last executing test programs: 6.252670856s ago: executing program 1 (id=15378): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000480)={0x0, 0x6}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.839031395s ago: executing program 4 (id=15398): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0xf500000000000000, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf031c1896ac0826786ffcfb99e55c1272594d5be5c7f1de9562bbff01", 0x1f}], 0x1}, 0x40) 3.619687722s ago: executing program 4 (id=15401): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 3.403896053s ago: executing program 4 (id=15403): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e97", 0xffc8}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) 3.137281992s ago: executing program 4 (id=15404): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) getuid() 2.967026972s ago: executing program 1 (id=15405): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00075f12f5f5000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 2.760751941s ago: executing program 1 (id=15406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x1, 0x3, 0x2, 0x0, [{0xf, 0x0, 0x0, '\x00', 0xe}, {0x5, 0x0, 0x0, '\x00', 0xfc}, {0x1, 0x1, 0x7, '\x00', 0x3}, {0xfa, 0x8, 0x1, '\x00', 0xa0}, {0x1, 0x9}, {0xa, 0x3, 0x5}, {0xb8, 0xda, 0xd, '\x00', 0x59}, {0xb, 0x1, 0xc, '\x00', 0x3}, {0x9, 0x7, 0x81, '\x00', 0x9}, {0x4, 0x6, 0x4, '\x00', 0x9}, {0x7, 0x5, 0xd, '\x00', 0xa}, {0x0, 0x4b, 0x45, '\x00', 0xc2}, {0x8, 0xab, 0x8, '\x00', 0x3}, {0x1, 0x3, 0xfe, '\x00', 0x81}, {0x5, 0xfb, 0x1, '\x00', 0x2}, {0xfe, 0x4, 0x6, '\x00', 0x9}, {0xc2, 0x9, 0x7, '\x00', 0x4}, {0x4, 0x7, 0x4, '\x00', 0x9}, {0xab, 0xef, 0x40, '\x00', 0x6}, {0x8, 0x10, 0x80, '\x00', 0x10}, {0x3, 0x3, 0x2, '\x00', 0x86}, {0x9, 0xb, 0xa, '\x00', 0x8}, {0x86, 0x0, 0x5, '\x00', 0x9}, {0x56, 0x3, 0x4, '\x00', 0x7f}]}}) 2.36540212s ago: executing program 1 (id=15407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x3]}]}, 0x70}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x5]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 2.17173527s ago: executing program 1 (id=15409): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) 2.023129355s ago: executing program 1 (id=15412): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000005c0)={0x20, 0xf, 0x3, "4fcad7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.429992204s ago: executing program 0 (id=15415): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='L', 0x1, 0x1c}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000180)={0x28, 0x245f6e86cba75af9, r1, r1, 0x6, 0x9}) 1.428639873s ago: executing program 2 (id=15416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) 1.203385667s ago: executing program 0 (id=15418): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x22, [0x0, 0x0, 0x0, 0x10001, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff9, 0x1, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7], [0xfffffffd, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x400003, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x5, 0x800, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x0, 0xdfffffff, 0x55f8, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x7, 0x2, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x4, 0xffc, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x800000, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 1.112079059s ago: executing program 2 (id=15420): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x1, 0xd, 0x4, 0xffffffffffffffc0, 0x80000000, 0x7ff, 0x90b8, 0x9, 0x26], 0x0, 0x2}) 890.943757ms ago: executing program 2 (id=15422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r0) 806.902139ms ago: executing program 4 (id=15424): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 749.867426ms ago: executing program 0 (id=15425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x293}]}) 722.251005ms ago: executing program 3 (id=15426): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x42}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) syz_open_dev$hiddev(0x0, 0xc429, 0x90140) sendfile(r0, r0, 0x0, 0x800000a1e) 689.310812ms ago: executing program 2 (id=15427): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x7fffffffffffffff}}, 0x18) splice(r1, 0x0, r0, 0x0, 0x18, 0x9) 582.989077ms ago: executing program 3 (id=15428): r0 = socket(0x2, 0x80805, 0x0) listen(r0, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 526.76196ms ago: executing program 2 (id=15429): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x22020600) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x5, 0xeeea9000, 0x4, r0, 0xe}) 415.546236ms ago: executing program 3 (id=15430): r0 = memfd_create(&(0x7f0000000700)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x003\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0', 0x2) r1 = syz_io_uring_setup(0x133d, &(0x7f0000000340)={0x0, 0x7af1, 0x80, 0x4, 0x3da}, &(0x7f0000000200), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f00000016c0)={0x2, 0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001240)=""/48, 0x30}, {0x0}], &(0x7f0000001680)=[0x3, 0x8]}, 0x20) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0], 0x1) 379.464213ms ago: executing program 0 (id=15431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 307.978814ms ago: executing program 3 (id=15432): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25022000cb", @ANYRES32=r2, @ANYBLOB="08000400640101020800080082010000080002007f"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 304.939484ms ago: executing program 2 (id=15433): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x80082102, &(0x7f0000000100)={r1, 0x0, r0, 0x0, 0x80000}) 189.30611ms ago: executing program 4 (id=15434): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setuid(0xee01) 184.807613ms ago: executing program 0 (id=15435): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = epoll_create(0xd751) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0x9}) ppoll(&(0x7f0000000300)=[{r1, 0x2}, {r0, 0x800e}], 0x2, 0x0, 0x0, 0x0) 141.017726ms ago: executing program 3 (id=15436): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x5c0a, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000580)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f00000005c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "1400"}, 0x10}, 0x1, 0x0, 0x0, 0x20040884}, 0x1) 25.870844ms ago: executing program 0 (id=15437): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10103f, 0x140) fcntl$setlease(r0, 0x400, 0x1) 0s ago: executing program 3 (id=15438): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000001c0)=0x80000001, 0x4) kernel console output (not intermixed with test programs): B device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.670626][T14325] usb 3-1: config 0 descriptor?? [ 971.699654][T32474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.867341][T32474] veth0_vlan: entered promiscuous mode [ 971.955243][T32474] veth1_vlan: entered promiscuous mode [ 972.109610][T32474] veth0_macvtap: entered promiscuous mode [ 972.142558][T14325] microsoft 0003:045E:07DA.0038: ignoring exceeding usage max [ 972.170574][T32474] veth1_macvtap: entered promiscuous mode [ 972.187467][T14325] microsoft 0003:045E:07DA.0038: ignoring exceeding usage max [ 972.261964][T32474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.361278][T32474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 972.385081][T14325] microsoft 0003:045E:07DA.0038: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 972.427931][T19793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.450888][T14325] microsoft 0003:045E:07DA.0038: no inputs found [ 972.480460][T19793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.495098][T14325] microsoft 0003:045E:07DA.0038: could not initialize ff, continuing anyway [ 972.544590][T19793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.564090][T14325] usb 3-1: USB disconnect, device number 76 [ 972.582831][T19793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.683453][ T372] fido_id[372]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 972.925996][ T387] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 973.050665][T19793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.087036][T19793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.199623][T32506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.227167][T32506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.154558][ T428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12826'. [ 975.425773][ T477] netlink: 'syz.0.12841': attribute type 1 has an invalid length. [ 975.462244][ T477] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12841'. [ 975.941838][ T499] bridge0: Device is already in use. [ 976.108148][ T386] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 976.280825][ T386] usb 3-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 976.318089][ T386] usb 3-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 976.349637][ T386] usb 3-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 976.400654][ T386] usb 3-1: config 0 interface 0 has no altsetting 0 [ 976.422980][ T386] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 976.468374][ T386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.499130][ T386] usb 3-1: config 0 descriptor?? [ 976.518977][ T495] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 976.989395][ T386] hid_parser_main: 5 callbacks suppressed [ 976.989420][ T386] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 977.034320][ T386] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 977.055110][ T386] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 977.078394][ T386] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 977.098451][ T29] audit: type=1326 audit(1778084800.679:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=532 comm="syz.3.12867" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e78f9cdd9 code=0x7ffc0000 [ 977.108123][ T386] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 977.168345][ T386] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 977.198068][ T386] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 977.218226][ T386] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 977.221839][ T29] audit: type=1326 audit(1778084800.679:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=532 comm="syz.3.12867" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e78f9cdd9 code=0x7ffc0000 [ 977.238075][ T386] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 977.300632][ T386] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 977.330279][ T29] audit: type=1326 audit(1778084800.719:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=532 comm="syz.3.12867" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f4e78f9cdd9 code=0x7ffc0000 [ 977.359113][ T386] petalynx 0003:18B1:0037.0039: hidraw0: USB HID v0.01 Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0 [ 977.396980][ T29] audit: type=1326 audit(1778084800.719:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=532 comm="syz.3.12867" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e78f9cdd9 code=0x7ffc0000 [ 977.422133][ T386] usb 3-1: USB disconnect, device number 77 [ 977.480710][ T541] pim6reg: entered allmulticast mode [ 977.531102][ T29] audit: type=1326 audit(1778084800.719:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=532 comm="syz.3.12867" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e78f9cdd9 code=0x7ffc0000 [ 977.556258][ T541] pim6reg: left allmulticast mode [ 977.576528][ T540] fido_id[540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 977.626460][ T29] audit: type=1326 audit(1778084800.719:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=532 comm="syz.3.12867" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f4e78f9cdd9 code=0x7ffc0000 [ 977.715019][ T29] audit: type=1326 audit(1778084800.719:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=532 comm="syz.3.12867" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e78f9cdd9 code=0x7ffc0000 [ 978.384048][ T575] netlink: 'syz.2.12887': attribute type 16 has an invalid length. [ 978.981484][ T597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12897'. [ 979.268173][T14324] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 979.448188][T14324] usb 4-1: Using ep0 maxpacket: 16 [ 979.457021][T14324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.470356][T14324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.481713][T14324] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 979.491081][T14324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.503310][T14324] usb 4-1: config 0 descriptor?? [ 979.598857][T14325] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 979.788133][T14325] usb 3-1: Using ep0 maxpacket: 32 [ 979.797743][T14325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 979.818051][T14325] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 979.846262][T14325] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 979.872819][T14325] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 979.896721][T14325] usb 3-1: Product: syz [ 979.902723][T14325] usb 3-1: Manufacturer: syz [ 979.907628][T14325] usb 3-1: SerialNumber: syz [ 979.918769][T14325] usb 3-1: config 0 descriptor?? [ 979.935634][T14324] bigben 0003:146B:0902.003A: unexpected rdesc, please submit for review [ 979.947470][ T613] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 980.002323][T14324] bigben 0003:146B:0902.003A: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 980.036680][T14324] bigben 0003:146B:0902.003A: missing HID_OUTPUT_REPORT 0 [ 980.067796][T14324] bigben 0003:146B:0902.003A: no output report found [ 980.159387][T14324] usb 4-1: USB disconnect, device number 54 [ 980.199425][T12519] usb 3-1: USB disconnect, device number 78 [ 980.549158][T12519] IPVS: starting estimator thread 0... [ 980.648143][ T631] IPVS: using max 29 ests per chain, 69600 per kthread [ 981.179617][ T652] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 981.480241][ T656] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12923'. [ 982.312264][ T672] tipc: Started in network mode [ 982.338416][ T672] tipc: Node identity ac14140f, cluster identity 4711 [ 982.359001][ T672] tipc: New replicast peer: 255.255.255.255 [ 982.381365][ T672] tipc: Enabled bearer , priority 10 [ 982.409145][ T675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12931'. [ 982.438325][ T675] tipc: Disabling bearer [ 982.507689][ T677] netlink: 27 bytes leftover after parsing attributes in process `syz.4.12933'. [ 982.999354][ T689] netlink: 'syz.4.12939': attribute type 11 has an invalid length. [ 983.024580][ T689] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12939'. [ 985.354871][ T739] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12960'. [ 985.508649][ T746] xt_hashlimit: size too large, truncated to 1048576 [ 985.595454][ T749] bridge_slave_0 (unregistering): left allmulticast mode [ 985.643354][ T749] bridge_slave_0 (unregistering): left promiscuous mode [ 985.682365][ T749] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.143196][ T797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12985'. [ 988.328131][T12519] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 988.503962][T12519] usb 3-1: unable to get BOS descriptor or descriptor too short [ 988.514590][T12519] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 988.529740][T12519] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 988.540135][T12519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.549630][T12519] usb 3-1: Product: syz [ 988.554213][T12519] usb 3-1: Manufacturer: syz [ 988.559794][T12519] usb 3-1: SerialNumber: syz [ 988.958872][T12519] usb 3-1: reset high-speed USB device number 79 using dummy_hcd [ 988.997932][ T835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13002'. [ 989.073895][ T835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13002'. [ 989.670239][T12519] usb 3-1: device descriptor read/64, error -71 [ 989.972741][T12519] usb 3-1: reset high-speed USB device number 79 using dummy_hcd [ 990.154427][T12519] usb 3-1: unable to get BOS descriptor or descriptor too short [ 990.193171][T12519] usb 3-1: device firmware changed [ 990.214389][T12519] usb 3-1: USB disconnect, device number 79 [ 991.903727][ T29] audit: type=1326 audit(1778084815.489:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=905 comm="syz.4.13034" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 991.982148][ T29] audit: type=1326 audit(1778084815.489:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=905 comm="syz.4.13034" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 992.065519][ T29] audit: type=1326 audit(1778084815.529:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=905 comm="syz.4.13034" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 992.145397][ T29] audit: type=1326 audit(1778084815.529:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=905 comm="syz.4.13034" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 992.204122][ T913] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13037'. [ 992.218246][ T29] audit: type=1326 audit(1778084815.529:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=905 comm="syz.4.13034" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 992.234438][ T913] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13037'. [ 992.281357][ T913] netlink: 39 bytes leftover after parsing attributes in process `syz.4.13037'. [ 992.307833][ T29] audit: type=1326 audit(1778084815.539:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=905 comm="syz.4.13034" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 992.418103][ T29] audit: type=1326 audit(1778084815.539:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=905 comm="syz.4.13034" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 992.505782][ T29] audit: type=1326 audit(1778084815.539:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=905 comm="syz.4.13034" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 992.618871][ T29] audit: type=1326 audit(1778084815.539:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=905 comm="syz.4.13034" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 992.692874][ T29] audit: type=1326 audit(1778084815.539:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=905 comm="syz.4.13034" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 993.002109][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.008542][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.778181][T14325] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 