last executing test programs: 3m45.30421091s ago: executing program 3 (id=6107): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xcc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffb}, {0x0, 0x3fffffffffffff, 0x200000000000000}, 0xfffffffe}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075d, 0xa6}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 3m45.221081817s ago: executing program 3 (id=6108): r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)={0xfffffffc, 0x0, '\x00', {0x0, @bt={0x7, 0x400000, 0x1, 0x1, 0x9, 0x8, 0x7, 0x2, 0xffff8000, 0x5, 0x6, 0xc72, 0x6, 0x81, 0x17, 0x36, {0x0, 0x2}, 0x6, 0xe}}}) 3m45.019959558s ago: executing program 3 (id=6112): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newsa={0x194, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@private=0xa0100fe, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(twofish)\x00'}, 0x80, "00000000000000000100070000400000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x194}}, 0x44050) 3m44.942476522s ago: executing program 3 (id=6115): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) mount$fuseblk(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1861400, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) 3m44.831128325s ago: executing program 3 (id=6117): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x376, 0x5, 0x2, 0x9, 0x0, 0xffffffffffffffff}) 3m44.351052276s ago: executing program 3 (id=6128): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f00000002c0)=@ethtool_coalesce={0x1, 0x3, 0x4, 0xa, 0x12eb, 0x400, 0x0, 0x5, 0xa300, 0x6, 0x2, 0x3, 0x401, 0x3, 0x8, 0x2, 0x8, 0xdb, 0x7ff, 0x10001, 0x0, 0xdf2f, 0x1}}) 3m44.025612124s ago: executing program 32 (id=6128): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f00000002c0)=@ethtool_coalesce={0x1, 0x3, 0x4, 0xa, 0x12eb, 0x400, 0x0, 0x5, 0xa300, 0x6, 0x2, 0x3, 0x401, 0x3, 0x8, 0x2, 0x8, 0xdb, 0x7ff, 0x10001, 0x0, 0xdf2f, 0x1}}) 3m0.136439117s ago: executing program 2 (id=7152): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x44202, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 2m59.958466679s ago: executing program 2 (id=7155): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1a8) 2m59.770130762s ago: executing program 2 (id=7160): r0 = syz_open_dev$vim2m(&(0x7f0000000500), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x13, 0x1, 0x10, "3b3ad6f32e978900d10052d0002000000000000000f3ffff05000000ff5bffe8", 0x31435750}) 2m59.587123445s ago: executing program 2 (id=7163): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000240000000000010902270001010080fa0904000003ffffff00070501"], 0x0) 2m58.443142287s ago: executing program 0 (id=7183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x2d, 0x8, 0x10000007, {0xc, @udp_ip4_spec={@broadcast, @multicast2, 0x4e24, 0x4e20, 0x9}, {0x0, @local, 0x3ff, 0x1, [0x5, 0x5]}, @sctp_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x4e22, 0x4e23, 0x5}, {0x0, @empty, 0x3d55, 0x1, [0x5, 0xae]}, 0x8, 0x1000}}}) 2m58.351167113s ago: executing program 0 (id=7186): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000040)=0x334) 2m58.254644059s ago: executing program 2 (id=7190): syz_usb_connect(0x2, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x36, 0x68, 0xdb, 0x10, 0x525, 0x2888, 0xd3ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7f, 0x80, 0x0, "", [{{0x9, 0x4, 0x78, 0x5, 0x0, 0x4f, 0xca, 0x7e, 0x4}}]}}]}}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) 2m58.246428683s ago: executing program 0 (id=7191): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0xd, '\x00', @st={0x4, [{0x1, @svalue=0x4}, {0x2, @uvalue=0xffffffff}, {0x1, @svalue=0x8}, {0x0, @uvalue=0x612}]}, 0xfffffffe}, {0x46, '\x00', @data=0x5, 0x4ea8}, {0x1c, '\x00', @data=0xfffffffc, 0xffffff85}]}) 2m58.114491286s ago: executing program 0 (id=7194): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000007200010b2bbd7000fedbdf2507"], 0x20}}, 0x4040) 2m57.975717377s ago: executing program 0 (id=7199): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x20, 0xa, 0x34, "a10124f51800000000000000000000000002a39b85d82e5cec068ce8989dea0a3f81e9ed4a8b7479a35177a1147c6877533f6f84"}, 0x0, 0x0, 0x0, 0x0}) 2m57.031184387s ago: executing program 1 (id=7220): r0 = socket$kcm(0x2d, 0x2, 0x0) sendmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000080)=@nfc_llcp={0x2d, 0x0, 0x0, 0x7, 0x4, 0x7, "47af57ce8c8e5af84d109ee7a1488bd8c3df97e87f7e771f69ced4c5de6ddeb44ee59bdfb62866129f1338dba84b5d82a121c369a6837123e849c909c16b53", 0x2d}, 0x80, 0x0}}], 0x1, 0x8000) 2m56.946105562s ago: executing program 1 (id=7223): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 2m56.944997285s ago: executing program 5 (id=7224): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002740)=ANY=[@ANYBLOB="5c000000100001002abd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="6cf2040080c00000140003006e657464657673696d30000000000000200016801c00018018000c801400010000f8ffff"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x48080) 2m56.840112615s ago: executing program 5 (id=7227): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x90, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0xe9d, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x9, 0xffffffff}, 0xd0, 0x9}}) 2m56.769762563s ago: executing program 1 (id=7229): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r0, 0xffffffffffffc000) 2m56.769233386s ago: executing program 4 (id=7230): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/207, 0xcf}], 0x1) 2m56.728803093s ago: executing program 1 (id=7231): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2m56.712503768s ago: executing program 5 (id=7232): r0 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x802}) 2m56.7088127s ago: executing program 4 (id=7233): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc, 0x0, 0xfdfd}) 2m56.656781082s ago: executing program 4 (id=7234): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0xfffffff7, '\x00', @p_u8=&(0x7f00000000c0)}}) 2m56.592953624s ago: executing program 1 (id=7235): chdir(&(0x7f0000000480)='./cgroup\x00') unshare(0x22020400) 2m56.592289125s ago: executing program 4 (id=7236): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x121002, 0x0) sendfile(r0, r0, &(0x7f0000000500)=0xffffffffffffffff, 0x3) 2m56.580614139s ago: executing program 5 (id=7237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m56.520207953s ago: executing program 1 (id=7238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000038c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m56.512684073s ago: executing program 4 (id=7239): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x6, @output={0x0, 0x1, {0x7, 0x2}, 0x10000, 0x200040}}) 2m56.46296552s ago: executing program 5 (id=7240): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000100000000210d0000aaa8fa019600ba9380d440fe0000000000002900000043000000", 0xfe60) 2m56.433899484s ago: executing program 0 (id=7241): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x1e6c19df, 0x59455247, 0x1, @discrete={0x8, 0x400}}) 2m53.314897517s ago: executing program 4 (id=7242): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x4936, 0xc2, 0x0, 0x1, 0x6}, 0x50) 2m52.178331623s ago: executing program 5 (id=7243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r0, &(0x7f0000000780), 0x0}, 0x20) 2m46.177613418s ago: executing program 2 (id=7244): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x5, 0x4}) 2m24.17300682s ago: executing program 33 (id=7241): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x1e6c19df, 0x59455247, 0x1, @discrete={0x8, 0x400}}) 0s ago: executing program 34 (id=7238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000038c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): B device strings: Mfr=1, Product=228, SerialNumber=2 [ 466.451038][ T5707] usb 2-1: Product: syz [ 466.451059][ T5707] usb 2-1: Manufacturer: syz [ 466.451074][ T5707] usb 2-1: SerialNumber: syz [ 466.455610][ T5707] usb 2-1: config 0 descriptor?? [ 466.468924][ T5707] hub 2-1:0.0: bad descriptor, ignoring hub [ 466.468979][ T5707] hub 2-1:0.0: probe with driver hub failed with error -5 [ 466.507349][ T5707] usb 2-1: selecting invalid altsetting 0 [ 466.511296][T16459] netlink: 'syz.2.5103': attribute type 3 has an invalid length. [ 466.511349][T16459] netlink: 'syz.2.5103': attribute type 3 has an invalid length. [ 466.540967][T16459] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5103'. [ 466.633340][ T6117] gspca_vc032x: reg_w err -71 [ 466.633367][ T6117] gspca_vc032x: I2c Bus Busy Wait 00 [ 466.633378][ T6117] gspca_vc032x: I2c Bus Busy Wait 00 [ 466.633387][ T6117] gspca_vc032x: I2c Bus Busy Wait 00 [ 466.633397][ T6117] gspca_vc032x: I2c Bus Busy Wait 00 [ 466.633406][ T6117] gspca_vc032x: I2c Bus Busy Wait 00 [ 466.633415][ T6117] gspca_vc032x: I2c Bus Busy Wait 00 [ 466.633424][ T6117] gspca_vc032x: I2c Bus Busy Wait 00 [ 466.633434][ T6117] gspca_vc032x: I2c Bus Busy Wait 00 [ 466.633443][ T6117] gspca_vc032x: I2c Bus Busy Wait 00 [ 466.633452][ T6117] gspca_vc032x: I2c Bus Busy Wait 00 [ 466.633462][ T6117] gspca_vc032x: I2c Bus Busy Wait 00 [ 466.633470][ T6117] gspca_vc032x: I2c Bus Busy Wait 00 [ 466.633480][ T6117] gspca_vc032x: I2c Bus Busy Wait 00 [ 466.633489][ T6117] gspca_vc032x: I2c Bus Busy Wait 00 [ 466.633498][ T6117] gspca_vc032x: I2c Bus Busy Wait 00 [ 466.633507][ T6117] gspca_vc032x: I2c Bus Busy Wait 00 [ 466.633516][ T6117] gspca_vc032x: I2c Bus Busy Wait 00 [ 466.633526][ T6117] gspca_vc032x: I2c Bus Busy Wait 00 [ 466.633535][ T6117] gspca_vc032x: Unknown sensor... [ 466.633598][ T6117] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 466.691215][ T6117] usb 5-1: USB disconnect, device number 24 [ 466.787348][T16466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5107'. [ 466.811940][ T5707] usb 2-1: USB disconnect, device number 26 [ 466.901524][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.025899][ T5721] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 467.115850][ T5741] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 467.177946][ T5721] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 467.181596][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 467.181620][ T5721] usb 4-1: Product: syz [ 467.181634][ T5721] usb 4-1: SerialNumber: syz [ 467.210078][ T5721] usb 4-1: config 0 descriptor?? [ 467.266850][ T5741] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 467.268171][ T5741] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 467.268224][ T5741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.300485][ T5741] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 467.439448][ T5721] hso 4-1:0.0: Failed to find BULK eps [ 467.653113][ T5707] usb 4-1: USB disconnect, device number 31 [ 467.737389][T16510] openvswitch: netlink: IP tunnel dst address not specified [ 468.020622][T16524] bond1: option all_slaves_active: invalid value (9) [ 468.050281][T16524] bond1 (unregistering): Released all slaves [ 468.054825][T16531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5136'. [ 468.367501][ T5741] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 468.413513][T16545] nvme_tcp: malformed address passed: 127trsvcid=8009:8009 [ 468.546861][T16550] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 468.571314][ T5741] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 468.571334][ T5741] stv0680 1-1:4.0: last error: 138, command = 0xee [ 468.575343][ T5741] usb 1-1: USB disconnect, device number 29 [ 468.601454][T16550] bond3 (unregistering): Released all slaves [ 468.796843][T16563] bond1: entered promiscuous mode [ 468.797269][T16563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.473916][T16610] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 469.474087][T16610] block device autoloading is deprecated and will be removed. [ 469.785836][ T5742] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 469.937322][T16636] fuse: Bad value for 'fd' [ 469.947205][ T5742] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 469.948119][ T5742] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.948173][ T5742] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 469.948205][ T5742] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 469.952176][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.952233][ T5742] usb 2-1: Product: syz [ 469.952269][ T5742] usb 2-1: Manufacturer: syz [ 469.952304][ T5742] usb 2-1: SerialNumber: syz [ 469.975025][ T5742] usb-storage 2-1:1.0: USB Mass Storage device detected [ 469.988199][ T5742] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 470.011154][ T5742] scsi host1: usb-storage 2-1:1.0 [ 470.241430][T16655] openvswitch: netlink: Duplicate key (type 6). [ 470.468661][T16669] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5200'. [ 470.642730][T16679] veth1_to_hsr: entered allmulticast mode [ 470.643311][T16679] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 470.792283][T16687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5210'. [ 470.792309][T16687] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5210'. [ 470.916398][T16687] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 470.948151][T16687] bond1 (unregistering): Released all slaves [ 471.094651][ T9] usb 2-1: USB disconnect, device number 27 [ 471.159961][T16704] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5219'. [ 471.160063][T16704] 0·: renamed from hsr0 [ 471.213510][T16704] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 471.213534][T16704] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.215324][T16704] 0·: entered allmulticast mode [ 471.215344][T16704] hsr_slave_0: entered allmulticast mode [ 471.215361][T16704] hsr_slave_1: entered allmulticast mode [ 471.253311][T16704] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 471.462178][T16719] openvswitch: netlink: ct_state flags 0001010a unsupported [ 471.993239][T16752] xt_TCPMSS: Only works on TCP SYN packets [ 472.005824][ T9] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 472.159244][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 472.159275][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 472.160453][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 472.163954][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.163978][ T9] usb 3-1: Product: syz [ 472.163992][ T9] usb 3-1: Manufacturer: syz [ 472.164007][ T9] usb 3-1: SerialNumber: syz [ 472.229003][ T9] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 472.231277][ T9] keyspan 3-1:1.0: unsupported endpoint type 0 [ 472.258458][ T9] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 472.289654][ T9] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 472.327921][ T9] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 472.350847][ T9] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 472.633821][ T9] usb 3-1: USB disconnect, device number 27 [ 472.704841][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 472.727873][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 472.762944][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 472.781886][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 472.783953][ T9] keyspan 3-1:1.0: device disconnected [ 473.146555][T16796] bond2: entered promiscuous mode [ 473.146624][T16796] bond2: entered allmulticast mode [ 473.147001][T16796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 473.472908][T16815] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5268'. [ 473.560695][T16824] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 473.676913][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 473.676932][ T31] audit: type=1326 audit(1789569237.216:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16829 comm="syz.3.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99879e159 code=0x7ffc0000 [ 473.678992][ T31] audit: type=1326 audit(1789569237.226:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16829 comm="syz.3.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99879e159 code=0x7ffc0000 [ 473.694092][ T31] audit: type=1326 audit(1789569237.236:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16829 comm="syz.3.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99879e159 code=0x7ffc0000 [ 473.694137][ T31] audit: type=1326 audit(1789569237.236:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16829 comm="syz.3.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99879e159 code=0x7ffc0000 [ 473.718596][ T31] audit: type=1326 audit(1789569237.236:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16829 comm="syz.3.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fd99879e159 code=0x7ffc0000 [ 473.718642][ T31] audit: type=1326 audit(1789569237.236:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16829 comm="syz.3.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99879e159 code=0x7ffc0000 [ 473.718682][ T31] audit: type=1326 audit(1789569237.236:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16829 comm="syz.3.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd99879e159 code=0x7ffc0000 [ 473.718722][ T31] audit: type=1326 audit(1789569237.236:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16829 comm="syz.3.