0xc0/0x2c0 [ 1392.714557][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1392.714582][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1392.714656][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1392.714683][ C0] ? wait_for_completion+0x272/0x5e0 [ 1392.714710][ C0] wait_for_completion+0x2ca/0x5e0 [ 1392.714751][ C0] ? __pfx_wait_for_completion+0x10/0x10 [ 1392.714795][ C0] __synchronize_srcu+0x23b/0x2f0 [ 1392.714829][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 1392.714859][ C0] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 1392.714895][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1392.714928][ C0] ? synchronize_srcu+0x20a/0x260 [ 1392.714960][ C0] wakeup_source_unregister+0x127/0x3d0 [ 1392.714989][ C0] mmc_host_classdev_release+0x47/0x100 [ 1392.715020][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 1392.715047][ C0] device_release+0xc4/0x1f0 [ 1392.715078][ C0] kobject_put+0x222/0x550 [ 1392.715098][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 1392.715122][ C0] call_timer_fn+0x192/0x5e0 [ 1392.715144][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1392.715167][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1392.715189][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1392.715224][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1392.715251][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1392.715276][ C0] __run_timer_base+0x67b/0x9b0 [ 1392.715312][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1392.715336][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1392.715359][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1392.715388][ C0] run_timer_softirq+0xb7/0x170 [ 1392.715409][ C0] handle_softirqs+0x1d9/0x6c0 [ 1392.715440][ C0] run_ktimerd+0x69/0x100 [ 1392.715465][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1392.715492][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1392.715524][ C0] kthread+0x388/0x470 [ 1392.715549][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1392.715571][ C0] ? __pfx_kthread+0x10/0x10 [ 1392.715600][ C0] ret_from_fork+0x514/0xb70 [ 1392.715630][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1392.715657][ C0] ? __switch_to+0xc89/0x1420 [ 1392.715682][ C0] ? __pfx_kthread+0x10/0x10 [ 1392.715707][ C0] ret_from_fork_asm+0x1a/0x30 [ 1392.715751][ C0] [ 1392.715769][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1392.715787][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G W L syzkaller #0 PREEMPT_{RT,(full)} [ 1392.715814][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1392.715823][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1392.715834][ C0] Call Trace: [ 1392.715841][ C0] [ 1392.715849][ C0] vpanic+0x56c/0xa60 [ 1392.715894][ C0] ? __pfx__printk+0x10/0x10 [ 1392.715915][ C0] ? __pfx_vpanic+0x10/0x10 [ 1392.715949][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1392.716004][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1392.716037][ C0] panic+0xc5/0xd0 [ 1392.716063][ C0] ? __pfx_panic+0x10/0x10 [ 1392.716099][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1392.716132][ C0] __warn+0x315/0x4c0 [ 1392.716157][ C0] ? rcu_note_context_switch+0xc58/0xef0 [ 1392.716189][ C0] ? rcu_note_context_switch+0xc58/0xef0 [ 1392.716217][ C0] __report_bug+0x276/0x570 [ 1392.716304][ C0] ? __pfx_prb_first_seq+0x10/0x10 [ 1392.716356][ C0] ? rcu_note_context_switch+0xc58/0xef0 [ 1392.716388][ C0] ? __pfx___report_bug+0x10/0x10 [ 1392.716438][ C0] report_bug_entry+0x19a/0x290 [ 1392.716467][ C0] ? rcu_note_context_switch+0xc58/0xef0 [ 1392.716494][ C0] ? rcu_note_context_switch+0xc5d/0xef0 [ 1392.716521][ C0] handle_bug+0xce/0x200 [ 1392.716553][ C0] exc_invalid_op+0x1a/0x50 [ 1392.716572][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1392.716593][ C0] RIP: 0010:rcu_note_context_switch+0xc58/0xef0 [ 1392.716621][ C0] Code: 00 41 c6 45 00 00 48 8b 3d 85 a9 03 0e 48 81 c4 a8 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ff 5f ff ff 48 8d 3d 38 a4 07 0e <67> 48 0f b9 3a e9 6f f4 ff ff 90 0f 0b 90 45 84 e4 0f 84 3e f4 ff [ 1392.716638][ C0] RSP: 0018:ffffc900001572c0 EFLAGS: 00010002 [ 1392.716655][ C0] RAX: 0000000000000000 RBX: ffff88801caa8000 RCX: 0000000080000002 [ 1392.716670][ C0] RDX: 0000000000000000 RSI: ffffffff8bca5960 RDI: ffffffff8fb2f060 [ 1392.716684][ C0] RBP: dffffc0000000000 R08: ffffffff8faf4937 R09: 1ffffffff1f5e926 [ 1392.716698][ C0] R10: dffffc0000000000 R11: fffffbfff1f5e927 R12: 0000000000000000 [ 1392.716712][ C0] R13: dffffc0000000000 R14: ffff8880b863c940 R15: ffff88801caa84c4 [ 1392.716752][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1392.716781][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1392.716807][ C0] ? rcu_is_watching+0x15/0xb0 [ 1392.716835][ C0] __schedule+0x293/0x5500 [ 1392.716870][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1392.716902][ C0] ? check_path+0x21/0x40 [ 1392.716923][ C0] ? check_noncircular+0xda/0x150 [ 1392.716963][ C0] ? __pfx___schedule+0x10/0x10 [ 1392.717000][ C0] ? schedule+0x90/0x2b0 [ 1392.717029][ C0] schedule+0x164/0x2b0 [ 1392.717057][ C0] schedule_timeout+0xc0/0x2c0 [ 1392.717082][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1392.717108][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1392.717146][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1392.717179][ C0] ? wait_for_completion+0x272/0x5e0 [ 1392.717207][ C0] wait_for_completion+0x2ca/0x5e0 [ 1392.717248][ C0] ? __pfx_wait_for_completion+0x10/0x10 [ 1392.717295][ C0] __synchronize_srcu+0x23b/0x2f0 [ 1392.717329][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 1392.717360][ C0] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 1392.717396][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1392.717430][ C0] ? synchronize_srcu+0x20a/0x260 [ 1392.717453][ C0] wakeup_source_unregister+0x127/0x3d0 [ 1392.717482][ C0] mmc_host_classdev_release+0x47/0x100 [ 1392.717512][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 1392.717540][ C0] device_release+0xc4/0x1f0 [ 1392.717571][ C0] kobject_put+0x222/0x550 [ 1392.717592][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 1392.717615][ C0] call_timer_fn+0x192/0x5e0 [ 1392.717638][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1392.717662][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1392.717683][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1392.717718][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1392.717743][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1392.717768][ C0] __run_timer_base+0x67b/0x9b0 [ 1392.717806][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1392.717831][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1392.717855][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1392.717885][ C0] run_timer_softirq+0xb7/0x170 [ 1392.717907][ C0] handle_softirqs+0x1d9/0x6c0 [ 1392.717940][ C0] run_ktimerd+0x69/0x100 [ 1392.717973][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1392.717999][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1392.718032][ C0] kthread+0x388/0x470 [ 1392.718058][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1392.718081][ C0] ? __pfx_kthread+0x10/0x10 [ 1392.718108][ C0] ret_from_fork+0x514/0xb70 [ 1392.718138][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1392.718162][ C0] ? __switch_to+0xc89/0x1420 [ 1392.718188][ C0] ? __pfx_kthread+0x10/0x10 [ 1392.718214][ C0] ret_from_fork_asm+0x1a/0x30 [ 1392.718260][ C0] [ 1392.718406][ C0] Kernel Offset: disabled