993.818207][T12519] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 993.919581][ T975] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13060'. [ 993.962358][T14325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 993.981000][T14325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.007051][T12519] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 994.023160][T14325] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 994.033310][T12519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.041980][T14325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.050704][T12519] usb 3-1: Product: syz [ 994.055013][T12519] usb 3-1: Manufacturer: syz [ 994.065101][T12519] usb 3-1: SerialNumber: syz [ 994.072377][T14325] usb 4-1: config 0 descriptor?? [ 994.091050][T12519] usb 3-1: config 0 descriptor?? [ 994.525387][T14325] hid_parser_main: 33 callbacks suppressed [ 994.525411][T14325] elan 0003:04F3:0755.003B: unknown main item tag 0x0 [ 994.565954][T14325] elan 0003:04F3:0755.003B: unknown main item tag 0x0 [ 994.581580][T14325] elan 0003:04F3:0755.003B: unknown main item tag 0x0 [ 994.598078][T14325] elan 0003:04F3:0755.003B: unknown main item tag 0x0 [ 994.605197][T14325] elan 0003:04F3:0755.003B: unknown main item tag 0x0 [ 994.614775][T14325] elan 0003:04F3:0755.003B: failed to start in urb: -90 [ 994.640961][T14325] elan 0003:04F3:0755.003B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 994.749709][T14325] usb 4-1: USB disconnect, device number 55 [ 994.784969][ T983] fido_id[983]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 994.911812][ T986] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13065'. [ 994.926101][T12519] usb 3-1: Firmware version (0.0) predates our first public release. [ 994.948079][T12519] usb 3-1: Please update to version 0.2 or newer [ 995.037186][T12519] usb 3-1: USB disconnect, device number 80 [ 995.823115][ T1003] macvtap1: entered allmulticast mode [ 995.838936][ T1003] dummy0: entered allmulticast mode [ 995.874090][ T1003] dummy0: left allmulticast mode [ 995.947152][ T1005] team_slave_0: Caught tx_queue_len zero misconfig [ 995.957604][ T1005] netlink: 'syz.3.13073': attribute type 4 has an invalid length. [ 996.434400][ T1018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13078'. [ 996.957380][ T1033] netlink: 'syz.2.13084': attribute type 1 has an invalid length. [ 996.977607][ T1033] netlink: 'syz.2.13084': attribute type 2 has an invalid length. [ 997.005726][ T1033] netlink: 'syz.2.13084': attribute type 1 has an invalid length. [ 997.025551][ T1033] netlink: 'syz.2.13084': attribute type 2 has an invalid length. [ 997.379343][ T1046] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 997.408606][T12519] team_slave_0: entered promiscuous mode [ 997.416403][T12519] team_slave_1: entered promiscuous mode [ 997.678515][ T5721] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 997.818360][ T1070] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13098'. [ 997.863843][ T5721] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 997.895403][ T5721] usb 3-1: config 0 has no interface number 0 [ 997.918897][ T5721] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 997.962229][ T5721] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 998.001501][ T5721] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 998.031342][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.065466][ T5721] usb 3-1: config 0 descriptor?? [ 998.083018][ T1053] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 998.146472][ T5721] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 998.344835][ T5721] usb 3-1: USB disconnect, device number 81 [ 998.351439][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1000.916918][ T1139] syz.0.13127 (1139): drop_caches: 2 [ 1001.151170][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1001.151188][ T29] audit: type=1326 audit(1778084824.729:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1165 comm="syz.4.13140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 1001.263933][ T1168] sch_tbf: burst 20736 is lower than device lo mtu (65550) ! [ 1001.275496][ T29] audit: type=1326 audit(1778084824.739:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1165 comm="syz.4.13140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 1001.337220][ T29] audit: type=1326 audit(1778084824.749:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1165 comm="syz.4.13140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 1001.385544][ T29] audit: type=1326 audit(1778084824.749:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1165 comm="syz.4.13140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 1001.505658][ T29] audit: type=1326 audit(1778084824.749:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1165 comm="syz.4.13140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 1001.598425][ T29] audit: type=1326 audit(1778084824.749:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1165 comm="syz.4.13140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 1001.686677][ T29] audit: type=1326 audit(1778084824.749:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1165 comm="syz.4.13140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 1001.765026][ T29] audit: type=1326 audit(1778084824.749:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1165 comm="syz.4.13140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 1001.856094][ T29] audit: type=1326 audit(1778084824.749:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1165 comm="syz.4.13140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 1002.224754][ T1202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13155'. [ 1002.740687][ T1213] bond0: entered allmulticast mode [ 1002.757406][ T1213] bond_slave_0: entered allmulticast mode [ 1002.788273][ T1213] bond_slave_1: entered allmulticast mode [ 1002.808133][ T1213] veth0_to_bond: entered allmulticast mode [ 1002.834450][ T1213] syz_tun: entered allmulticast mode [ 1006.257525][ T1336] kvm_intel: kvm [1335]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2 [ 1006.318178][T23532] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1006.478208][T23532] usb 4-1: Using ep0 maxpacket: 16 [ 1006.498169][T23532] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1006.519935][T23532] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.548055][T23532] usb 4-1: Product: syz [ 1006.558208][T23532] usb 4-1: Manufacturer: syz [ 1006.573299][T23532] usb 4-1: SerialNumber: syz [ 1007.000198][T14325] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1007.179078][T14325] usb 3-1: Using ep0 maxpacket: 8 [ 1007.195726][T14325] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1007.207711][T14325] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1007.232792][T14325] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1007.254835][T14325] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1007.288047][T14325] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1007.307412][T14325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.423749][T23532] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1007.460345][T23532] usb 4-1: USB disconnect, device number 56 [ 1007.548158][T14325] usb 3-1: GET_CAPABILITIES returned 0 [ 1007.581141][T14325] usbtmc 3-1:16.0: can't read capabilities [ 1007.802909][T23532] usb 3-1: USB disconnect, device number 82 [ 1008.880917][ T1412] batadv_slave_1: entered promiscuous mode [ 1008.916695][ T1411] batadv_slave_1: left promiscuous mode [ 1010.025735][ T1443] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1010.798331][T23532] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1010.864566][ T1465] Attempt to restore checkpoint with obsolete wellknown handles [ 1010.969386][T23532] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 1010.999914][T23532] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.028363][T23532] usb 3-1: config 0 has no interfaces? [ 1011.049617][T23532] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.078202][T23532] usb 3-1: config 0 has no interfaces? [ 1011.099186][T23532] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.138238][T23532] usb 3-1: config 0 has no interfaces? [ 1011.148226][T23532] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.180813][T23532] usb 3-1: config 0 has no interfaces? [ 1011.199351][T23532] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.238311][T23532] usb 3-1: config 0 has no interfaces? [ 1011.250963][T23532] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.288033][T23532] usb 3-1: config 0 has no interfaces? [ 1011.301744][T23532] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.338193][T23532] usb 3-1: config 0 has no interfaces? [ 1011.359159][T23532] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.377553][ T1487] bond0: Caught tx_queue_len zero misconfig [ 1011.388026][T23532] usb 3-1: config 0 has no interfaces? [ 1011.400770][T23532] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1011.428187][T23532] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.460984][T23532] usb 3-1: config 0 descriptor?? [ 1011.755789][ T5721] usb 3-1: USB disconnect, device number 83 [ 1012.191132][ T1508] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1012.534126][ T1514] binder: 1513:1514 ioctl c018620c 200000000240 returned -22 [ 1013.438132][T14325] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1013.622923][T14325] usb 4-1: Using ep0 maxpacket: 32 [ 1013.655163][T14325] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1013.689333][T14325] usb 4-1: config 0 has no interface number 0 [ 1013.720332][T14325] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1013.743035][T14325] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.763456][T14325] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1013.786132][T14325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.814449][T14325] usb 4-1: config 0 descriptor?? [ 1014.454823][T14325] uclogic 0003:28BD:0094.003C: pen parameters not found [ 1014.471676][T14325] uclogic 0003:28BD:0094.003C: interface is invalid, ignoring [ 1014.665072][T14325] usb 4-1: USB disconnect, device number 57 [ 1015.065849][ T57] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1015.101174][ T57] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1015.153796][ T57] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1015.205848][ T57] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1016.569357][ T1614] netlink: 'syz.4.13330': attribute type 30 has an invalid length. [ 1016.858206][T14325] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1017.050078][T14325] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1017.068841][T14325] usb 3-1: not running at top speed; connect to a high speed hub [ 1017.089342][T14325] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 1017.114276][T14325] usb 3-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 1017.129965][T14325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.148392][T14325] usb 3-1: Product: syz [ 1017.157257][T14325] usb 3-1: Manufacturer: syz [ 1017.171124][T14325] usb 3-1: SerialNumber: syz [ 1017.428792][T14325] usb 3-1: incorrect wMaxPacketSize 0x8 for BADD profile [ 1017.533357][T14325] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1017.573668][T14325] usb 3-1: USB disconnect, device number 84 [ 1017.630952][T25081] udevd[25081]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1018.280163][ T1656] sctp: [Deprecated]: syz.0.13350 (pid 1656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1018.280163][ T1656] Use struct sctp_sack_info instead [ 1019.065942][ T1678] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1019.441421][ T1691] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13366'. [ 1019.717202][ T5721] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 1019.740547][ T5721] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 1019.796707][ T5721] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1019.978880][ T1701] fido_id[1701]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1021.087867][ T1743] netlink: 'syz.4.13389': attribute type 1 has an invalid length. [ 1021.110492][ T1743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1022.110343][T19793] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.171929][T19793] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.213548][T19793] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.941101][ T1816] input: syz0 as /devices/virtual/input/input86 [ 1025.038059][T23532] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1025.064349][ T1845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13433'. [ 1025.198086][T23532] usb 3-1: Using ep0 maxpacket: 16 [ 1025.210827][T23532] usb 3-1: config 0 has no interfaces? [ 1025.229507][T23532] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1025.248078][T23532] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1025.272716][T23532] usb 3-1: Manufacturer: syz [ 1025.293317][T23532] usb 3-1: config 0 descriptor?? [ 1025.705847][T23532] usb 3-1: USB disconnect, device number 85 [ 1027.289120][ T1901] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1027.319424][ T1901] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1027.512986][ T1910] netlink: 27 bytes leftover after parsing attributes in process `syz.2.13462'. [ 1027.762782][ T1922] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13467'. [ 1028.030021][ T1928] batman_adv: batadv0: Adding interface: dummy0 [ 1028.060323][ T1928] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.124774][ T1928] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1028.336027][ T1938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13474'. [ 1028.449476][ T152] tipc: Subscription rejected, illegal request [ 1028.981016][ T1955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13481'. [ 1029.009771][ T1955] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 1029.035248][ T1955] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 1031.098085][ T5745] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1031.280575][ T5745] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1031.313320][ T5745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1031.349200][ T5745] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1031.378294][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.424222][ T5745] usb 3-1: config 0 descriptor?? [ 1031.446002][ T1998] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1031.475550][ T5745] hub 3-1:0.0: USB hub found [ 1031.677175][ T5745] hub 3-1:0.0: 2 ports detected [ 1031.797225][ T2031] input: syz0 as /devices/virtual/input/input87 [ 1032.090323][ T5745] hub 3-1:0.0: set hub depth failed [ 1032.117907][ T5745] usb 3-1: USB disconnect, device number 86 [ 1032.310033][T14325] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1032.478137][T14325] usb 4-1: Using ep0 maxpacket: 32 [ 1032.489737][T14325] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.509914][T14325] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.536918][T14325] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1032.557942][T14325] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1032.575526][T14325] usb 4-1: Product: syz [ 1032.584670][T14325] usb 4-1: Manufacturer: syz [ 1032.617149][T14325] hub 4-1:4.0: USB hub found [ 1032.826847][T14325] hub 4-1:4.0: 2 ports detected [ 1032.927041][ T2061] loop8: detected capacity change from 0 to 7 [ 1032.973789][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1032.983281][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1033.019609][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1033.028877][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1033.039480][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1033.058702][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1033.067942][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1033.076250][T14325] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 1033.082971][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1033.083009][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1033.101295][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1033.110481][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1033.120867][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1033.130090][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1033.139540][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1033.148733][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1033.156817][ T2061] ldm_validate_partition_table(): Disk read failed. [ 1033.167815][T14325] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 1033.182176][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1033.191376][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1033.205281][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1033.214505][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1033.227012][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1033.238793][ T2061] Dev loop8: unable to read RDB block 0 [ 1033.252696][T14325] usb 4-1: USB disconnect, device number 58 [ 1033.264092][ T2061] loop8: unable to read partition table [ 1033.276174][ T2061] loop8: partition table beyond EOD, truncated [ 1033.302595][ T2061] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1033.697372][ T2071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13528'. [ 1034.181290][ T2088] netem: change failed [ 1035.292177][ T2122] netlink: 'syz.2.13549': attribute type 16 has an invalid length. [ 1035.339085][ T2122] netlink: 'syz.2.13549': attribute type 3 has an invalid length. [ 1035.390346][ T2122] netlink: 'syz.2.13549': attribute type 2 has an invalid length. [ 1035.441097][ T2122] netlink: 'syz.2.13549': attribute type 1 has an invalid length. [ 1035.506230][ T2122] netlink: 64022 bytes leftover after parsing attributes in process `syz.2.13549'. [ 1036.168241][ T2141] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.13558'. [ 1036.208075][ T5745] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1036.380963][ T5745] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1036.410535][ T5745] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1036.438064][ T5745] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.470690][ T5745] usb 4-1: config 220 has no interface number 2 [ 1036.499865][ T5745] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1036.543894][ T5745] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1036.570446][ T5745] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1036.600376][ T5745] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1036.623246][ T5745] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1036.658307][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.678372][ T5745] usb 4-1: Product: syz [ 1036.690585][ T5745] usb 4-1: Manufacturer: syz [ 1036.709521][ T5745] usb 4-1: SerialNumber: syz [ 1036.953605][ T5745] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1036.980433][ T5745] uvcvideo 4-1:220.0: No valid video chain found. [ 1037.000924][ T2168] sch_tbf: burst 0 is lower than device vcan0 mtu (2060) ! [ 1037.002752][ T5745] usb 4-1: selecting invalid altsetting 0 [ 1037.057082][ T5745] usb 4-1: selecting invalid altsetting 0 [ 1037.078450][ T5745] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1037.119324][ T5745] usb 4-1: USB disconnect, device number 59 [ 1037.132532][ T2170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13571'. [ 1037.214292][ T2170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13571'. [ 1038.239530][ T2203] cifs: Unknown parameter '0' [ 1038.807924][ T2223] loop9: detected capacity change from 0 to 8 [ 1039.052040][ T2223] loop9: detected capacity change from 8 to 7 [ 1039.066440][ C0] blk_print_req_error: 11 callbacks suppressed [ 1039.066462][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1039.081907][ C0] buffer_io_error: 10 callbacks suppressed [ 1039.081927][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1039.099322][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1039.108540][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1039.121085][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1039.130380][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1039.139145][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1039.148320][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1039.157575][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1039.166833][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1039.190299][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1039.199580][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1039.241629][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1039.250878][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1039.258935][ T2223] ldm_validate_partition_table(): Disk read failed. [ 1039.271256][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1039.280576][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1039.291385][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1039.300572][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1039.311888][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1039.321125][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1039.331798][ T2223] Dev loop9: unable to read RDB block 0 [ 1039.338847][ T2223] loop9: unable to read partition table [ 1039.357846][ T2223] loop9: partition table beyond EOD, truncated [ 1039.398384][ T2223] loop_reread_partitions: partition scan of loop9 (|LCTn1`BPY 꽡7=ݥ4ɫ,߸MyV4!4) failed (rc=-5) [ 1039.471017][ T4992] ldm_validate_partition_table(): Disk read failed. [ 1039.488739][ T4992] Dev loop9: unable to read RDB block 0 [ 1039.506658][ T4992] loop9: unable to read partition table [ 1039.528853][ T4992] loop9: partition table beyond EOD, truncated [ 1040.300432][ T2274] netlink: 'syz.1.13620': attribute type 11 has an invalid length. [ 1040.328198][ T2274] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.13620'. [ 1040.581693][ T2285] macvlan0: entered promiscuous mode [ 1040.610550][ T2285] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13625'. [ 1040.622853][ T5721] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1040.818086][ T5721] usb 3-1: Using ep0 maxpacket: 16 [ 1040.818632][ T2291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13627'. [ 1040.842636][ T5721] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.880227][ T5721] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1040.923625][ T5721] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1040.949619][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.968703][ T5721] usb 3-1: config 0 descriptor?? [ 1041.453246][ T5721] mcp2221 0003:04D8:00DD.003E: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1041.719145][T12519] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1041.845662][ T5721] usb 3-1: USB disconnect, device number 87 [ 1041.909265][T12519] usb 4-1: Using ep0 maxpacket: 8 [ 1041.925483][T12519] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 1041.948742][T12519] usb 4-1: config 0 has no interface number 0 [ 1041.968105][T12519] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1042.007420][T12519] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1042.032206][T12519] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1042.058356][T12519] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1042.081968][T12519] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1042.111741][T12519] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1042.122947][T12519] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.139637][T12519] usb 4-1: Product: syz [ 1042.149653][T12519] usb 4-1: Manufacturer: syz [ 1042.158790][T12519] usb 4-1: SerialNumber: syz [ 1042.188041][T12519] usb 4-1: config 0 descriptor?? [ 1042.451369][T12519] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1042.716899][T12519] usb 4-1: USB disconnect, device number 60 [ 1042.931147][ T2337] syz.2.13648 (2337): drop_caches: 2 [ 1043.050361][ T2342] ALSA: mixer_oss: invalid OSS volume '' [ 1043.155824][ T2344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13651'. [ 1043.188786][ T2344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13651'. [ 1043.281005][ T383] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 1043.306713][ T383] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1043.340891][ T383] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1043.374608][ T383] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1043.416583][ T2351] tipc: New replicast peer: 255.255.255.255 [ 1043.430562][ T2351] tipc: Enabled bearer , priority 10 [ 1043.498303][ T2358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1043.775077][ T2371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13662'. [ 1044.428247][ T5721] tipc: Node number set to 11 [ 1045.164780][ T2411] bond0: entered promiscuous mode [ 1045.198354][ T2411] bond_slave_0: entered promiscuous mode [ 1045.211712][ T2413] usb usb7: usbfs: process 2413 (syz.4.13682) did not claim interface 0 before use [ 1045.229401][ T2411] bond_slave_1: entered promiscuous mode [ 1045.268496][ T2411] bond0: left promiscuous mode [ 1045.289671][ T2411] bond_slave_0: left promiscuous mode [ 1045.309959][ T2411] bond_slave_1: left promiscuous mode [ 1045.679454][ T2433] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.13689'. [ 1047.068441][ T2483] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13708'. [ 1047.765835][ T2516] dummy0: Caught tx_queue_len zero misconfig [ 1049.621690][ T2580] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13742'. [ 1051.903305][ T2647] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13769'. [ 1051.933750][ T2647] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13769'. [ 1053.019678][ T2678] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.13780'. [ 1053.052953][ T2678] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.13780'. [ 1054.341138][ T2725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1054.440893][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.447292][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.458639][ T2762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13812'. [ 1056.582578][ T2800] netem: change failed [ 1057.535437][ T29] audit: type=1326 audit(1778084881.119:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2806 comm="syz.0.13831" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66059cdd9 code=0x7fc00000 [ 1058.226713][ T2876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13852'. [ 1059.029603][T12519] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1059.226233][T12519] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 1059.251947][T12519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1059.290178][T12519] usb 3-1: New USB device found, idVendor=04d9, idProduct=c002, bcdDevice= 0.00 [ 1059.317231][T12519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.359018][T12519] usb 3-1: config 0 descriptor?? [ 1059.372500][ T2894] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1059.835883][T12519] hid (null): unknown global tag 0xc [ 1059.855054][T12519] hid (null): unknown global tag 0xc [ 1059.872218][T12519] hid (null): global environment stack underflow [ 1059.905841][T12519] hid-generic 0003:04D9:C002.003F: unknown main item tag 0x0 [ 1059.935445][T12519] hid-generic 0003:04D9:C002.003F: unknown main item tag 0x0 [ 1059.955972][T12519] hid-generic 0003:04D9:C002.003F: unknown main item tag 0x0 [ 1059.980686][T12519] hid-generic 0003:04D9:C002.003F: unknown main item tag 0x0 [ 1060.009312][T12519] hid-generic 0003:04D9:C002.003F: unknown main item tag 0x0 [ 1060.041449][T12519] hid-generic 0003:04D9:C002.003F: unknown main item tag 0x0 [ 1060.064774][T12519] hid-generic 