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd99879e159 code=0x7ffc0000 [ 473.758777][T16832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5277'. [ 474.057185][T16848] ipt_ECN: cannot use operation on non-tcp rule [ 474.132670][T16840] bond1: option all_slaves_active: invalid value (9) [ 474.161497][T16840] bond1 (unregistering): Released all slaves [ 474.395937][ T5707] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 474.526840][T16875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5295'. [ 474.548562][ T5707] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 474.551403][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.551427][ T5707] usb 1-1: Product: syz [ 474.551442][ T5707] usb 1-1: Manufacturer: syz [ 474.551456][ T5707] usb 1-1: SerialNumber: syz [ 474.614164][ T5721] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 474.736255][ T6811] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 474.897755][ T6811] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 474.899179][ T6811] usb 3-1: config 2 has an invalid interface number: 3 but max is 0 [ 474.899205][ T6811] usb 3-1: config 2 has no interface number 0 [ 474.899267][ T6811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.941034][ T6811] ums-realtek 3-1:2.3: USB Mass Storage device detected [ 475.037337][ T5742] usb 1-1: USB disconnect, device number 30 [ 475.143364][ T6811] usb 3-1: USB disconnect, device number 28 [ 475.439708][T16929] netlink: 'syz.4.5323': attribute type 15 has an invalid length. [ 475.646451][ T5721] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 475.646606][ T5721] ath9k_htc: Failed to initialize the device [ 475.647227][ T5742] usb 1-1: ath9k_htc: USB layer deinitialized [ 475.862067][T16955] dns_resolver: Unsupported content type (34) [ 475.987996][T16963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5338'. [ 476.107578][T16971] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 476.768808][T17014] netlink: 'syz.2.5365': attribute type 3 has an invalid length. [ 476.914441][T17024] ip6tnl0: entered allmulticast mode [ 477.001312][T17028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5372'. [ 477.100031][T17036] xt_LOG: prefix is not null-terminated [ 477.105869][ T5707] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 477.256501][ T5707] usb 4-1: Using ep0 maxpacket: 32 [ 477.257079][ T5707] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 477.258040][ T5707] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.258069][ T5707] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.262081][ T5707] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 477.262110][ T5707] usb 4-1: Product: syz [ 477.262128][ T5707] usb 4-1: Manufacturer: syz [ 477.302857][ T5707] hub 4-1:4.0: USB hub found [ 477.506959][T17055] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 477.511604][ T5707] hub 4-1:4.0: 2 ports detected [ 477.579511][T17059] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 477.724652][ T5707] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 477.767280][ T5707] usb 4-1: USB disconnect, device number 32 [ 477.937762][T17076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5394'. [ 478.024889][ T31] audit: type=1326 audit(1789569241.566:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17080 comm="syz.4.5396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdaf19e159 code=0x7ffc0000 [ 478.025954][ T31] audit: type=1326 audit(1789569241.566:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17080 comm="syz.4.5396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdaf19e159 code=0x7ffc0000 [ 478.264745][T17093] netlink: 'syz.2.5402': attribute type 62 has an invalid length. [ 478.848134][T17130] veth4: entered allmulticast mode [ 478.955926][ T5707] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 479.109287][ T5721] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 479.112180][ T5707] usb 5-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice=c2.aa [ 479.115468][ T5707] usb 5-1: config 7 has an invalid interface number: 210 but max is 0 [ 479.115492][ T5707] usb 5-1: config 7 has no interface number 0 [ 479.115519][ T5707] usb 5-1: config 7 interface 210 has no altsetting 0 [ 479.125856][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.125927][ T5707] usb 5-1: Product: syz [ 479.125969][ T5707] usb 5-1: Manufacturer: syz [ 479.126011][ T5707] usb 5-1: SerialNumber: syz [ 479.195633][T17151] binder: 17150:17151 ioctl 400c620e 200000000100 returned -22 [ 479.255876][ T5721] usb 2-1: Using ep0 maxpacket: 16 [ 479.256579][ T5721] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 479.257763][ T5721] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 479.257788][ T5721] usb 2-1: config 254 has no interface number 0 [ 479.257825][ T5721] usb 2-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 479.257874][ T5721] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x8A has invalid wMaxPacketSize 0 [ 479.257897][ T5721] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 479.257919][ T5721] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 479.257942][ T5721] usb 2-1: config 254 interface 235 has no altsetting 0 [ 479.264354][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.264381][ T5721] usb 2-1: Product: syz [ 479.264440][ T5721] usb 2-1: Manufacturer: syz [ 479.264457][ T5721] usb 2-1: SerialNumber: syz [ 479.329722][ T6811] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 479.414319][ T5707] usb 5-1: can't set first interface for hiFace device. [ 479.414349][ T5707] snd-usb-hiface 5-1:7.210: probe with driver snd-usb-hiface failed with error -5 [ 479.443978][ T5707] usb 5-1: USB disconnect, device number 25 [ 479.496356][ T6811] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 479.499720][ T6811] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 479.499744][ T6811] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.499763][ T6811] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 479.499784][ T6811] usb 1-1: config 1 has no interface number 1 [ 479.499820][ T6811] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 479.499854][ T6811] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 479.504233][ T6811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.504256][ T6811] usb 1-1: Product: syz [ 479.504270][ T6811] usb 1-1: Manufacturer: syz [ 479.504286][ T6811] usb 1-1: SerialNumber: syz [ 479.627525][ T5721] usbtest 2-1:254.235: Linux gadget zero [ 479.627546][ T5721] usbtest 2-1:254.235: high-speed {control in/out bulk-in iso-in} tests (+alt) [ 479.823594][ T6811] usb 1-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 479.823642][ T6811] usb 1-1: MIDIStreaming interface descriptor not found [ 479.852113][ T5707] usb 2-1: USB disconnect, device number 28 [ 479.945656][ T6811] usb 1-1: USB disconnect, device number 31 [ 480.013015][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.145865][ T5721] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 480.296630][ T5721] usb 3-1: Using ep0 maxpacket: 8 [ 480.297138][ T5721] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 480.298069][ T5721] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 480.298092][ T5721] usb 3-1: config 179 has no interface number 0 [ 480.298132][ T5721] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 480.298157][ T5721] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 480.298183][ T5721] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 480.298208][ T5721] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 480.298230][ T5721] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 480.298255][ T5721] usb 3-1: config 179 interface 65 has no altsetting 0 [ 480.298285][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.504389][ T5721] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input66 [ 480.591123][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 480.591160][ T31] audit: type=1326 audit(1789569244.126:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.4.5454" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdaf19e159 code=0x7ffc0000 [ 480.591203][ T31] audit: type=1326 audit(1789569244.136:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.4.5454" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdaf19e159 code=0x7ffc0000 [ 480.641293][ T31] audit: type=1326 audit(1789569244.186:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.4.5454" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7efdaf19e159 code=0x7ffc0000 [ 480.641472][ T31] audit: type=1326 audit(1789569244.186:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.4.5454" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdaf19e159 code=0x7ffc0000 [ 480.641622][ T31] audit: type=1326 audit(1789569244.186:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.4.5454" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdaf19e159 code=0x7ffc0000 [ 480.705006][ T5721] usb 3-1: USB disconnect, device number 29 [ 480.934840][T17216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5462'. [ 481.004719][T17220] program syz.3.5465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.063291][T17224] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5468'. [ 481.358792][T17244] netlink: 'syz.2.5477': attribute type 11 has an invalid length. [ 481.430446][T17249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5480'. [ 481.598207][T17207] nvme nvme0: failed to connect socket: -512 [ 481.653017][T17261] netlink: 'syz.2.5483': attribute type 27 has an invalid length. [ 481.653038][T17261] netlink: 'syz.2.5483': attribute type 3 has an invalid length. [ 481.653053][T17261] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5483'. [ 481.855402][T17277] ip6t_hbh: unknown flags 38 [ 482.137184][T17297] xt_TCPMSS: Only works on TCP SYN packets [ 482.327365][T17310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.771842][T17338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5524'. [ 482.772220][T17334] geneve2: entered promiscuous mode [ 483.168998][T17364] ipip0: entered promiscuous mode [ 483.169022][T17364] ipip0: entered allmulticast mode [ 483.189844][T17371] sg_write: data in/out 401408/1 bytes for SCSI command 0x0-- guessing data in; [ 483.189844][T17371] program syz.0.5539 not setting count and/or reply_len properly [ 483.355937][ T6117] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 483.512043][ T6117] usb 3-1: unable to get BOS descriptor or descriptor too short [ 483.512518][ T6117] usb 3-1: not running at top speed; connect to a high speed hub [ 483.512548][ T6117] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice=a3.02 [ 483.513482][ T6117] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 483.513505][ T6117] usb 3-1: config 0 has no interface number 0 [ 483.513533][ T6117] usb 3-1: config 0 interface 175 has no altsetting 0 [ 483.551277][ T6117] usb 3-1: New USB device strings: Mfr=120, Product=243, SerialNumber=26 [ 483.551301][ T6117] usb 3-1: Product: syz [ 483.551317][ T6117] usb 3-1: Manufacturer: syz [ 483.551331][ T6117] usb 3-1: SerialNumber: syz [ 483.590533][ T6117] usb 3-1: config 0 descriptor?? [ 483.698091][ T31] audit: type=1326 audit(1789569247.246:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17396 comm="syz.1.5552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066339e159 code=0x7ffc0000 [ 483.699153][ T31] audit: type=1326 audit(1789569247.246:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17396 comm="syz.1.5552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066339e159 code=0x7ffc0000 [ 483.711615][ T31] audit: type=1326 audit(1789569247.256:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17396 comm="syz.1.5552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f066339e159 code=0x7ffc0000 [ 483.711719][ T31] audit: type=1326 audit(1789569247.256:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17396 comm="syz.1.5552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066339e159 code=0x7ffc0000 [ 483.711815][ T31] audit: type=1326 audit(1789569247.256:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17396 comm="syz.1.5552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066339e159 code=0x7ffc0000 [ 483.847660][ T6117] usb-storage 3-1:0.175: USB Mass Storage device detected [ 483.919773][ T6117] usb 3-1: USB disconnect, device number 30 [ 484.215838][ T25] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 484.297873][ T6811] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 484.367328][ T25] usb 2-1: not running at top speed; connect to a high speed hub [ 484.367360][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 484.368302][ T25] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 484.368331][ T25] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x89 has invalid maxpacket 23597, setting to 64 [ 484.368372][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.429173][ T25] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 484.446603][ T6811] usb 1-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 484.447777][ T6811] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.447799][ T6811] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 484.447839][ T6811] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 484.450402][ T6811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.450429][ T6811] usb 1-1: Product: syz [ 484.450447][ T6811] usb 1-1: Manufacturer: syz [ 484.450463][ T6811] usb 1-1: SerialNumber: syz [ 484.520801][ T6811] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 484.590549][ T25] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 484.590983][ T25] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 484.591054][ T25] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 484.591640][ T25] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -71 [ 484.648587][ T25] usb 2-1: USB disconnect, device number 29 [ 484.691812][ T6811] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC error code control 1 on unit 3: -71 (exp. 1). [ 484.691916][ T6811] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 484.724309][ T6811] usb 1-1: USB disconnect, device number 32 [ 485.514461][T17494] overlayfs: missing 'lowerdir' [ 485.827821][T17516] xt_TCPMSS: Only works on TCP SYN packets [ 485.870322][T17519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5611'. [ 485.870465][T17519] unsupported nla_type 255 [ 486.047107][ T5741] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 486.197696][ T5741] usb 2-1: Using ep0 maxpacket: 8 [ 486.198226][ T5741] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 486.199174][ T5741] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.199221][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.201881][ T5741] usb 2-1: config 0 descriptor?? [ 486.230515][ T5741] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 486.253543][ T31] audit: type=1326 audit(1789569249.796:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.2.5621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 486.253590][ T31] audit: type=1326 audit(1789569249.796:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.2.5621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 486.257833][ T31] audit: type=1326 audit(1789569249.806:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.2.5621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 486.261374][ T31] audit: type=1326 audit(1789569249.806:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.2.5621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 486.262683][ T31] audit: type=1326 audit(1789569249.806:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.2.5621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 486.263411][ T31] audit: type=1326 audit(1789569249.806:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.2.5621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 486.264362][ T31] audit: type=1326 audit(1789569249.806:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.2.5621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 486.273644][ T31] audit: type=1326 audit(1789569249.816:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.2.5621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 486.281075][ T31] audit: type=1326 audit(1789569249.816:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.2.5621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 486.685664][ T5741] gspca_vc032x: reg_w err -71 [ 486.686056][ T5741] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 486.707114][ T5741] usb 2-1: USB disconnect, device number 30 [ 486.733841][T17559] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5631'. [ 486.820895][T17563] netlink: 388 bytes leftover after parsing attributes in process `syz.2.5632'. [ 486.883337][T17567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5634'. [ 486.883406][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5634'. [ 486.883423][T17567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5634'. [ 487.015869][ T25] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 487.176473][ T25] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 487.177449][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.207397][ T31] audit: type=1326 audit(1789569250.756:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.3.5645" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd99879e159 code=0x0 [ 487.212019][ T25] usb 5-1: config 0 descriptor?? [ 487.216843][ T25] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 487.523919][T17602] --map-set only usable from mangle table [ 487.624307][ T25] gspca_sunplus: reg_w_riv err -71 [ 487.624383][ T25] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 487.641067][ T25] usb 5-1: USB disconnect, device number 26 [ 488.216630][T17646] netlink: 9456 bytes leftover after parsing attributes in process `syz.3.5674'. [ 488.611766][T17676] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5689'. [ 488.633454][T17678] xt_hl: Unknown TTL match mode: 5 [ 488.941679][T17692] ip6t_ah: unknown flags 4E [ 489.127476][T17706] MPI: mpi too large (107144 bits) [ 489.470872][T17728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5715'. [ 489.717809][T17746] binder: 17745:17746 ioctl c018620c 2000000002c0 returned -22 [ 489.778230][T17753] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 489.932364][T17761] xt_nat: multiple ranges no longer supported [ 490.062699][T17771] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 490.338517][T17791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5745'. [ 490.640707][T17811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5756'. [ 490.734892][T17819] netlink: 'syz.0.5760': attribute type 23 has an invalid length. [ 491.660963][ T1353] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.754250][T17881] ip_tables: iptables: counters copy to user failed while replacing table [ 491.927772][T17893] __nla_validate_parse: 