0003:04D9:C002.003F: unknown main item tag 0x0 [ 1060.088399][T12519] hid-generic 0003:04D9:C002.003F: unknown main item tag 0x0 [ 1060.116301][T12519] hid-generic 0003:04D9:C002.003F: unknown main item tag 0x0 [ 1060.127751][T12519] hid-generic 0003:04D9:C002.003F: unknown main item tag 0x0 [ 1060.152909][T12519] hid-generic 0003:04D9:C002.003F: unknown global tag 0xc [ 1060.171722][T12519] hid-generic 0003:04D9:C002.003F: item 0 4 1 12 parsing failed [ 1060.194128][T12519] hid-generic 0003:04D9:C002.003F: probe with driver hid-generic failed with error -22 [ 1060.240304][T12519] usb 3-1: USB disconnect, device number 88 [ 1061.887400][ T2948] kvm: kvm [2947]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x40600 [ 1061.982602][ T2954] bond0: entered promiscuous mode [ 1061.987704][ T2954] bond_slave_0: entered promiscuous mode [ 1061.998478][ T2954] bond_slave_1: entered promiscuous mode [ 1062.031264][ T2954] veth0_to_bond: entered promiscuous mode [ 1062.064852][ T2954] syz_tun: entered promiscuous mode [ 1062.112987][ T2954] batadv0: entered promiscuous mode [ 1062.169623][ T2954] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1062.223132][ T2954] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1062.282961][ T2954] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1062.372561][ T2954] bond0: left promiscuous mode [ 1062.383356][ T2954] bond_slave_0: left promiscuous mode [ 1062.403451][ T2954] bond_slave_1: left promiscuous mode [ 1062.422865][ T2954] veth0_to_bond: left promiscuous mode [ 1062.447066][ T2954] syz_tun: left promiscuous mode [ 1062.488494][ T2954] batadv0: left promiscuous mode [ 1062.619263][ T2977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13893'. [ 1062.655086][ T2977] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13893'. [ 1062.717568][ T2977] vlan3: entered allmulticast mode [ 1063.404978][ T3009] syz.0.13909 (3009): drop_caches: 2 [ 1063.593862][ T29] audit: type=1326 audit(1778084887.179:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3018 comm="syz.2.13914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d979cdd9 code=0x7ffc0000 [ 1063.675696][ T29] audit: type=1326 audit(1778084887.179:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3018 comm="syz.2.13914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d979cdd9 code=0x7ffc0000 [ 1063.737199][ T29] audit: type=1326 audit(1778084887.209:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3018 comm="syz.2.13914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d979cdd9 code=0x7ffc0000 [ 1063.817120][ T29] audit: type=1326 audit(1778084887.209:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3018 comm="syz.2.13914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f21d979cdd9 code=0x7ffc0000 [ 1063.861499][ T29] audit: type=1326 audit(1778084887.209:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3018 comm="syz.2.13914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d979cdd9 code=0x7ffc0000 [ 1063.893740][ T29] audit: type=1326 audit(1778084887.209:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3018 comm="syz.2.13914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d979cdd9 code=0x7ffc0000 [ 1063.936090][ T29] audit: type=1326 audit(1778084887.209:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3018 comm="syz.2.13914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d979cdd9 code=0x7ffc0000 [ 1063.988689][ T29] audit: type=1326 audit(1778084887.209:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3018 comm="syz.2.13914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d979cdd9 code=0x7ffc0000 [ 1064.015320][ T29] audit: type=1326 audit(1778084887.209:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3018 comm="syz.2.13914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d979cdd9 code=0x7ffc0000 [ 1064.056338][ T29] audit: type=1326 audit(1778084887.209:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3018 comm="syz.2.13914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f21d979cdd9 code=0x7ffc0000 [ 1064.241992][ T3035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13922'. [ 1064.533389][ T3044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13925'. [ 1064.601361][ T3044] bond7: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1064.621943][ T3044] bond7 (unregistering): Released all slaves [ 1066.257196][ T3079] bond0: entered promiscuous mode [ 1066.264699][ T3079] : entered promiscuous mode [ 1066.270325][ T3079] bond_slave_1: entered promiscuous mode [ 1066.297261][ T3079] batadv0: entered promiscuous mode [ 1066.312950][ T3079] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1066.337552][ T3079] bond0: left promiscuous mode [ 1066.343109][ T3079] : left promiscuous mode [ 1066.349259][ T3079] bond_slave_1: left promiscuous mode [ 1066.362564][ T3079] batadv0: left promiscuous mode [ 1067.840209][ T3122] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1068.018728][ T3121] sctp: [Deprecated]: syz.4.13959 (pid 3121) Use of int in max_burst socket option deprecated. [ 1068.018728][ T3121] Use struct sctp_assoc_value instead [ 1068.549593][ T3148] bond0: entered promiscuous mode [ 1068.565012][ T3148] bond_slave_0: entered promiscuous mode [ 1068.575803][ T3148] bond_slave_1: entered promiscuous mode [ 1068.591644][ T3148] batadv0: entered promiscuous mode [ 1068.611362][ T3148] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1068.634955][ T3148] bond0: left promiscuous mode [ 1068.649073][ T3148] bond_slave_0: left promiscuous mode [ 1068.662217][ T3148] bond_slave_1: left promiscuous mode [ 1068.686270][ T3148] batadv0: left promiscuous mode [ 1068.715303][ T3150] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.13970'. [ 1069.248396][T12519] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1069.296538][ T3171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.303897][ T3171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.431421][T12519] usb 3-1: Using ep0 maxpacket: 32 [ 1069.447194][T12519] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1069.479262][T12519] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1069.515485][T12519] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1069.541123][T12519] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1069.567466][T12519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.591501][ T3179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13982'. [ 1069.603540][T12519] usb 3-1: Product: syz [ 1069.619601][T12519] usb 3-1: Manufacturer: syz [ 1069.631725][T12519] usb 3-1: SerialNumber: syz [ 1069.640549][ T3179] veth0: Caught tx_queue_len zero misconfig [ 1069.662607][T12519] usb 3-1: config 0 descriptor?? [ 1069.873225][ T3187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13986'. [ 1069.911755][ T3185] pimreg: entered allmulticast mode [ 1069.943062][ T3185] pimreg: left allmulticast mode [ 1070.124225][T12519] gs_usb 3-1:0.0: Configuring for 159 interfaces [ 1070.534296][T12519] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1070.564837][T12519] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1070.589019][T12519] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1070.629944][T12519] usb 3-1: USB disconnect, device number 89 [ 1072.753534][ T3255] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14009'. [ 1073.098035][T23532] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 1073.279603][T23532] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.343442][T23532] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1073.378056][T23532] usb 3-1: config 1 has no interface number 0 [ 1073.403039][T23532] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1073.438246][T23532] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1073.478720][T23532] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1073.507393][T23532] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1073.552231][T23532] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1073.570489][T23532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.598794][T23532] usb 3-1: Product: syz [ 1073.610197][T23532] usb 3-1: Manufacturer: syz [ 1073.625352][T23532] usb 3-1: SerialNumber: syz [ 1073.658922][ T3261] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1074.125529][ T3261] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1074.571329][T23532] cdc_ncm 3-1:1.1: bind() failure [ 1074.599396][T23532] usb 3-1: USB disconnect, device number 90 [ 1075.218762][ T3281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14018'. [ 1075.270252][ T3281] veth1_to_hsr: left allmulticast mode [ 1075.290639][ T3281] veth1_to_hsr: left promiscuous mode [ 1076.653760][ T3312] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14030'. [ 1076.695784][ T3312] netlink: 3 bytes leftover after parsing attributes in process `syz.1.14030'. [ 1077.230840][ T3327] bridge0: port 2(bridge_slave_1) entered listening state [ 1077.264423][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.078334][ T3396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14068'. [ 1079.705154][ T3413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14075'. [ 1082.119820][ T5633] Bluetooth: hci4: command 0x0406 tx timeout [ 1082.962586][ T3489] netlink: 'syz.3.14107': attribute type 10 has an invalid length. [ 1083.007103][ T3489] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1083.047637][ T3489] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1083.094289][ T3490] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14107'. [ 1083.198930][ T3490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.268397][ T3490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.335206][ T3490] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1083.373888][ T3490] bond0 (unregistering): Released all slaves [ 1083.512033][ T3501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14112'. [ 1083.555734][ T3501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14112'. [ 1083.711092][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14113'. [ 1083.756301][ T3505] netlink: 'syz.4.14113': attribute type 25 has an invalid length. [ 1083.788092][ T3505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14113'. [ 1084.143824][ T3515] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1084.189754][ T3515] bond6: entered allmulticast mode [ 1084.207515][ T3515] bond0: (slave bond6): Enslaving as an active interface with an up link [ 1084.301338][ T3528] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1084.378095][T14325] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1084.564500][T14325] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.598798][T14325] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1084.634650][T14325] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1084.665982][T14325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1084.696986][T14325] usb 4-1: SerialNumber: syz [ 1084.789614][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1084.789631][ T29] audit: type=1326 audit(1778084908.369:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3537 comm="syz.2.14130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d979cdd9 code=0x7ffc0000 [ 1084.891963][ T29] audit: type=1326 audit(1778084908.379:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3537 comm="syz.2.14130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d979cdd9 code=0x7ffc0000 [ 1084.961940][T14325] usb 4-1: 0:2 : does not exist [ 1084.964868][ T29] audit: type=1326 audit(1778084908.419:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3537 comm="syz.2.14130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f21d979cdd9 code=0x7ffc0000 [ 1085.048184][ T29] audit: type=1326 audit(1778084908.419:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3537 comm="syz.2.14130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d979cdd9 code=0x7ffc0000 [ 1085.128161][ T29] audit: type=1326 audit(1778084908.419:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3537 comm="syz.2.14130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d979cdd9 code=0x7ffc0000 [ 1085.137004][T14325] usb 4-1: USB disconnect, device number 61 [ 1085.213761][ T29] audit: type=1326 audit(1778084908.419:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3537 comm="syz.2.14130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f21d979cdd9 code=0x7ffc0000 [ 1085.294183][T25081] udevd[25081]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1085.338180][ T29] audit: type=1326 audit(1778084908.419:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3537 comm="syz.2.14130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d979cdd9 code=0x7ffc0000 [ 1087.269631][ T29] audit: type=1326 audit(1778084910.859:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3596 comm="syz.0.14156" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa66059cdd9 code=0x0 [ 1088.278321][T14325] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1088.347424][ T3629] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1088.389142][ T3629] bond0: (slave bond6): Enslaving as an active interface with an up link [ 1088.447091][ T3637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14173'. [ 1088.488207][T14325] usb 3-1: Using ep0 maxpacket: 16 [ 1088.512277][T14325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.572371][T14325] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1088.633086][T14325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.701879][T14325] usb 3-1: config 0 descriptor?? [ 1089.168789][T14325] mcp2221 0003:04D8:00DD.0040: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1089.563160][T12519] usb 3-1: USB disconnect, device number 91 [ 1090.443801][ T3672] netem: incorrect gi model size [ 1090.450641][ T3672] netem: change failed [ 1091.200106][ T3689] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1091.360899][ T3693] kvm: kvm [3692]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x1 [ 1091.570252][ T3697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1091.998039][ T386] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1092.168275][ T386] usb 3-1: Using ep0 maxpacket: 16 [ 1092.193781][ T386] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.248034][ T386] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1092.284931][ T386] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1092.343836][ T386] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1092.370268][ T386] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1092.422308][ T386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.473447][ T386] usb 3-1: config 0 descriptor?? [ 1092.930143][ T386] hid (null): report_id 0 is invalid [ 1092.950885][ T386] hid (null): unknown global tag 0xd [ 1093.139164][T14325] usb 3-1: USB disconnect, device number 92 [ 1093.325527][ T3742] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.14220'. [ 1093.733656][ T3755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14226'. [ 1093.794908][ T3755] syz_tun: Device is already in use. [ 1094.619988][ T5721] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1094.788015][ T5721] usb 4-1: Using ep0 maxpacket: 8 [ 1094.804231][ T5721] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1094.843046][ T5721] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1094.868671][ T5721] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1094.877295][ T5721] usb 4-1: Product: syz [ 1094.899823][ T5721] usb 4-1: Manufacturer: syz [ 1094.912329][ T5721] usb 4-1: SerialNumber: syz [ 1095.180918][ T5721] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 1095.200622][ T5721] usb 4-1: Handspring Visor / Palm OS: port 79, is for unknown use [ 1095.216050][ T5721] usb 4-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 1095.237127][ T5721] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1095.348992][T14325] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1095.406685][ T5721] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 1095.425226][ T5721] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1095.451470][ T5721] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1095.502240][ T5721] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1095.528083][T14325] usb 3-1: Using ep0 maxpacket: 16 [ 1095.537067][ T5721] usb 4-1: USB disconnect, device number 62 [ 1095.564863][T14325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.613576][ T5721] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1095.632965][T14325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.673423][T14325] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1095.687245][ T5721] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1095.727991][T14325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.740804][ T5721] visor 4-1:1.0: device disconnected [ 1095.775882][T14325] usb 3-1: config 0 descriptor?? [ 1096.245770][T14325] ntrig 0003:1B96:0008.0042: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.2-1/input0 [ 1096.424129][T14325] ntrig 0003:1B96:0008.0042: Firmware version: 2.7.31.21.7 (dfb5 afea) [ 1096.674076][T14325] usb 3-1: USB disconnect, device number 93 [ 1096.946411][ T3810] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14249'. [ 1097.759871][ T3832] loop7: detected capacity change from 0 to 7 [ 1097.914911][ T3832] Dev loop7: unable to read RDB block 7 [ 1097.946173][ C0] blk_print_req_error: 98 callbacks suppressed [ 1097.946193][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 1097.962342][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 1098.102596][ T3832] loop7: unable to read partition table [ 1098.135502][ T3832] loop7: partition table beyond EOD, truncated [ 1098.163687][ T3832] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`4FLQk݊5) failed (rc=-5) [ 1098.187215][ T3844] tmpfs: Unknown parameter '' [ 1098.768437][ T3865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14275'. [ 1099.305534][ T3881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14282'. [ 1099.643416][ T3890] input: syz0 as /devices/virtual/input/input91 [ 1100.102958][ T3901] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1100.124010][ T3901] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1100.673284][ T29] audit: type=1326 audit(1778084924.259:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3922 comm="syz.3.14300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e78f9cdd9 code=0x7ffc0000 [ 1100.750540][ T29] audit: type=1326 audit(1778084924.259:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3922 comm="syz.3.14300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e78f9cdd9 