6 callbacks suppressed [ 491.927791][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5793'. [ 492.066307][ T5742] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 492.216511][ T5742] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 492.217552][ T5742] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.219451][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.219475][ T5742] usb 1-1: Product: syz [ 492.219490][ T5742] usb 1-1: Manufacturer: syz [ 492.219505][ T5742] usb 1-1: SerialNumber: syz [ 492.579037][T17933] netlink: 'syz.1.5813': attribute type 6 has an invalid length. [ 492.646783][ T5741] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 492.690244][ T5742] snd-usb-6fire 1-1:1.0: can't set first interface. [ 492.690273][ T5742] snd-usb-6fire 1-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 492.715936][ T5742] usb 1-1: USB disconnect, device number 33 [ 492.798406][ T5741] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 492.799365][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.803436][ T5741] usb 3-1: config 0 descriptor?? [ 492.823992][ T5741] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 492.854853][T17947] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5820'. [ 493.093392][T17961] xt_l2tp: missing protocol rule (udp|l2tpip) [ 493.250351][ T5741] gp8psk: usb in 137 operation failed. [ 493.250371][ T5741] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 493.250407][ T5741] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 493.254782][ T5741] usb 3-1: USB disconnect, device number 31 [ 493.425857][ T5707] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 493.579915][ T5707] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 493.582449][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.638226][ T5707] usb 5-1: selecting invalid altsetting 3 [ 493.638248][ T5707] comedi comedi5: could not set alternate setting 3 in high speed [ 493.638264][ T5707] usbduxsigma 5-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 493.689175][ T5707] usbduxsigma 5-1:128.0: probe with driver usbduxsigma failed with error -22 [ 493.825310][ T5707] usb 5-1: USB disconnect, device number 27 [ 493.973303][T18015] usb usb9: usbfs: process 18015 (syz.2.5853) did not claim interface 0 before use [ 494.052555][T18014] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 494.104278][T18014] bond1 (unregistering): Released all slaves [ 494.184909][T18020] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 494.368215][T18026] bond1: option xmit_hash_policy: invalid value (14) [ 494.403972][T18026] bond1 (unregistering): Released all slaves [ 494.898149][ T5742] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 495.059341][ T5742] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 495.060329][ T5742] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 495.060353][ T5742] usb 1-1: config 0 has no interface number 0 [ 495.060391][ T5742] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 495.060414][ T5742] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 495.062394][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.062418][ T5742] usb 1-1: Product: syz [ 495.062432][ T5742] usb 1-1: Manufacturer: syz [ 495.062447][ T5742] usb 1-1: SerialNumber: syz [ 495.065252][ T5742] usb 1-1: config 0 descriptor?? [ 495.067445][T18046] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 495.069418][ T5742] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 495.161917][ T5742] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 495.295110][T18077] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5880'. [ 495.358407][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 495.402548][T18082] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 495.565453][ T5741] usb 1-1: USB disconnect, device number 34 [ 495.597878][ T5741] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 495.600329][ T5741] cyberjack 1-1:0.69: device disconnected [ 495.764337][T18096] nvme_fabrics: missing parameter 'nqn=%s' [ 495.958692][T18117] batadv0: entered allmulticast mode [ 495.963658][T18117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.966140][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 495.968379][T18117] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 496.056687][T18121] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5903'. [ 496.253547][T18129] ipip0: entered promiscuous mode [ 496.253571][T18129] ipip0: entered allmulticast mode [ 496.333147][T18139] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 496.887529][ T5721] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 497.048134][ T5721] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 497.049237][ T5721] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 497.049285][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.055379][ T5721] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 497.226157][ T5741] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 497.272539][T18195] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5939'. [ 497.378500][ T5741] usb 4-1: unable to get BOS descriptor or descriptor too short [ 497.378545][ T5741] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 497.380486][ T5741] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 497.383593][ T5741] usb 4-1: string descriptor 0 read error: -22 [ 497.383715][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.394712][T18183] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 497.431185][ T5741] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.694218][ T5741] usb 4-1: USB disconnect, device number 33 [ 498.126577][ T5721] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 498.327544][ T5721] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 498.327559][ T5721] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 498.329479][ T5721] usb 2-1: USB disconnect, device number 31 [ 498.940854][T18221] netlink: 'syz.4.5952': attribute type 23 has an invalid length. [ 498.969936][T18223] ip6tnl1: entered promiscuous mode [ 499.323761][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5962'. [ 499.743194][T18269] netlink: 'syz.1.5976': attribute type 61 has an invalid length. [ 499.743217][T18269] netlink: 'syz.1.5976': attribute type 62 has an invalid length. [ 499.968175][T18286] netlink: del zone limit has 4 unknown bytes [ 500.199332][T18296] sctp: [Deprecated]: syz.1.5988 (pid 18296) Use of int in max_burst socket option. [ 500.199332][T18296] Use struct sctp_assoc_value instead [ 500.199577][T18298] netlink: 'syz.0.5989': attribute type 23 has an invalid length. [ 500.269801][T18301] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5990'. [ 500.512980][T18309] nvme_rdma: malformed address passed: 172.20.20.24:+ [ 500.697600][T18329] No such timeout policy "syz1" [ 500.757449][T18323] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 500.779515][T18323] bond2 (unregistering): Released all slaves [ 500.783474][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 500.783489][ T31] audit: type=1326 audit(1789569264.326:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18332 comm="syz.3.6004" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99879e159 code=0x7ffc0000 [ 500.783531][ T31] audit: type=1326 audit(1789569264.326:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18332 comm="syz.3.6004" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99879e159 code=0x7ffc0000 [ 500.815938][ T31] audit: type=1326 audit(1789569264.346:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18332 comm="syz.3.6004" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99879e159 code=0x7ffc0000 [ 500.816061][ T31] audit: type=1326 audit(1789569264.346:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18332 comm="syz.3.6004" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fd99879e159 code=0x7ffc0000 [ 500.816212][ T31] audit: type=1326 audit(1789569264.346:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18332 comm="syz.3.6004" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99879e159 code=0x7ffc0000 [ 500.820288][ T31] audit: type=1326 audit(1789569264.366:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18332 comm="syz.3.6004" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99879e159 code=0x7ffc0000 [ 500.820399][ T31] audit: type=1326 audit(1789569264.366:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18332 comm="syz.3.6004" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd99879e159 code=0x7ffc0000 [ 500.820498][ T31] audit: type=1326 audit(1789569264.366:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18332 comm="syz.3.6004" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd99879e159 code=0x7ffc0000 [ 500.822497][ T31] audit: type=1326 audit(1789569264.346:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18332 comm="syz.3.6004" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99879e159 code=0x7ffc0000 [ 501.110113][T18340] xt_CT: You must specify a L4 protocol and not use inversions on it [ 501.568931][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.568988][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.109960][T18402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6039'. [ 502.306822][ T5721] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 502.456847][ T5721] usb 1-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 502.458099][ T5721] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 502.458132][ T5721] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 502.458157][ T5721] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 502.458199][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.517853][T18397] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 502.646202][ T5741] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 502.795772][ T5741] usb 3-1: Using ep0 maxpacket: 16 [ 502.796286][ T5741] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 502.797459][ T5741] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.797482][ T5741] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.798432][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 502.798454][ T5741] usb 3-1: SerialNumber: syz [ 502.863586][ T5741] usb 3-1: 0:2 : does not exist [ 502.936700][ T5721] usb 1-1: USB disconnect, device number 35 [ 502.937708][ T4933] Bluetooth: hci5: Reading Intel version command failed (-71) [ 503.103081][T18454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6064'. [ 503.103120][T18454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6064'. [ 503.173358][T18457] No such timeout policy "syz1" [ 503.232734][ T5741] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 503.247659][ T5741] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 503.288259][ T5741] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 503.326062][ T5741] usb 3-1: USB disconnect, device number 32 [ 503.371165][ T5667] udevd[5667]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.566160][ T5721] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 503.589705][T18480] fuse: Bad value for 'group_id' [ 503.589722][T18480] fuse: Bad value for 'group_id' [ 503.630096][T18482] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 503.748716][ T5721] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 503.753064][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.753088][ T5721] usb 2-1: Product: syz [ 503.753103][ T5721] usb 2-1: Manufacturer: syz [ 503.753118][ T5721] usb 2-1: SerialNumber: syz [ 503.828721][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 504.221150][T18510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.262907][ T5721] usb 2-1: USB disconnect, device number 32 [ 504.326441][ T5742] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 504.474311][T18527] kAFS: unparsable volume name [ 504.477422][ T5742] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 504.479974][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.491878][ T5742] usb 5-1: config 0 descriptor?? [ 504.509759][ T5742] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 504.695806][ T5741] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 504.765875][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 504.846523][ T5741] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 504.848928][ T5741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.908513][ T5742] gspca_cpia1: usb_control_msg 03, error -71 [ 504.908850][ T5742] gspca_cpia1: usb_control_msg 01, error -71 [ 504.908865][ T5742] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 504.921967][ T5742] usb 5-1: USB disconnect, device number 28 [ 504.946676][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 504.946855][ T9] ath9k_htc: Failed to initialize the device [ 504.960498][ T5721] usb 2-1: ath9k_htc: USB layer deinitialized [ 505.865961][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 506.036405][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 506.045074][ T9] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 506.063835][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.077911][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.077935][ T9] usb 5-1: Product: syz [ 506.077950][ T9] usb 5-1: Manufacturer: syz [ 506.077964][ T9] usb 5-1: SerialNumber: syz [ 506.082907][ T31] audit: type=1326 audit(1789569269.626:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.2.6131" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 506.083280][ T31] audit: type=1326 audit(1789569269.626:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.2.6131" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 506.084629][ T9] usb 5-1: config 0 descriptor?? [ 506.098583][ T31] audit: type=1326 audit(1789569269.646:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.2.6131" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 506.098690][ T31] audit: type=1326 audit(1789569269.646:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.2.6131" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 506.098849][ T31] audit: type=1326 audit(1789569269.646:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.2.6131" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 506.159060][ T5741] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 506.238306][ T9] cdc_ether 5-1:0.0: missing cdc header descriptor [ 506.269869][ T9] usb 5-1: unsupported MDLM descriptors [ 506.298410][ T25] usb 5-1: USB disconnect, device number 29 [ 506.347241][ T5741] usb 1-1: USB disconnect, device number 36 [ 506.476403][ T5661] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 506.480500][ T5661] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 506.481923][ T5661] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 506.484830][ T5661] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 506.506364][ T5661] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 506.797730][T18606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6139'. [ 506.825643][T18610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6141'. [ 507.306988][ T25] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 507.457983][ T25] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 507.459211][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 507.459246][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 507.461626][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 507.461650][ T25] usb 3-1: Product: syz [ 507.461663][ T25] usb 3-1: Manufacturer: syz [ 507.461676][ T25] usb 3-1: SerialNumber: syz [ 507.463937][ T25] usb 3-1: config 0 descriptor?? [ 507.474332][ T25] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 507.474713][ T25] pctv452e: pctv452e_power_ctrl: 1 [ 507.474713][ T25] [ 507.535671][ T1339] bond0 (unregistering): Released all slaves [ 507.599552][T18626] : renamed from veth0_macvtap (while UP) [ 507.698483][T18642] netlink: 296 bytes leftover after parsing attributes in process `syz.4.6155'. [ 507.706938][ T25] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71 [ 507.706938][ T25] [ 507.706958][ T25] dvb-usb: bulk message failed: -22 (5/0) [ 507.744478][ T25] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 507.788844][ T25] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 507.804623][ T25] usb 3-1: USB disconnect, device number 33 [ 508.111925][T18661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6162'. [ 508.305895][ T25] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 508.326878][T18677] netlink: 'syz.1.6165': attribute type 21 has an invalid length. [ 508.420022][T18677] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6165'. [ 508.462931][T18597] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.463015][T18597] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.463117][T18597] bridge_slave_0: entered allmulticast mode [ 508.464506][ T25] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 508.467851][ T25] usb 5-1: config 2 interface 0 altsetting 178 has an endpoint descriptor with address 0x1F, changing to 0xF [ 508.467882][ T25] usb 5-1: config 2 interface 0 altsetting 178 endpoint 0xF has an invalid bInterval 249, changing to 11 [ 508.467908][ T25] usb 5-1: config 2 interface 0 altsetting 178 endpoint 0xF has invalid maxpacket 59391, setting to 1024 [ 508.467935][ T25] usb 5-1: config 2 interface 0 has no altsetting 0 [ 508.478648][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.478671][ T25] usb 5-1: Product: syz [ 508.478686][ T25] usb 5-1: Manufacturer: syz [ 508.478699][ T25] usb 5-1: SerialNumber: syz [ 508.571555][T18597] bridge_slave_0: entered promiscuous mode [ 508.592033][T18597] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.592122][T18597] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.594956][T18659] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 508.602984][T18597] bridge_slave_1: entered allmulticast mode [ 508.607300][ T4933] Bluetooth: hci4: command tx timeout [ 508.642816][T18597] bridge_slave_1: entered promiscuous mode [ 508.848080][ T25] ims_pcu 5-1:2.0: Control endpoint is not INTERRUPT IN [ 508.848125][ T25] ims_pcu 5-1:2.0: probe with driver ims_pcu failed with error -22 [ 508.869180][ T25] usb 5-1: USB disconnect, device number 30 [ 508.883531][T18597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.905936][ T5741] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 508.941023][T18597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.006814][T18597] team0: Port device team_slave_0 added [ 509.022786][T18597] team0: Port device team_slave_1 added [ 509.025334][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 509.056273][ T5741] usb 3-1: Using ep0 maxpacket: 8 [ 509.058299][ T5741] usb 3-1: unable to get BOS descriptor or descriptor too short [ 509.058342][ T5741] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 509.059443][ T5741] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 509.059467][ T5741] usb 3-1: config 0 has no interface number 0 [ 509.059503][ T5741] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 509.059529][ T5741] usb 3-1: config 0 interface 88 has no altsetting 0 [ 509.062173][ T5741] usb 3-1: string descriptor 0 read error: -22 [ 509.062283][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 509.065558][ T5741] usb 3-1: config 0 descriptor?? [ 509.153129][ T5741] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input68 [ 509.286480][T18597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.286496][T18597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.286524][T18597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.288249][T18597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.288263][T18597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.288289][T18597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.479637][T18710] netlink: 'syz.1.6180': attribute type 34 has an invalid length. [ 509.479658][T18710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6180'. [ 509.540557][ T5742] usb 3-1: USB disconnect, device number 34 [ 509.599738][T18597] hsr_slave_0: entered promiscuous mode [ 509.600637][T18597] hsr_slave_1: entered promiscuous mode [ 509.602905][T18597] debugfs: 'hsr0' already exists in 'hsr' [ 509.602922][T18597] Cannot create hsr debugfs directory [ 509.990296][T18730] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6187'. [ 510.094872][T18739] openvswitch: netlink: Duplicate or invalid key (type 0). [ 510.464371][T18759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6197'. [ 510.479123][T18745] gretap1: entered promiscuous mode [ 510.602062][T18767] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6200'. [ 510.602862][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 510.686471][ T4933] Bluetooth: hci4: command tx timeout [ 510.735829][ T1339] hsr_slave_0: left promiscuous mode [ 510.755048][ T1339] hsr_slave_1: left promiscuous mode [ 511.683832][T18809] openvswitch: netlink: Actions may not be safe on all matching packets [ 511.730367][ T5741] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 511.795068][T18597] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 511.815357][T18597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 511.824232][T18597] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 511.864786][T18597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 511.873403][T18597] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 511.887600][ T5741] usb 2-1: Using ep0 maxpacket: 8 [ 511.888117][ T5741] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 511.889033][ T5741] usb 2-1: config 8 has an invalid interface number: 188 but max is 0 [ 511.889056][ T5741] usb 2-1: config 8 has no interface number 0 [ 511.889093][ T5741] usb 2-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 511.889117][ T5741] usb 2-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 80, changing to 10 [ 511.893411][T18597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 511.944610][T18597] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 511.960433][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.960465][ T5741] usb 2-1: Product: syz [ 511.960480][ T5741] usb 2-1: Manufacturer: syz [ 511.960495][ T5741] usb 2-1: SerialNumber: syz [ 512.006339][ T6811] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 512.046017][T18597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.156648][ T6811] usb 5-1: Using ep0 maxpacket: 8 [ 512.158374][ T6811] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 512.160246][ T6811] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 512.166127][ T6811] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 512.166159][ T6811] usb 5-1: Product: syz [ 512.166235][ T6811] usb 5-1: Manufacturer: syz [ 512.166270][ T6811] usb 5-1: SerialNumber: syz [ 512.267282][ T5741] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 512.269421][T18597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.271534][ C1] sd 0:0:1:0: [sda] tag#8333 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 512.271657][ C1] sd 0:0:1:0: [sda] tag#8333 CDB: Read(6) 08 00 05 02 00 00 [ 512.315091][ T5741] usb 2-1: USB disconnect, device number 33 [ 512.371101][T18597] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.402491][T14843] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.402583][T14843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.434936][T14843] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.435028][T14843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.481345][ T6811] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 512.481368][ T6811] usb 5-1: Handspring Visor / Palm OS: port 6, is for Remote File System use [ 512.481389][ T6811] usb 5-1: Handspring Visor / Palm OS: port 217, is for unknown use [ 512.481408][ T6811] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 512.684349][ T6811] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 512.684420][ T6811] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 512.705546][ T6811] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 512.724906][ T6811] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 512.744944][ T6811] usb 5-1: USB disconnect, device number 31 [ 512.768262][ T4933] Bluetooth: hci4: command tx timeout [ 512.785136][ T6811] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 512.814244][ T6811] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 512.814748][ T6811] visor 5-1:1.0: device disconnected [ 512.822961][T18597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.898724][T18597] veth0_vlan: entered promiscuous mode [ 512.921638][T18597] veth1_vlan: entered promiscuous mode [ 512.977085][T18597] veth0_macvtap: entered promiscuous mode [ 512.986787][T18597] veth1_macvtap: entered promiscuous mode [ 513.021460][T18597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.052302][T18597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.157892][ T38] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.172067][ T1111] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.172130][ T1111] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.172165][ T1111] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.251223][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 513.337062][T14843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.337081][T14843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.516556][ T1353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.516576][ T1353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.547602][T18876] netlink: 'syz.4.6242': attribute type 10 has an invalid length. [ 513.597359][T18876] team0 (unregistering): Port device team_slave_0 removed [ 513.597449][T18882] IPv6: NLM_F_CREATE should be specified when creating new route [ 513.597545][T18882] netlink: 'syz.0.6247': attribute type 1 has an invalid length. [ 513.646842][T18876] team0 (unregistering): Port device team_slave_1 removed [ 513.743863][T18889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6250'. [ 514.627566][T18937] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6267'. [ 514.691147][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 514.838775][ T31] audit: type=1326 audit(1789569278.386:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.0.6272" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eaa19e159 code=0x7ffc0000 [ 514.838833][ T31] audit: type=1326 audit(1789569278.386:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.0.6272" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eaa19e159 code=0x7ffc0000 [ 514.849775][ T31] audit: type=1326 audit(1789569278.386:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.0.6272" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9eaa19e159 code=0x7ffc0000 [ 514.849825][ T31] audit: type=1326 audit(1789569278.386:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.0.6272" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eaa19e159 code=0x7ffc0000 [ 514.849865][ T31] audit: type=1326 audit(1789569278.386:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.0.6272" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eaa19e159 code=0x7ffc0000 [ 514.850242][ T4933] Bluetooth: hci4: command tx timeout [ 515.410109][T18963] openvswitch: netlink: Key type 170 is out of range max 32 [ 515.625347][T18974] unsupported nlmsg_type 40 [ 516.015961][ T5721] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 516.177210][ T5721] usb 2-1: Using ep0 maxpacket: 8 [ 516.177803][ T5721] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 516.178716][ T5721] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 516.178739][ T5721] usb 2-1: config 179 has no interface number 0 [ 516.178777][ T5721] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 516.178803][ T5721] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 516.178829][ T5721] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 516.178854][ T5721] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 516.178879][ T5721] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 516.178906][ T5721] usb 2-1: config 179 interface 65 has no altsetting 0 [ 516.178937][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.332669][ T5721] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input69 [ 516.388681][ T4969] input input69: unable to receive magic message: -110 [ 516.457904][ T4969] input input69: unable to receive magic message: -32 [ 516.525284][ T4969] input input69: unable to receive magic message: -32 [ 516.601414][ T4969] input input69: unable to receive magic message: -32 [ 516.727776][ T5721] usb 2-1: USB disconnect, device number 34 [ 516.727881][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 516.907903][T19035] geneve3: entered promiscuous mode [ 517.750865][T19080] netlink: 'syz.0.6332': attribute type 8 has an invalid length. [ 518.516284][T19122] xt_hashlimit: size too large, truncated to 1048576 [ 518.560604][T19124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6353'. [ 518.560628][T19124] netlink: 'syz.0.6353': attribute type 3 has an invalid length. [ 518.948099][ T989] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 519.098321][ T989] usb 1-1: Using ep0 maxpacket: 8 [ 519.099660][ T989] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 519.100699][ T989] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 519.100723][ T989] usb 1-1: config 0 has no interface number 0 [ 519.111278][ T989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.111305][ T989] usb 1-1: Product: syz [ 519.111321][ T989] usb 1-1: Manufacturer: syz [ 519.111337][ T989] usb 1-1: SerialNumber: syz [ 519.161065][ T989] usb 1-1: config 0 descriptor?? [ 519.367281][ T989] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 519.367376][ T989] uvcvideo 1-1:0.31: No valid video chain found. [ 519.372562][ T989] usb 1-1: USB disconnect, device number 37 [ 519.601066][ T31] audit: type=1326 audit(1789569283.146:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.2.6382" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 519.602895][ T31] audit: type=1326 audit(1789569283.146:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.2.6382" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 519.663927][ T31] audit: type=1326 audit(1789569283.206:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.2.6382" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 519.663972][ T31] audit: type=1326 audit(1789569283.206:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.2.6382" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 519.664011][ T31] audit: type=1326 audit(1789569283.206:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.2.6382" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 519.826724][ T5741] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 519.979385][ T5741] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 519.982233][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.982258][ T5741] usb 5-1: Product: syz [ 519.982273][ T5741] usb 5-1: Manufacturer: syz [ 519.982288][ T5741] usb 5-1: SerialNumber: syz [ 520.061517][ T5721] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 520.507093][ T989] usb 5-1: USB disconnect, device number 32 [ 520.601691][T19231] netlink: 'syz.2.6406': attribute type 7 has an invalid length. [ 520.922085][T19253] lo: entered promiscuous mode [ 520.924996][T19253] tunl0: entered promiscuous mode [ 520.932497][T19253] gre0: entered promiscuous mode [ 520.950186][T19253] gretap0: entered promiscuous mode [ 520.990514][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6419'. [ 521.007732][T19253] erspan0: entered promiscuous mode [ 521.014941][T19253] ip_vti0: entered promiscuous mode [ 521.041893][T19253] ip6_vti0: entered promiscuous mode [ 521.060075][T19253] sit0: entered promiscuous mode [ 521.087171][T19253] ip6tnl0: entered promiscuous mode [ 521.091069][T19253] ip6gre0: entered promiscuous mode [ 521.126080][T19253] syz_tun: entered promiscuous mode [ 521.158947][T19253] ip6gretap0: entered promiscuous mode [ 521.164580][T19253] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.166199][T19253] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.174158][ T5721] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 521.174327][ T5721] ath9k_htc: Failed to initialize the device [ 521.181891][ T989] usb 5-1: ath9k_htc: USB layer deinitialized [ 521.183149][T19253] bridge0: entered promiscuous mode [ 521.187713][T19266] SET target dimension over the limit! [ 521.361698][T19272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6429'. [ 521.536593][T19284] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6433'. [ 521.719142][T19300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6438'. [ 521.888270][T19310] xt_hashlimit: overflow, rate too high: 1 [ 522.208262][T19327] ip6gre2: entered allmulticast mode [ 522.520507][T19351] dummy0: mtu less than device minimum [ 522.648055][ T31] audit: type=1326 audit(1789569286.196:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19362 comm="syz.2.6470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 522.648108][ T31] audit: type=1326 audit(1789569286.196:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19362 comm="syz.2.6470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 522.650524][ T31] audit: type=1326 audit(1789569286.196:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19362 comm="syz.2.6470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 522.650647][ T31] audit: type=1326 audit(1789569286.196:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19362 comm="syz.2.6470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 522.651126][ T31] audit: type=1326 audit(1789569286.196:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19362 comm="syz.2.6470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 523.106145][ T31] audit: type=1326 audit(1789569286.646:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.2.6478" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 523.106203][ T31] audit: type=1326 audit(1789569286.656:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.2.6478" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 523.171086][ T31] audit: type=1326 audit(1789569286.716:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.2.6478" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 523.171214][ T31] audit: type=1326 audit(1789569286.716:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.2.6478" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 523.171349][ T31] audit: type=1326 audit(1789569286.716:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19378 comm="syz.2.6478" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f271fd9e159 code=0x7ffc0000 [ 523.852418][T19427] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6500'. [ 523.979026][T19433] binder: binder_mmap: 19431 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 524.135233][T19439] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 524.152340][T19439] bond3 (unregistering): Released all slaves [ 524.229597][T19443] netlink: 'syz.5.6510': attribute type 2 has an invalid length. [ 524.477415][T19465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6521'. [ 525.066037][T19506] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6539'. [ 525.209702][T19515] netlink: 'syz.4.6542': attribute type 27 has an invalid length. [ 525.209737][T19515] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 525.335857][ T5742] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 525.421979][T19528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6547'. [ 525.487497][ T5742] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 525.488426][ T5742] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 525.488449][ T5742] usb 1-1: config 0 has no interface number 0 [ 525.488485][ T5742] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 525.488509][ T5742] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 525.490406][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.490428][ T5742] usb 1-1: Product: syz [ 525.490442][ T5742] usb 1-1: Manufacturer: syz [ 525.490456][ T5742] usb 1-1: SerialNumber: syz [ 525.494480][ T5742] usb 1-1: config 0 descriptor?? [ 525.495128][T19509] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 525.506978][ T6811] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 525.549967][ T5742] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 525.617461][ T5742] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 525.661848][ T6811] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 525.664463][ T6811] usb 6-1: config 2 has an invalid interface number: 228 but max is 0 [ 525.664486][ T6811] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 525.664532][ T6811] usb 6-1: config 2 has no interface number 0 [ 525.664570][ T6811] usb 6-1: config 2 interface 228 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 525.664597][ T6811] usb 6-1: config 2 interface 228 has no altsetting 0 [ 525.686511][ T6811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.686624][ T6811] usb 6-1: Product: syz [ 525.686670][ T6811] usb 6-1: Manufacturer: syz [ 525.686705][ T6811] usb 6-1: SerialNumber: syz [ 525.933154][T19546] netlink: 'syz.2.6553': attribute type 5 has an invalid length. [ 525.999956][ T6811] ims_pcu 6-1:2.228: probe with driver ims_pcu failed with error -22 [ 526.019341][ T5742] usb 1-1: USB disconnect, device number 38 [ 526.025451][ T6811] usb 6-1: USB disconnect, device number 2 [ 526.085179][ T5742] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 526.098867][ T5742] cyberjack 1-1:0.69: device disconnected [ 526.436723][ T989] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 526.590554][ T989] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 526.601016][ T989] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 526.601069][ T989] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 526.601116][ T989] usb 5-1: config 220 has no interface number 2 [ 526.601251][ T989] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 526.601315][ T989] usb 5-1: config 220 interface 0 has no altsetting 0 [ 526.601353][ T989] usb 5-1: config 220 interface 76 has no altsetting 0 [ 526.601386][ T989] usb 5-1: config 220 interface 1 has no altsetting 0 [ 526.638610][ T989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.638667][ T989] usb 5-1: Product: syz [ 526.638704][ T989] usb 5-1: Manufacturer: syz [ 526.638739][ T989] usb 5-1: SerialNumber: syz [ 526.939577][ T989] usb 5-1: selecting invalid altsetting 0 [ 526.941807][ T989] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 526.941837][ T989] uvcvideo 5-1:220.0: No valid video chain found. [ 526.983064][ T989] usb 5-1: selecting invalid altsetting 0 [ 526.983089][ T989] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 527.004385][ T989] usb 5-1: USB disconnect, device number 33 [ 527.081609][T19599] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 527.216616][ T6811] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 527.350492][T19615] netlink: 'syz.2.6580': attribute type 16 has an invalid length. [ 527.350515][T19615] netlink: 'syz.2.6580': attribute type 17 has an invalid length. [ 527.367317][ T6811] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 527.372370][ T6811] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 527.372410][ T6811] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 527.372486][ T6811] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBF, changing to 0x8F [ 527.372566][ T6811] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8F has an invalid bInterval 145, changing to 11 [ 527.382343][ T6811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.382368][ T6811] usb 2-1: Product: syz [ 527.382383][ T6811] usb 2-1: Manufacturer: syz [ 527.382397][ T6811] usb 2-1: SerialNumber: syz [ 527.607672][T19626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6586'. [ 527.607755][T19626] openvswitch: netlink: EtherType 300 is less than min 600 [ 527.650598][ T6811] cdc_ncm 2-1:1.0: bind() failure [ 527.667360][ T6811] usbtest 2-1:1.0: Linux gadget zero [ 527.667380][ T6811] usbtest 2-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 527.669100][T19625] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6585'. [ 527.714239][ T6811] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 527.714280][ T6811] cdc_ncm 2-1:1.1: bind() failure [ 527.736781][ T6811] usbtest 2-1:1.1: couldn't get endpoints, -71 [ 527.736850][ T6811] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 527.763389][ T6811] usb 2-1: USB disconnect, device number 35 [ 527.981129][T19645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6593'. [ 528.908442][ T5721] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 528.940947][T19707] SET target dimension over the limit! [ 529.058237][ T5721] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 529.059386][ T5721] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.059430][ T5721] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 529.059471][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.139540][T19717] netlink: 'syz.4.6622': attribute type 3 has an invalid length. [ 529.333566][ T5721] ttusb_dec_send_command: result bulk message failed: error -22 [ 529.333751][ T5721] ttusb-dec 1-1:1.0: probe with driver ttusb-dec failed with error -22 [ 529.360344][ T5721] usb 1-1: USB disconnect, device number 39 [ 529.464129][T19733] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6630'. [ 529.602775][T19744] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6634'. [ 529.602825][T19744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6634'. [ 529.602844][T19744] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6634'. [ 529.602860][T19744] netlink: 'syz.1.6634': attribute type 2 has an invalid length. [ 529.602873][T19744] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6634'. [ 530.016298][T19767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.297233][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6652'. [ 530.297266][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6652'. [ 530.495905][ T989] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 530.527366][T19801] netlink: 'syz.1.6660': attribute type 10 has an invalid length. [ 530.527397][T19801] ipvlan0: entered allmulticast mode [ 530.527412][T19801] veth0_vlan: entered allmulticast mode [ 530.533678][T19801] team0: Device ipvlan0 failed to register rx_handler [ 530.648871][ T989] usb 6-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 530.657224][ T989] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 530.657298][ T989] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 530.657360][ T989] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 530.657446][ T989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.701775][T19784] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 530.802025][T19813] bond3: option mode: invalid value (255) [ 530.828103][T19813] bond3 (unregistering): Released all slaves [ 530.931798][ T5661] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 531.156015][ T4933] Bluetooth: hci5: Reading Intel version command failed (-71) [ 531.157110][ T5742] usb 6-1: USB disconnect, device number 3 [ 531.486152][ T5721] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 531.650893][ T5721] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 531.653583][ T5721] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 531.653625][ T5721] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 531.653651][ T5721] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 531.653675][ T5721] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 531.653709][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.678209][T19831] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 531.715476][ T5721] ims_pcu 2-1:1.0: Second endpoint on data interface is not BULK IN [ 531.715555][ T5721] ims_pcu 2-1:1.0: probe with driver ims_pcu failed with error -22 [ 531.834678][ T38] IPVS: starting estimator thread 0... [ 531.915868][T19863] IPVS: using max 29 ests per chain, 69600 per kthread [ 531.936202][ T5707] usb 2-1: USB disconnect, device number 36 [ 532.127710][ T5721] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 532.277987][ T5721] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 532.279381][ T5721] usb 6-1: config 0 has an invalid interface number: 81 but max is 0 [ 532.279405][ T5721] usb 6-1: config 0 has no interface number 0 [ 532.279433][ T5721] usb 6-1: too many endpoints for config 0 interface 81 altsetting 143: 84, using maximum allowed: 30 [ 532.279467][ T5721] usb 6-1: config 0 interface 81 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 84 [ 532.279493][ T5721] usb 6-1: config 0 interface 81 has no altsetting 0 [ 532.290125][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.290181][ T5721] usb 6-1: Product: syz [ 532.290222][ T5721] usb 6-1: Manufacturer: syz [ 532.290246][ T5721] usb 6-1: SerialNumber: syz [ 532.323951][ T5721] usb 6-1: config 0 descriptor?? [ 532.560530][ T5721] peak_usb 6-1:0.81: probe with driver peak_usb failed with error 81 [ 532.569572][ T5721] usb 6-1: USB disconnect, device number 4 [ 532.676221][T19903] netlink: NAT attribute has 1 unknown bytes [ 532.676251][T19903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.047348][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.201594][T19935] netlink: 'syz.4.6726': attribute type 4 has an invalid length. [ 533.201619][T19935] __nla_validate_parse: 1 callbacks suppressed [ 533.201634][T19935] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6726'. [ 533.258314][T19935] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 533.745821][ T5742] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 533.895854][ T5742] usb 6-1: Using ep0 maxpacket: 8 [ 533.896380][ T5742] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 533.897395][ T5742] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 533.897419][ T5742] usb 6-1: config 179 has no interface number 0 [ 533.897453][ T5742] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 533.897476][ T5742] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 533.897500][ T5742] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 533.897522][ T5742] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 533.897544][ T5742] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 533.897567][ T5742] usb 6-1: config 179 interface 65 has no altsetting 0 [ 533.897595][ T5742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.021746][ T5742] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input71 [ 534.058176][ T4969] input input71: unable to receive magic message: -110 [ 534.060533][T19991] lo: entered promiscuous mode [ 534.065510][T19991] tunl0: entered promiscuous mode [ 534.085017][T19991] gre0: entered promiscuous mode [ 534.097477][T19991] gretap0: entered promiscuous mode [ 534.116340][ T4969] input input71: unable to receive magic message: -32 [ 534.139642][T19991] erspan0: entered promiscuous mode [ 534.144469][T19991] ip_vti0: entered promiscuous mode [ 534.159502][T19991] ip6_vti0: entered promiscuous mode [ 534.162443][T19991] sit0: entered promiscuous mode [ 534.179261][T19991] ip6tnl0: entered promiscuous mode [ 534.182318][T19991] ip6gre0: entered promiscuous mode [ 534.185221][ T4969] input input71: unable to receive magic message: -32 [ 534.218086][T19991] syz_tun: entered promiscuous mode [ 534.278455][T19991] ip6gretap0: entered promiscuous mode [ 534.293425][ T4969] input input71: unable to receive magic message: -32 [ 534.305453][T19991] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.307476][T19991] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.330456][ T5742] usb 6-1: USB disconnect, device number 5 [ 534.330533][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 534.342656][T19991] bridge0: entered promiscuous mode [ 534.523136][T20009] openvswitch: netlink: Actions may not be safe on all matching packets [ 534.802619][T20029] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 534.802639][T20029] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 535.077017][T20045] netlink: 'syz.0.6779': attribute type 16 has an invalid length. [ 535.077038][T20045] netlink: 'syz.0.6779': attribute type 17 has an invalid length. [ 535.077141][T20045] lo: left promiscuous mode [ 535.113862][T20045] tunl0: left promiscuous mode [ 535.124875][T20045] gre0: left promiscuous mode [ 535.177493][T20045] gretap0: left promiscuous mode [ 535.180819][T20045] erspan0: left promiscuous mode [ 535.183596][T20045] ip_vti0: left promiscuous mode [ 535.185531][T20045] ip6_vti0: left promiscuous mode [ 535.208568][T20052] netlink: 'syz.5.6782': attribute type 7 has an invalid length. [ 535.219070][T20045] sit0: left promiscuous mode [ 535.258908][T20045] ip6tnl0: left promiscuous mode [ 535.261029][T20045] ip6gre0: left promiscuous mode [ 535.263200][T20045] syz_tun: left promiscuous mode [ 535.265649][T20045] ip6gretap0: left promiscuous mode [ 535.289787][T20045] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.289898][T20045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.290201][T20045] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.290299][T20045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.290848][T20045] bridge0: left promiscuous mode [ 535.361537][T20045] veth1_to_hsr: left allmulticast mode [ 535.400950][T20045] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 535.404830][T20045] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 535.404852][T20045] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 535.434643][T20045] dummy1: left promiscuous mode [ 535.434664][T20045] dummy1: left allmulticast mode [ 535.447619][T20045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.455593][T20045] bridge1: left promiscuous mode [ 535.455613][T20045] bridge1: left allmulticast mode [ 535.489645][T20045] bond2: left promiscuous mode [ 535.489667][T20045] bond2: left allmulticast mode [ 535.490349][T20045] ip6tnl1: left promiscuous mode [ 535.514679][T20045] ip6gre2: left allmulticast mode [ 536.490609][T20108] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6810'. [ 536.530413][T20115] tc_dump_action: action bad kind [ 536.693421][ C1] sd 0:0:1:0: [sda] tag#8377 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 536.693485][ C1] sd 0:0:1:0: [sda] tag#8377 CDB: Write(10) 2a 00 00 00 00 00 00 00 01 [ 537.033119][T20146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6829'. [ 537.033149][T20146] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 537.182436][T20158] vivid-000: ================= START STATUS ================= [ 537.184020][T20158] vivid-000: Generate PTS: true [ 537.184063][T20158] vivid-000: Generate SCR: true [ 537.184088][T20158] tpg source WxH: 320x180 (R'G'B) [ 537.184102][T20158] tpg field: 1 [ 537.184109][T20158] tpg crop: (0,0)/320x180 [ 537.184122][T20158] tpg compose: (0,0)/320x180 [ 537.184135][T20158] tpg colorspace: 8 [ 537.184144][T20158] tpg transfer function: 0/0 [ 537.184154][T20158] tpg quantization: 0/0 [ 537.184164][T20158] tpg RGB range: 0/2 [ 537.184174][T20158] vivid-000: ================== END STATUS ================== [ 537.425059][T20166] netlink: 'syz.2.6843': attribute type 1 has an invalid length. [ 537.653452][T20182] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 537.779290][T20192] netlink: 'syz.0.6852': attribute type 2 has an invalid length. [ 537.902145][T20196] netlink: 'syz.0.6857': attribute type 9 has an invalid length. [ 538.009087][T20204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.654027][T20240] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 538.654055][T20240] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 538.742732][T20254] lo: entered promiscuous mode [ 538.743123][T20254] tunl0: entered promiscuous mode [ 538.743487][T20254] gre0: entered promiscuous mode [ 538.743772][T20254] gretap0: entered promiscuous mode [ 538.744068][T20254] erspan0: entered promiscuous mode [ 538.744464][T20254] ip_vti0: entered promiscuous mode [ 538.744781][T20254] ip6_vti0: entered promiscuous mode [ 538.745067][T20254] sit0: entered promiscuous mode [ 538.745349][T20254] ip6tnl0: entered promiscuous mode [ 538.745364][T20254] ip6tnl0: left allmulticast mode [ 538.745655][T20254] ip6gre0: entered promiscuous mode [ 538.808308][T20254] syz_tun: entered promiscuous mode [ 538.808634][T20254] ip6gretap0: entered promiscuous mode [ 538.809792][T20254] bridge0: entered promiscuous mode [ 538.810155][T20254] vcan0: entered promiscuous mode [ 538.811927][T20254] bond0: entered promiscuous mode [ 538.811947][T20254] bond_slave_0: entered promiscuous mode [ 538.812110][T20254] bond_slave_1: entered promiscuous mode [ 538.812266][T20254] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 538.813377][T20254] team0: entered promiscuous mode [ 538.813459][T20254] team_slave_0: entered promiscuous mode [ 538.813625][T20254] team_slave_1: entered promiscuous mode [ 538.814116][T20254] nlmon0: entered promiscuous mode [ 538.814756][T20254] batadv0: entered promiscuous mode [ 538.814773][T20254] batadv0: left allmulticast mode [ 538.895504][T20254] vxcan0: entered promiscuous mode [ 538.901438][T20254] vxcan1: entered promiscuous mode [ 538.901778][T20254] veth0: entered promiscuous mode [ 538.902136][T20254] veth1: entered promiscuous mode [ 538.902479][T20254] wg0: entered promiscuous mode [ 538.902907][T20254] wg1: entered promiscuous mode [ 538.903266][T20254] wg2: entered promiscuous mode [ 538.903621][T20254] veth0_to_bridge: entered promiscuous mode [ 538.905331][T20254] veth1_to_bridge: entered promiscuous mode [ 538.958351][T20254] veth0_to_bond: entered promiscuous mode [ 538.958838][T20254] veth1_to_bond: entered promiscuous mode [ 538.962451][T20254] veth0_to_team: entered promiscuous mode [ 538.965486][T20254] veth1_to_team: entered promiscuous mode [ 538.984925][T20254] veth0_to_batadv: entered promiscuous mode [ 538.993868][T20254] batadv_slave_0: entered promiscuous mode [ 538.994830][T20254] veth1_to_batadv: entered promiscuous mode [ 539.012852][T20254] batadv_slave_1: entered promiscuous mode [ 539.013203][T20254] veth0_to_hsr: entered promiscuous mode [ 539.028383][T20254] veth1_to_hsr: entered promiscuous mode [ 539.058852][T20258] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6884'. [ 539.375787][ T6811] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 539.515258][T20290] tipc: Can't bind to reserved service type 1 [ 539.529343][ T6811] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 539.533524][ T6811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 539.533549][ T6811] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 539.533573][ T6811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 539.533594][ T6811] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 539.535564][ T6811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.535589][ T6811] usb 5-1: Product: syz [ 539.535604][ T6811] usb 5-1: Manufacturer: syz [ 539.535619][ T6811] usb 5-1: SerialNumber: syz [ 539.632722][ T6811] usb 5-1: config 0 descriptor?? [ 539.645583][ T6811] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 539.735845][ T5742] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 539.877983][ T6811] ums-isd200 5-1:0.0: probe with driver ums-isd200 failed with error -22 [ 539.898577][ T5742] usb 1-1: Using ep0 maxpacket: 32 [ 539.899127][ T5742] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 539.900550][ T5742] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 539.900596][ T5742] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.903606][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.903629][ T5742] usb 1-1: Product: syz [ 539.903644][ T5742] usb 1-1: Manufacturer: syz [ 539.903658][ T5742] usb 1-1: SerialNumber: syz [ 540.076670][ T6811] usb 5-1: USB disconnect, device number 34 [ 540.136914][T20310] netlink: 'syz.5.6910': attribute type 16 has an invalid length. [ 540.136934][T20310] netlink: 'syz.5.6910': attribute type 17 has an invalid length. [ 540.137039][T20310] lo: left promiscuous mode [ 540.142435][T20310] tunl0: left promiscuous mode [ 540.147449][T20310] gre0: left promiscuous mode [ 540.191311][ T5742] ljca 1-1:1.0: probe with driver ljca failed with error -71 [ 540.211999][ T5742] usb 1-1: USB disconnect, device number 40 [ 540.275421][T20310] gretap0: left promiscuous mode [ 540.285661][T20310] erspan0: left promiscuous mode [ 540.294314][T20310] ip_vti0: left promiscuous mode [ 540.300684][T20310] ip6_vti0: left promiscuous mode [ 540.302956][T20310] sit0: left promiscuous mode [ 540.360956][T20310] ip6tnl0: left promiscuous mode [ 540.381842][T20310] ip6gre0: left promiscuous mode [ 540.391956][T20310] syz_tun: left promiscuous mode [ 540.395621][T20310] ip6gretap0: left promiscuous mode [ 540.406238][T20310] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.406508][T20310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.408389][T20310] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.408661][T20310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.411307][T20310] bridge0: left promiscuous mode [ 540.599571][T20310] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 540.683577][T20296] syz.2.6903 (20296): drop_caches: 2 [ 540.923965][T20320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6915'. [ 541.059846][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 541.059864][ T31] audit: type=1326 audit(1789569304.606:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20329 comm="syz.0.6919" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eaa19e159 code=0x7ffc0000 [ 541.060124][ T31] audit: type=1326 audit(1789569304.606:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20329 comm="syz.0.6919" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eaa19e159 code=0x7ffc0000 [ 541.078384][ T31] audit: type=1326 audit(1789569304.616:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20329 comm="syz.0.6919" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f9eaa19e159 code=0x7ffc0000 [ 541.080438][ T31] audit: type=1326 audit(1789569304.616:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20329 comm="syz.0.6919" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eaa19e159 code=0x7ffc0000 [ 541.080924][ T31] audit: type=1326 audit(1789569304.616:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20329 comm="syz.0.6919" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eaa19e159 code=0x7ffc0000 [ 541.347643][ T31] audit: type=1326 audit(1789569304.886:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20336 comm="syz.5.6922" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffb99e159 code=0x7ffc0000 [ 541.347693][ T31] audit: type=1326 audit(1789569304.896:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20336 comm="syz.5.6922" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffb99e159 code=0x7ffc0000 [ 541.368685][ T31] audit: type=1326 audit(1789569304.906:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20336 comm="syz.5.6922" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffb99e159 code=0x7ffc0000 [ 541.378217][ T31] audit: type=1326 audit(1789569304.906:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20336 comm="syz.5.6922" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffb99e159 code=0x7ffc0000 [ 541.383104][ T31] audit: type=1326 audit(1789569304.936:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20336 comm="syz.5.6922" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f4ffb99e159 code=0x7ffc0000 [ 541.642778][T20353] xt_hashlimit: size too large, truncated to 1048576 [ 541.642968][T20353] xt_hashlimit: invalid rate [ 541.919751][T20373] random: crng reseeded on system resumption [ 542.065454][T20383] netlink: 'syz.0.6944': attribute type 1 has an invalid length. [ 542.377665][T20404] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 542.507941][T20410] netlink: 'syz.2.6959': attribute type 16 has an invalid length. [ 542.507962][T20410] netlink: 'syz.2.6959': attribute type 17 has an invalid length. [ 542.508314][T20410] lo: left promiscuous mode [ 542.512086][T20410] tunl0: left promiscuous mode [ 542.550801][T20410] gre0: left promiscuous mode [ 542.585507][T20410] gretap0: left promiscuous mode [ 542.601851][T20410] erspan0: left promiscuous mode [ 542.605466][T20410] ip_vti0: left promiscuous mode [ 542.617104][T20410] ip6_vti0: left promiscuous mode [ 542.618699][T20410] sit0: left promiscuous mode [ 542.625589][T20410] ip6tnl0: left promiscuous mode [ 542.642511][T20410] ip6gre0: left promiscuous mode [ 542.644121][T20410] syz_tun: left promiscuous mode [ 542.658013][T20410] ip6gretap0: left promiscuous mode [ 542.660554][T20410] bridge0: left promiscuous mode [ 542.662532][T20410] vcan0: left promiscuous mode [ 542.664181][T20410] bond0: left promiscuous mode [ 542.664484][T20410] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 542.665366][T20410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.719022][T20410] team0: left promiscuous mode [ 542.797563][T20410] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.798584][T20410] nlmon0: left promiscuous mode [ 542.799815][T20410] batadv0: left promiscuous mode [ 542.809830][T20410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.837922][T20410] vxcan0: left promiscuous mode [ 542.854847][T20410] vxcan1: left promiscuous mode [ 542.858569][T20410] veth0: left promiscuous mode [ 542.872226][T20410] veth1: left promiscuous mode [ 542.916128][T20410] wg0: left promiscuous mode [ 542.948634][T20410] wg1: left promiscuous mode [ 542.985969][T20410] wg2: left promiscuous mode [ 542.993096][T20410] veth0_to_bridge: left promiscuous mode [ 543.006822][T20410] veth1_to_bridge: left promiscuous mode [ 543.009596][T20410] veth0_to_bond: left promiscuous mode [ 543.010996][T20410] bond_slave_0: left promiscuous mode [ 543.012183][T20410] veth1_to_bond: left promiscuous mode [ 543.013439][T20410] bond_slave_1: left promiscuous mode [ 543.014732][T20410] veth0_to_team: left promiscuous mode [ 543.050083][T20410] team_slave_0: left promiscuous mode [ 543.060045][T20410] veth1_to_team: left promiscuous mode [ 543.061731][T20410] team_slave_1: left promiscuous mode [ 543.063143][T20410] veth0_to_batadv: left promiscuous mode [ 543.064484][T20410] batadv_slave_0: left promiscuous mode [ 543.065469][T20410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.066934][T20410] veth1_to_batadv: left promiscuous mode [ 543.080508][T20410] batadv_slave_1: left promiscuous mode [ 543.088953][T20410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.090977][T20410] veth0_to_hsr: left promiscuous mode [ 543.106000][T20410] veth1_to_hsr: left promiscuous mode [ 543.113323][T20410] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 543.113374][T20410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.150465][T20410] veth1_vlan: left promiscuous mode [ 543.151606][T20410] veth0_vlan: left promiscuous mode [ 543.153341][T20410] veth0_vlan: entered promiscuous mode [ 543.155562][T20410] veth1_vlan: entered promiscuous mode [ 543.183486][T20410] veth1_macvtap: left promiscuous mode [ 543.184708][T20410] veth0_macvtap: left promiscuous mode [ 543.198331][T20410] veth0_macvtap: entered promiscuous mode [ 543.199445][T20410] veth1_macvtap: entered promiscuous mode [ 543.205145][T20410] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 543.226143][T20410] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 543.227563][T20410] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 543.228568][T20410] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 543.233466][T20410] ip6tnl1: left allmulticast mode [ 543.263462][T20410] ip6tnl2: left promiscuous mode [ 543.264684][T20410] ip6gre1: left allmulticast mode [ 543.281188][T20410] bond1: left promiscuous mode [ 543.283415][T20410] geneve2: left promiscuous mode [ 543.296063][T20410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 543.300474][T20410] 8021q: adding VLAN 0 to HW filter on device bond3 [ 543.309663][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.309869][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.314312][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.314530][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.465652][T20422] bond1: Unable to set down delay as MII monitoring is disabled [ 543.493740][T20422] bond1 (unregistering): Released all slaves [ 543.539138][T20440] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 543.611378][T20427] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 543.721478][T14843] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.721511][T14843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.721678][T14843] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.721703][T14843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.721855][T14843] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.721880][T14843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.722032][T14843] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.722058][T14843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.827619][ T12] ip6_tunnel: M xmit: Local address not yet configured! [ 543.827811][ T12] ip6_tunnel: M xmit: Local address not yet configured! [ 543.856031][ T5721] ip6_tunnel: M xmit: Local address not yet configured! [ 543.934114][T20454] netlink: 'syz.0.6979': attribute type 5 has an invalid length. [ 544.136874][ T5721] ip6_tunnel: M xmit: Local address not yet configured! [ 544.434493][T20488] netlink: 'syz.5.6997': attribute type 10 has an invalid length. [ 544.434514][T20488] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6997'. [ 544.434637][T20488] dummy0: entered promiscuous mode [ 544.434926][T20488] bridge0: port 3(dummy0) entered blocking state [ 544.435026][T20488] bridge0: port 3(dummy0) entered disabled state [ 544.435181][T20488] dummy0: entered allmulticast mode [ 544.492513][T20488] bridge0: port 3(dummy0) entered blocking state [ 544.492647][T20488] bridge0: port 3(dummy0) entered forwarding state [ 544.526742][ T9] ip6_tunnel: M xmit: Local address not yet configured! [ 544.746672][T20506] xt_recent: Unsupported userspace flags (000000c5) [ 544.936017][ T6811] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 544.979781][T20520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7013'. [ 545.088328][ T6811] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 545.091104][ T6811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.091127][ T6811] usb 5-1: Product: syz [ 545.091142][ T6811] usb 5-1: Manufacturer: syz [ 545.091158][ T6811] usb 5-1: SerialNumber: syz [ 545.143592][ T25] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 545.486097][T20548] netlink: 'syz.1.7027': attribute type 11 has an invalid length. [ 545.601673][ T6811] usb 5-1: USB disconnect, device number 35 [ 546.055964][T20582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7044'. [ 546.206027][ T25] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 546.206180][ T25] ath9k_htc: Failed to initialize the device [ 546.208853][ T6811] usb 5-1: ath9k_htc: USB layer deinitialized [ 546.485788][ T989] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 546.503633][ T5742] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 546.606155][T20618] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7064'. [ 546.645919][ T989] usb 6-1: Using ep0 maxpacket: 16 [ 546.646417][ T989] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 546.647411][ T989] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 546.649966][ T989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.649994][ T989] usb 6-1: Product: syz [ 546.650012][ T989] usb 6-1: Manufacturer: syz [ 546.650030][ T989] usb 6-1: SerialNumber: syz [ 546.654236][ T989] r8152-cfgselector 6-1: Unknown version 0x0000 [ 546.654258][ T989] r8152-cfgselector 6-1: config 0 descriptor?? [ 546.688606][ T5742] usb 3-1: Using ep0 maxpacket: 32 [ 546.722112][ T5742] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 546.734216][ T5742] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 546.734289][ T5742] usb 3-1: config 2 has no interface number 0 [ 546.734327][ T5742] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 546.734352][ T5742] usb 3-1: config 2 interface 88 has no altsetting 0 [ 546.771767][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.771792][ T5742] usb 3-1: Product: syz [ 546.771807][ T5742] usb 3-1: Manufacturer: syz [ 546.771822][ T5742] usb 3-1: SerialNumber: syz [ 546.799755][T20594] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 546.854837][T20627] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 546.854861][T20627] bond3: option packets_per_slave: allowed values 0 - 65535 [ 546.887383][T20627] bond3 (unregistering): Released all slaves [ 547.017118][T20594] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 547.054883][T20638] bridge0: port 3(veth0_to_bridge) entered blocking state [ 547.055038][T20638] bridge0: port 3(veth0_to_bridge) entered disabled state [ 547.055264][T20638] veth0_to_bridge: entered allmulticast mode [ 547.055650][T20639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7072'. [ 547.071436][T20638] veth0_to_bridge: entered promiscuous mode [ 547.074881][T20638] bridge0: port 3(veth0_to_bridge) entered blocking state [ 547.075103][T20638] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 547.093191][T20639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7072'. [ 547.093213][T20639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.138051][ T5960] r8152-cfgselector 6-1: USB disconnect, device number 6 [ 547.219338][ T5742] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 547.219538][ T5742] asix 3-1:2.88: probe with driver asix failed with error -71 [ 547.244508][ T5742] usb 3-1: USB disconnect, device number 35 [ 547.603372][T20655] syz.4.7080 (20655): drop_caches: 2 [ 547.885946][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 548.009739][T20689] openvswitch: netlink: IP tunnel dst address not specified [ 548.071155][T20694] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 548.199615][T20698] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 548.700825][T20734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.015791][T20755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7128'. [ 549.160858][T20762] IPv6: NLM_F_CREATE should be specified when creating new route [ 549.256340][ T5960] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 549.261644][T20770] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7136'. [ 549.358489][T20777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7139'. [ 549.406435][ T5960] usb 1-1: Using ep0 maxpacket: 32 [ 549.407020][ T5960] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 549.409999][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.410023][ T5960] usb 1-1: Product: syz [ 549.410038][ T5960] usb 1-1: Manufacturer: syz [ 549.410053][ T5960] usb 1-1: SerialNumber: syz [ 549.430201][ T5960] usb 1-1: config 0 descriptor?? [ 549.678527][ T5960] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 549.678631][ T5960] 00 00 00 00 00 00 00 00 [ 549.678698][ T5960] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 549.890942][ T5721] usb 1-1: USB disconnect, device number 41 [ 550.104308][ T5960] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 550.255954][ T5960] usb 5-1: Using ep0 maxpacket: 16 [ 550.256712][ T5960] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 550.257670][ T5960] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 550.257698][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 550.257719][ T5960] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 550.257742][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 550.257763][ T5960] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 550.261439][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.261463][ T5960] usb 5-1: Product: syz [ 550.261479][ T5960] usb 5-1: Manufacturer: syz [ 550.261493][ T5960] usb 5-1: SerialNumber: syz [ 550.293903][ T5960] usb 5-1: config 0 descriptor?? [ 550.363511][ T5960] port100 5-1:0.0: NFC: Could not get supported command types [ 550.486032][ T5721] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 550.546615][ T9] usb 5-1: USB disconnect, device number 36 [ 550.647778][ T5721] usb 6-1: Using ep0 maxpacket: 32 [ 550.648641][ T5721] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 550.649814][ T5721] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 550.649838][ T5721] usb 6-1: config 0 has no interface number 0 [ 550.649873][ T5721] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 550.649895][ T5721] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 550.649920][ T5721] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 550.649945][ T5721] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 550.649968][ T5721] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 550.649992][ T5721] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 550.650016][ T5721] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 550.650038][ T5721] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 550.650062][ T5721] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 550.650085][ T5721] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 550.652435][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.652458][ T5721] usb 6-1: Product: syz [ 550.652474][ T5721] usb 6-1: Manufacturer: syz [ 550.652488][ T5721] usb 6-1: SerialNumber: syz [ 550.655282][ T5721] usb 6-1: config 0 descriptor?? [ 550.656684][T20819] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 550.661416][T20819] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 550.679455][ T5721] usb 6-1: will this work? Response EP is not usually 3 [ 550.679475][ T5721] usb 6-1: will this work? Image data EP is not usually 2 [ 550.694450][ T5721] scsi host1: microtekX6 [ 550.747413][ T5960] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 550.881472][ T989] usb 6-1: USB disconnect, device number 7 [ 550.905993][ T4947] usb 6-1: error -19 submitting URB [ 550.921632][ T5960] usb 3-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 550.932225][ T5960] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.932271][ T5960] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 550.932293][ T5960] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 550.932333][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.966097][ T4947] usb 6-1: error -19 submitting URB [ 551.003873][ T5960] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 551.216790][ T2363] pvrusb2: Invalid write control endpoint [ 551.232725][ T5960] usb 3-1: USB disconnect, device number 36 [ 551.268067][ T2363] usb 3-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 551.268090][ T2363] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 551.303430][T20849] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7172'. [ 551.303457][T20849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7172'. [ 551.922310][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 551.922329][ T31] audit: type=1400 audit(1789569315.466:259): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=20891 comm="syz.1.7193" [ 552.003472][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7194'. [ 552.125819][ T989] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 552.135656][T20908] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 552.276374][ T989] usb 6-1: Using ep0 maxpacket: 16 [ 552.278308][ T989] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 552.279270][ T989] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 552.279294][ T989] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.279313][ T989] usb 6-1: config 0 has no interface number 0 [ 552.279353][ T989] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 552.279380][ T989] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 552.279407][ T989] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 552.279434][ T989] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 552.279455][ T989] usb 6-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 552.279478][ T989] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 552.279516][ T989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.282723][ T989] usb 6-1: config 0 descriptor?? [ 552.283311][T20865] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 552.346415][ T5721] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 552.407886][ T989] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 552.497593][ T5721] usb 1-1: Using ep0 maxpacket: 16 [ 552.498324][ T5721] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 552.504451][ T5721] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 552.526351][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.526442][ T5721] usb 1-1: Product: syz [ 552.526487][ T5721] usb 1-1: Manufacturer: syz [ 552.526528][ T5721] usb 1-1: SerialNumber: syz [ 552.582923][ T5721] r8152-cfgselector 1-1: Unknown version 0x0000 [ 552.582947][ T5721] r8152-cfgselector 1-1: config 0 descriptor?? [ 552.583755][ T5667] udevd[5667]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.663963][ T989] snd-usb-audio 6-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 552.679865][ T989] usb 6-1: USB disconnect, device number 8 [ 552.859376][T20937] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 553.018167][ T5721] r8152-cfgselector 1-1: USB disconnect, device number 42 [ 553.154305][T20957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7224'. [ 553.378231][T20971] netlink: 'syz.1.7231': attribute type 12 has an invalid length. [ 553.378254][T20971] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7231'. [ 554.942703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:72:0a:31:2c:d4, vlan:0) [ 556.619660][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 559.285723][ C1] sched: DL replenish lagged too much [ 563.287165][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.297540][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.537941][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 611.652693][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 626.036022][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.047150][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.459433][T19815] Bluetooth: hci4: command 0x0406 tx timeout [ 634.689872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:72:0a:31:2c:d4, vlan:0) [ 637.598203][ T2363] pvrusb2: request_firmware fatal error with code=-110 [ 637.598249][ T2363] pvrusb2: Failure uploading firmware1 [ 637.598258][ T2363] pvrusb2: Device initialization was not successful. [ 637.598266][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 637.598277][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 640.886793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:72:0a:31:2c:d4, vlan:0) [ 645.684584][ T5960] pvrusb2: Device being rendered inoperable [ 685.897122][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 688.722463][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.733854][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.069650][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.081867][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 780.758953][ T32] INFO: task kworker/1:6:6117 blocked for more than 144 seconds. [ 780.758987][ T32] Tainted: G L syzkaller #0 [ 780.759002][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 780.759013][ T32] task:kworker/1:6 state:D stack:20776 pid:6117 tgid:6117 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 780.759083][ T32] Workqueue: events_power_efficient reg_check_chans_work [ 780.759246][ T32] Call Trace: [ 780.759260][ T32] [ 780.759276][ T32] __schedule+0x17db/0x58f0 [ 780.759325][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 780.759384][ T32] ? __pfx___schedule+0x10/0x10 [ 780.759418][ T32] ? schedule+0x90/0x2b0 [ 780.759453][ T32] schedule+0x164/0x2b0 [ 780.759481][ T32] schedule_preempt_disabled+0x13/0x30 [ 780.759504][ T32] __mutex_lock+0x7c1/0x1550 [ 780.759537][ T32] ? __mutex_lock+0x5d4/0x1550 [ 780.759568][ T32] ? reg_check_chans_work+0x1a1/0x1110 [ 780.759595][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 780.759628][ T32] ? look_up_lock_class+0x57/0x110 [ 780.759656][ T32] ? register_lock_class+0x31/0x2e0 [ 780.759689][ T32] reg_check_chans_work+0x1a1/0x1110 [ 780.759732][ T32] ? __pfx_reg_check_chans_work+0x10/0x10 [ 780.759763][ T32] ? lock_acquire+0x115/0x350 [ 780.759797][ T32] ? rcu_is_watching+0x16/0xb0 [ 780.759840][ T32] ? process_scheduled_works+0x97a/0x1630 [ 780.759878][ T32] process_scheduled_works+0xc3d/0x1630 [ 780.759940][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 780.759975][ T32] ? assign_work+0x3cf/0x5d0 [ 780.760010][ T32] worker_thread+0xa47/0xfb0 [ 780.760057][ T32] ? __kthread_parkme+0x71/0x1f0 [ 780.760102][ T32] kthread+0x38b/0x480 [ 780.760126][ T32] ? __pfx_worker_thread+0x10/0x10 [ 780.760155][ T32] ? __pfx_kthread+0x10/0x10 [ 780.760180][ T32] ret_from_fork+0x514/0xb70 [ 780.760219][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 780.760243][ T32] ? __switch_to+0xc89/0x1420 [ 780.760307][ T32] ? __pfx_kthread+0x10/0x10 [ 780.760332][ T32] ret_from_fork_asm+0x1a/0x30 [ 780.760407][ T32] [ 780.760420][ T32] INFO: task kworker/u8:4:14844 blocked for more than 144 seconds. [ 780.760473][ T32] Tainted: G L syzkaller #0 [ 780.760486][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 780.760498][ T32] task:kworker/u8:4 state:D stack:25672 pid:14844 tgid:14844 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 780.760568][ T32] Workqueue: ipv6_addrconf addrconf_verify_work [ 780.760661][ T32] Call Trace: [ 780.760669][ T32] [ 780.760683][ T32] __schedule+0x17db/0x58f0 [ 780.760726][ T32] ? ret_from_fork+0x514/0xb70 [ 780.760759][ T32] ? __pfx___schedule+0x10/0x10 [ 780.760797][ T32] ? schedule+0x90/0x2b0 [ 780.760825][ T32] schedule+0x164/0x2b0 [ 780.760851][ T32] schedule_preempt_disabled+0x13/0x30 [ 780.760883][ T32] __mutex_lock+0x7c1/0x1550 [ 780.760916][ T32] ? __mutex_lock+0x5d4/0x1550 [ 780.760946][ T32] ? addrconf_verify_work+0x19/0x30 [ 780.760976][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 780.761020][ T32] ? rcu_is_watching+0x16/0xb0 [ 780.761049][ T32] ? process_scheduled_works+0x97a/0x1630 [ 780.761081][ T32] addrconf_verify_work+0x19/0x30 [ 780.761108][ T32] process_scheduled_works+0xc3d/0x1630 [ 780.761138][ T32] ? __lock_acquire+0x747/0x2de0 [ 780.761193][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 780.761232][ T32] ? assign_work+0x3cf/0x5d0 [ 780.761268][ T32] worker_thread+0xa47/0xfb0 [ 780.761328][ T32] kthread+0x38b/0x480 [ 780.761353][ T32] ? __pfx_worker_thread+0x10/0x10 [ 780.761382][ T32] ? __pfx_kthread+0x10/0x10 [ 780.761407][ T32] ret_from_fork+0x514/0xb70 [ 780.761441][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 780.761465][ T32] ? __switch_to+0xc89/0x1420 [ 780.761500][ T32] ? __pfx_kthread+0x10/0x10 [ 780.761525][ T32] ret_from_fork_asm+0x1a/0x30 [ 780.761578][ T32] [ 780.761620][ T32] [ 780.761620][ T32] Showing all locks held in the system: [ 780.761631][ T32] locks held by kthreadd/2: 2, last CPU#1: [ 780.761648][ T32] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 780.761717][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x22/0x2e0 [ 780.761777][ T32] locks held by kworker/0:0/9: 2, last CPU#0: [ 780.761794][ T32] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 780.761850][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 780.761919][ T32] locks held by kworker/0:1/10: 3, last CPU#0: [ 780.761935][ T32] #0: ffff888058b46d40 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.762005][ T32] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.762088][ T32] #2: ffff88807b190d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 780.762231][ T32] locks held by kworker/u8:0/12: 2, last CPU#1: [ 780.762249][ T32] #0: ffff888032272140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.762313][ T32] #1: ffffc90000117c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.762379][ T32] locks held by kworker/u8:1/13: 3, last CPU#1: [ 780.762395][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.762478][ T32] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.762542][ T32] #2: ffff888049c607a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 780.762665][ T32] locks held by kworker/R-mm_pe/14: 1, last CPU#0: [ 780.762687][ T32] #0: ffffffff8ebf9260 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 780.762760][ T32] locks held by kworker/1:0/25: 4, last CPU#1: [ 780.762776][ T32] #0: ffff88802b60a940 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.762846][ T32] #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.762930][ T32] #2: ffff888057541700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 780.762998][ T32] #3: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 780.763055][ T32] locks held by kworker/1:1/30: 3, on CPU#1: [ 780.763072][ T32] #0: ffff888057052d40 ((wq_completion)wg-kex-wg0#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.763141][ T32] #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.763223][ T32] #2: ffff888057543ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 780.763298][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 780.763315][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 780.763383][ T32] locks held by kworker/u8:2/38: 4, on CPU#0: [ 780.763400][ T32] #0: ffff888057175940 ((wq_completion)wg-kex-wg2#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.763477][ T32] #1: ffffc90000ae7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.763542][ T32] #2: ffff88807fa95440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 780.763613][ T32] #3: ffff888057540d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 780.763683][ T32] locks held by kworker/u8:5/61: 3, last CPU#1: [ 780.763699][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.763763][ T32] #1: ffffc9000202fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.763830][ T32] #2: ffff888030305258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 780.763975][ T32] locks held by kworker/1:3/989: 4, last CPU#1: [ 780.763993][ T32] #0: ffff8880585c6140 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.764063][ T32] #1: ffffc90005097c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.764144][ T32] #2: ffff88807b192ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 780.764214][ T32] #3: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 780.764269][ T32] locks held by kworker/u8:6/1011: 3, last CPU#1: [ 780.764286][ T32] #0: ffff888030b54940 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.764361][ T32] #1: ffffc90005207c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.764426][ T32] #2: ffff888057545e38 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 780.764531][ T32] locks held by kworker/u8:7/1111: 4, last CPU#1: [ 780.764549][ T32] #0: ffff888030b55140 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.764618][ T32] #1: ffffc900053a7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.764684][ T32] #2: ffff888028661440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 780.764754][ T32] #3: ffff888076c88d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 780.764824][ T32] locks held by kworker/u8:8/1283: 2, last CPU#1: [ 780.764841][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.764906][ T32] #1: ffffc90005ab7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.764972][ T32] locks held by kworker/u8:9/1339: 4, last CPU#1: [ 780.764989][ T32] #0: ffff888079731940 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.765058][ T32] #1: ffffc90005d57c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.765123][ T32] #2: ffff888031455440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 780.765193][ T32] #3: ffff888057544888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 780.765263][ T32] locks held by kworker/u8:10/1353: 4, last CPU#1: [ 780.765280][ T32] #0: ffff888057170940 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.765350][ T32] #1: ffffc90005e97c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.765415][ T32] #2: ffff888034cc9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 780.765491][ T32] #3: ffff8880575420e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 780.765572][ T32] locks held by udevd/4984: 3, last CPU#1: [ 780.779510][ T32] #0: ffffffff8f4f1938 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 780.779668][ T32] #1: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 780.779726][ T32] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 780.779788][ T32] locks held by dhcpcd/5278: 2, last CPU#1: [ 780.779806][ T32] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 780.779861][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 780.779921][ T32] locks held by dhcpcd/5279: 4, last CPU#1: [ 780.779938][ T32] #0: ffffffff8ee363b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 780.780000][ T32] #1: ffff88807aea69b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 780.780066][ T32] #2: ffff888053ed1d38 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 780.780144][ T32] #3: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 780.780200][ T32] locks held by crond/5356: 3, last CPU#1: [ 780.780217][ T32] #0: ffffffff8f4f1938 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 780.780274][ T32] #1: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 780.780328][ T32] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x22/0x2e0 [ 780.780385][ T32] locks held by getty/5373: 2, on CPU#1: [ 780.780401][ T32] #0: ffff8880359750a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 780.780478][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 780.780539][ T32] locks held by syz-executor/5604: 2, last CPU#1: [ 780.780556][ T32] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 780.780610][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 780.780670][ T32] locks held by syz-executor/5665: 4, last CPU#1: [ 780.780687][ T32] #0: ffff888079884460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 780.780765][ T32] #1: ffff8880316338d0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 780.780839][ T32] #2: ffffffff8f4f1938 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 780.780896][ T32] #3: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 780.780951][ T32] locks held by syz-executor/5670: 3, last CPU#1: [ 780.780969][ T32] #0: ffff888031f7ace0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x55/0x400 [ 780.781096][ T32] #1: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 780.781151][ T32] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 780.781214][ T32] locks held by kworker/0:3/5707: 2, last CPU#0: [ 780.781231][ T32] #0: ffff88807a10b540 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.781301][ T32] #1: ffffc9000462fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.781382][ T32] locks held by kworker/0:4/5708: 4, on CPU#0: [ 780.781399][ T32] #0: ffff8880585c6140 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.781478][ T32] #1: ffffc9000463fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.781557][ T32] #2: ffff888028bf9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 780.781628][ T32] #3: ffff88807b192ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 780.781699][ T32] locks held by kworker/0:5/5721: 3, last CPU#0: [ 780.781716][ T32] #0: ffff88802b60a940 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.781785][ T32] #1: ffffc9000470fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.781865][ T32] #2: ffff888057540d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 780.781936][ T32] locks held by kworker/0:7/5741: 3, last CPU#0: [ 780.781953][ T32] #0: ffff888058b5a540 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.782022][ T32] #1: ffffc90004c5fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.782102][ T32] #2: ffff888028665440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 780.782172][ T32] locks held by kworker/1:4/5742: 4, last CPU#1: [ 780.782188][ T32] #0: ffff88805854e140 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.782257][ T32] #1: ffffc90004c6fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.782339][ T32] #2: ffff888025d35440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 780.782408][ T32] #3: ffff88807b191700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 780.782487][ T32] locks held by kworker/0:8/5812: 6, last CPU#0: [ 780.782504][ T32] #0: ffff88807e7f3d40 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.782572][ T32] #1: ffffc90004c8fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.782652][ T32] #2: ffff888031455440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 780.782722][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 780.782833][ T32] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0xa2/0x3f0 [ 780.782931][ T32] #5: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0xa2/0x3f0 [ 780.782992][ T32] locks held by kworker/1:5/5960: 3, last CPU#1: [ 780.783009][ T32] #0: ffff888020684d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.783072][ T32] #1: ffffc90004e9fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.783135][ T32] #2: ffff888029afe1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 780.783195][ T32] locks held by kworker/1:6/6117: 4, on CPU#1: [ 780.783212][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.783275][ T32] #1: ffffc90006d87c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.783338][ T32] #2: ffffffff90253240 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 780.783395][ T32] #3: ffff888049c607a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x1a1/0x1110 [ 780.783463][ T32] locks held by kworker/1:7/6811: 4, last CPU#1: [ 780.783480][ T32] #0: ffff888058b46d40 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.783548][ T32] #1: ffffc900038bfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.783631][ T32] #2: ffff888032215440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 780.783700][ T32] #3: ffff888076c8a0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 780.783770][ T32] locks held by kworker/u8:3/14843: 3, last CPU#1: [ 780.783788][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.783851][ T32] #1: ffffc90003d07c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.783914][ T32] #2: ffff888049c307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 780.783981][ T32] locks held by kworker/u8:4/14844: 3, on CPU#1: [ 780.783998][ T32] #0: ffff888031c8e940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.784061][ T32] #1: ffffc90003cf7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.784125][ T32] #2: ffffffff90253240 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 780.784186][ T32] locks held by kworker/u8:11/14847: 4, last CPU#1: [ 780.784203][ T32] #0: ffff88807e55b140 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.784272][ T32] #1: ffffc90003cd7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.784335][ T32] #2: ffff888025d35440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 780.784405][ T32] #3: ffff88807b1920e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 780.784481][ T32] locks held by kworker/u8:12/14849: 4, last CPU#1: [ 780.784498][ T32] #0: ffff888079730940 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.784567][ T32] #1: ffffc90003cc7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.784631][ T32] #2: ffff888031451440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 780.784701][ T32] #3: ffff88807b193ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 780.784770][ T32] locks held by syz-executor/18597: 3, last CPU#1: [ 780.784787][ T32] #0: ffff888031f7a2e0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x55/0x400 [ 780.784850][ T32] #1: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 780.784905][ T32] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 780.784967][ T32] locks held by syz-executor/20989: 1, last CPU#1: [ 780.784985][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0 [ 780.785042][ T32] locks held by syz-executor/20994: 2, last CPU#1: [ 780.785059][ T32] #0: ffff88802b3bce48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 780.785126][ T32] #1: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 780.785182][ T32] locks held by kworker/u8:13/20998: 4, last CPU#1: [ 780.785199][ T32] #0: ffff888057173140 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.785268][ T32] #1: ffffc90007aafc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.785333][ T32] #2: ffff888034ccd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 780.785403][ T32] #3: ffff8880575434b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 780.785479][ T32] locks held by kworker/u8:14/21001: 3, last CPU#1: [ 780.785496][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 780.785559][ T32] #1: ffffc90007a7fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 784.540607][ T32] #2: ffff888028bfd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 784.540681][ T32] locks held by kworker/0:2/21002: 4, last CPU#0: [ 784.540699][ T32] #0: ffff888057052d40 ((wq_completion)wg-kex-wg0#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 784.540776][ T32] #1: ffffc90007abfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 784.540866][ T32] #2: ffff888034ccd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 784.540932][ T32] #3: ffff888057543ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 784.541000][ T32] locks held by kworker/1:2/21004: 3, on CPU#1: [ 784.541016][ T32] #0: ffff88807a0e8540 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 784.541082][ T32] #1: ffffc900043bfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 784.541162][ T32] #2: ffff888076c88330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 784.541229][ T32] locks held by kworker/0:6/21006: 7, last CPU#0: [ 784.541245][ T32] #0: ffff88807a0e8540 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 784.541311][ T32] #1: ffffc900043ffc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 784.541388][ T32] #2: ffff888076c88330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 784.541453][ T32] #3: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 784.541506][ T32] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 784.541575][ T32] #5: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb+0x102/0xbf0 [ 784.541710][ T32] #6: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: ip6_pol_route+0x163/0x14d0 [ 784.541797][ T32] locks held by kworker/1:8/21007: 2, last CPU#1: [ 784.541814][ T32] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 784.541866][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 784.541927][ T32] [ 784.541934][ T32] ============================================= [ 784.541934][ T32] [ 784.541944][ T32] NMI backtrace for cpu 1 [ 784.541970][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 784.542009][ T32] Tainted: [L]=SOFTLOCKUP [ 784.542017][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 784.542030][ T32] Call Trace: [ 784.542040][ T32] [ 784.542050][ T32] dump_stack_lvl+0xe8/0x150 [ 784.542084][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 784.542181][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 784.542218][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 784.542253][ T32] sys_info+0x135/0x170 [ 784.542282][ T32] watchdog+0xfd7/0x1030 [ 784.542313][ T32] ? watchdog+0x1c7/0x1030 [ 784.542342][ T32] kthread+0x38b/0x480 [ 784.542364][ T32] ? __pfx_watchdog+0x10/0x10 [ 784.542383][ T32] ? __pfx_kthread+0x10/0x10 [ 784.542406][ T32] ret_from_fork+0x514/0xb70 [ 784.542430][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 784.542451][ T32] ? __switch_to+0xc89/0x1420 [ 784.542484][ T32] ? __pfx_kthread+0x10/0x10 [ 784.542507][ T32] ret_from_fork_asm+0x1a/0x30 [ 784.542556][ T32] [ 784.554647][ T32] Sending NMI from CPU 1 to CPUs 0: [ 784.554692][ C0] NMI backtrace for cpu 0 [ 784.554710][ C0] CPU: 0 UID: 0 PID: 5708 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.554736][ C0] Tainted: [L]=SOFTLOCKUP [ 784.554744][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 784.554757][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 784.554786][ C0] RIP: 0010:lock_release+0x2e2/0x3c0 [ 784.554808][ C0] Code: f1 11 00 00 00 00 eb b5 e8 bb f2 41 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 13 8e f1 11 48 3b 44 24 28 75 48 fb 48 83 c4 30 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 78 19 da 0e [ 784.554825][ C0] RSP: 0018:ffffc90000006e28 EFLAGS: 00000082 [ 784.554842][ C0] RAX: ada71cac80b8c400 RBX: 0000000000000282 RCX: 8000000000000102 [ 784.554856][ C0] RDX: 0000000000000001 RSI: ffffffff8e69c060 RDI: ffffffff8c6da080 [ 784.554870][ C0] RBP: ffff88801e36ea38 R08: 0000000000000003 R09: 0000000000000004 [ 784.554884][ C0] R10: dffffc0000000000 R11: fffff52000000dbc R12: 0000000000000005 [ 784.554897][ C0] R13: 0000000000000005 R14: ffffffff9ac6d6e0 R15: ffff88801e36ddc0 [ 784.554911][ C0] FS: 0000000000000000(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 784.554927][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 784.554940][ C0] CR2: 00007f19b8b5d008 CR3: 0000000020fe8000 CR4: 00000000003526f0 [ 784.554958][ C0] Call Trace: [ 784.554965][ C0] [ 784.554975][ C0] _raw_spin_unlock_irqrestore+0x1b/0x80 [ 784.555039][ C0] debug_check_no_obj_freed+0x39e/0x450 [ 784.555074][ C0] ? skb_release_head_state+0x274/0x370 [ 784.555130][ C0] kmem_cache_free+0xfd/0x650 [ 784.555158][ C0] ? __skb_ext_put+0x221/0x2f0 [ 784.555205][ C0] skb_release_head_state+0x274/0x370 [ 784.555232][ C0] __kfree_skb+0x24/0x210 [ 784.555255][ C0] ip6_mc_input+0x878/0xc80 [ 784.555308][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 784.555337][ C0] ? ip6_rcv_finish+0x265/0x280 [ 784.555361][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 784.555384][ C0] ip_sabotage_in+0x1e1/0x270 [ 784.555434][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 784.555462][ C0] nf_hook_slow+0xc5/0x220 [ 784.555516][ C0] NF_HOOK+0x21f/0x3c0 [ 784.555541][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 784.555565][ C0] ? NF_HOOK+0x9e/0x3c0 [ 784.555591][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 784.555618][ C0] ? ip6_rcv_core+0xa1/0x1870 [ 784.555648][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 784.555679][ C0] ? netif_receive_skb+0x102/0xbf0 [ 784.555702][ C0] netif_receive_skb+0x278/0xbf0 [ 784.555723][ C0] ? lock_acquire+0x115/0x350 [ 784.555748][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 784.555773][ C0] ? br_netif_receive_skb+0x126/0x190 [ 784.555808][ C0] NF_HOOK+0xa4/0x3a0 [ 784.555839][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 784.555872][ C0] ? NF_HOOK+0xfa/0x3a0 [ 784.555904][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 784.555937][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 784.555975][ C0] ? br_pass_frame_up+0x275/0x420 [ 784.556010][ C0] br_handle_frame_finish+0x1136/0x1950 [ 784.556052][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 784.556086][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 784.556153][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 784.556177][ C0] ? nf_hook_slow+0x176/0x220 [ 784.556203][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 784.556237][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 784.556269][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 784.556361][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 784.556396][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 784.556430][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 784.556466][ C0] ? lock_acquire+0x115/0x350 [ 784.556492][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 784.556529][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 784.556568][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 784.556604][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 784.556639][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 784.556678][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 784.556714][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 784.556752][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 784.556784][ C0] br_handle_frame+0x1329/0x1600 [ 784.556826][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 784.556860][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 784.556893][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 784.556916][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 784.556946][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 784.556979][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 784.557016][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 784.557040][ C0] ? ip6_rcv_finish+0x265/0x280 [ 784.557070][ C0] ? NF_HOOK+0x336/0x3c0 [ 784.557111][ C0] ? lock_acquire+0x115/0x350 [ 784.557140][ C0] ? process_backlog+0x3de/0x18b0 [ 784.557165][ C0] ? process_backlog+0x3de/0x18b0 [ 784.557193][ C0] process_backlog+0x727/0x18b0 [ 784.557222][ C0] ? process_backlog+0x3de/0x18b0 [ 784.557256][ C0] __napi_poll+0xaa/0x330 [ 784.557282][ C0] net_rx_action+0x61d/0xf50 [ 784.557315][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 784.557340][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 784.557370][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 784.557393][ C0] ? try_to_wake_up+0x8c5/0x14d0 [ 784.557428][ C0] handle_softirqs+0x226/0x860 [ 784.557461][ C0] ? do_softirq+0x77/0xd0 [ 784.557493][ C0] ? wg_packet_handshake_receive_worker+0x2e6/0x10c0 [ 784.557524][ C0] do_softirq+0x77/0xd0 [ 784.557552][ C0] [ 784.557561][ C0] [ 784.557570][ C0] __local_bh_enable_ip+0x100/0x140 [ 784.557601][ C0] wg_packet_handshake_receive_worker+0x2e6/0x10c0 [ 784.557630][ C0] ? look_up_lock_class+0x57/0x110 [ 784.557662][ C0] ? wg_packet_handshake_receive_worker+0x72f/0x10c0 [ 784.557691][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 784.557725][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 784.557763][ C0] ? lock_acquire+0x115/0x350 [ 784.557791][ C0] ? rcu_is_watching+0x16/0xb0 [ 784.557821][ C0] ? process_scheduled_works+0x97a/0x1630 [ 784.557852][ C0] process_scheduled_works+0xc3d/0x1630 [ 784.557902][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 784.557937][ C0] ? assign_work+0x3cf/0x5d0 [ 784.557970][ C0] worker_thread+0xa47/0xfb0 [ 784.558018][ C0] kthread+0x38b/0x480 [ 784.558039][ C0] ? __pfx_worker_thread+0x10/0x10 [ 784.558071][ C0] ? __pfx_kthread+0x10/0x10 [ 784.558101][ C0] ret_from_fork+0x514/0xb70 [ 784.558125][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 784.558147][ C0] ? __switch_to+0xc89/0x1420 [ 784.558181][ C0] ? __pfx_kthread+0x10/0x10 [ 784.558204][ C0] ret_from_fork_asm+0x1a/0x30 [ 784.558249][ C0] [ 785.798335][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 788.873652][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 788.884367][ T32] Tainted: [L]=SOFTLOCKUP [ 788.888717][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 788.898804][ T32] Call Trace: [ 788.902115][ T32] [ 788.905103][ T32] vpanic+0x56d/0xa60 [ 788.909145][ T32] ? __pfx___schedule+0x10/0x10 [ 788.914042][ T32] ? __pfx_vpanic+0x10/0x10 [ 788.918601][ T32] panic+0xc5/0xd0 [ 788.922378][ T32] ? __pfx_panic+0x10/0x10 [ 788.926843][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 788.932344][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 788.937761][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 788.943964][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 788.950172][ T32] watchdog+0x1030/0x1030 [ 788.954552][ T32] ? watchdog+0x1c7/0x1030 [ 788.959009][ T32] kthread+0x38b/0x480 [ 788.963162][ T32] ? __pfx_watchdog+0x10/0x10 [ 788.967875][ T32] ? __pfx_kthread+0x10/0x10 [ 788.972510][ T32] ret_from_fork+0x514/0xb70 [ 788.977147][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 788.982298][ T32] ? __switch_to+0xc89/0x1420 [ 788.987020][ T32] ? __pfx_kthread+0x10/0x10 [ 788.991655][ T32] ret_from_fork_asm+0x1a/0x30 [ 788.996488][ T32] [ 789.000135][ T32] Kernel Offset: disabled [ 789.004488][ T32] Rebooting in 86400 seconds..