code=0x7ffc0000 [ 1100.848232][ T29] audit: type=1326 audit(1778084924.289:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3922 comm="syz.3.14300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f4e78f9cdd9 code=0x7ffc0000 [ 1100.917697][ T29] audit: type=1326 audit(1778084924.289:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3922 comm="syz.3.14300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e78f9cdd9 code=0x7ffc0000 [ 1100.995152][ T29] audit: type=1326 audit(1778084924.289:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3922 comm="syz.3.14300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e78f9cdd9 code=0x7ffc0000 [ 1101.076177][ T29] audit: type=1326 audit(1778084924.289:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3922 comm="syz.3.14300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e78f9cdd9 code=0x7ffc0000 [ 1101.107271][ T29] audit: type=1326 audit(1778084924.289:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3922 comm="syz.3.14300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e78f9cdd9 code=0x7ffc0000 [ 1101.135405][ T29] audit: type=1326 audit(1778084924.289:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3922 comm="syz.3.14300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f4e78f9cdd9 code=0x7ffc0000 [ 1101.184517][ T29] audit: type=1326 audit(1778084924.289:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3922 comm="syz.3.14300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e78f9cdd9 code=0x7ffc0000 [ 1101.428993][ T29] audit: type=1326 audit(1778084925.019:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3943 comm="syz.2.14306" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21d979cdd9 code=0x0 [ 1101.617984][ T3950] netlink: 'syz.3.14310': attribute type 3 has an invalid length. [ 1101.640597][ T3950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14310'. [ 1103.000312][ T3971] kvm: kvm [3970]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0xbf [ 1104.618837][ T5721] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1104.809818][ T5721] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.844283][ T5721] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1104.885466][ T5721] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1104.918816][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1104.946019][ T5721] usb 4-1: SerialNumber: syz [ 1105.185739][ T5721] usb 4-1: 0:2 : does not exist [ 1105.365673][ T5721] usb 4-1: USB disconnect, device number 63 [ 1105.458748][T25081] udevd[25081]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1105.874814][ T4037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14346'. [ 1105.926429][ T4037] netlink: 'syz.4.14346': attribute type 7 has an invalid length. [ 1105.949274][ T4037] netlink: 'syz.4.14346': attribute type 8 has an invalid length. [ 1105.970980][ T4037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14346'. [ 1105.984836][ T4043] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.14349'. [ 1107.776571][ T4098] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1107.807481][ T4098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14373'. [ 1107.968007][ T4104] vivid-003: disconnect [ 1107.983200][ T4103] vivid-003: reconnect [ 1109.447060][ T4130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14386'. [ 1110.433165][ T4150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14398'. [ 1110.468076][ T4150] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1110.669774][ T5721] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1110.863463][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.916647][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.950418][ T5721] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1110.987809][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.033323][ T5721] usb 4-1: config 0 descriptor?? [ 1111.118473][ T386] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1111.288369][ T386] usb 3-1: Using ep0 maxpacket: 16 [ 1111.311625][ T386] usb 3-1: config 0 has no interfaces? [ 1111.343932][ T386] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1111.376553][ T386] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1111.418160][ T386] usb 3-1: Manufacturer: syz [ 1111.439017][ T386] usb 3-1: config 0 descriptor?? [ 1111.486887][ T5721] hid_parser_main: 386 callbacks suppressed [ 1111.486910][ T5721] playstation 0003:054C:0BA0.0043: unknown main item tag 0x0 [ 1111.534833][ T5721] playstation 0003:054C:0BA0.0043: unknown main item tag 0x0 [ 1111.555606][ T5721] playstation 0003:054C:0BA0.0043: unknown main item tag 0x0 [ 1111.575011][ T5721] playstation 0003:054C:0BA0.0043: unknown main item tag 0x0 [ 1111.593309][ T5721] playstation 0003:054C:0BA0.0043: unknown main item tag 0x0 [ 1111.611042][ T5721] playstation 0003:054C:0BA0.0043: unknown main item tag 0x0 [ 1111.629961][ T5721] playstation 0003:054C:0BA0.0043: unknown main item tag 0x0 [ 1111.643955][ T5721] playstation 0003:054C:0BA0.0043: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 1111.691255][T12519] usb 3-1: USB disconnect, device number 94 [ 1111.710445][ T5721] playstation 0003:054C:0BA0.0043: Invalid reportID received, expected 18 got 179 [ 1111.728135][ T5721] playstation 0003:054C:0BA0.0043: Failed to retrieve DualShock4 pairing info: -22 [ 1111.739640][ T5721] playstation 0003:054C:0BA0.0043: Failed to get MAC address from DualShock4 [ 1111.758382][ T5721] playstation 0003:054C:0BA0.0043: Failed to create dualshock4. [ 1111.769969][ T5721] playstation 0003:054C:0BA0.0043: probe with driver playstation failed with error -22 [ 1111.939769][T12519] usb 4-1: USB disconnect, device number 64 [ 1114.324655][ T4234] IPv6: NLM_F_CREATE should be specified when creating new route [ 1114.336034][ T4234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1114.343312][ T4234] IPv6: NLM_F_CREATE should be set when creating new route [ 1114.350632][ T4234] IPv6: NLM_F_CREATE should be set when creating new route [ 1114.357895][ T4234] IPv6: NLM_F_CREATE should be set when creating new route [ 1114.374834][ T4234] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.14432'. [ 1114.438449][ T5721] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1114.602199][ T5721] usb 3-1: Using ep0 maxpacket: 16 [ 1114.616771][ T5721] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.652048][ T5721] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.682275][ T5721] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1114.711188][ T5721] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1114.734129][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.765778][ T5721] usb 3-1: config 0 descriptor?? [ 1114.991280][ T4250] cgroup: fork rejected by pids controller in /syz3 [ 1115.262640][ T5721] hid (null): unknown global tag 0xc [ 1115.475758][ T5721] usb 3-1: USB disconnect, device number 95 [ 1115.578190][ T383] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.853777][ T383] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.880862][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.888430][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.987161][ T29] audit: type=1326 audit(1778084939.569:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4259 comm="syz.4.14444" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 1116.099578][ T29] audit: type=1326 audit(1778084939.569:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4259 comm="syz.4.14444" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 1116.165129][ T383] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.209637][ T4260] IPVS: Scheduler module ip_vs_ not found [ 1116.211443][ T29] audit: type=1326 audit(1778084939.639:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4259 comm="syz.4.14444" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 1116.245475][ T4265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1116.306736][ T29] audit: type=1326 audit(1778084939.639:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4259 comm="syz.4.14444" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 1116.387737][ T29] audit: type=1326 audit(1778084939.639:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4259 comm="syz.4.14444" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 1116.483630][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1116.504739][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1116.512877][ T29] audit: type=1326 audit(1778084939.819:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4259 comm="syz.4.14444" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 1116.540053][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1116.549150][ T29] audit: type=1326 audit(1778084939.819:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4259 comm="syz.4.14444" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98e19cdd9 code=0x7ffc0000 [ 1116.577649][ T383] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.592202][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1116.606323][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1116.948285][T14325] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1117.118846][T14325] usb 3-1: Using ep0 maxpacket: 16 [ 1117.140839][T14325] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.183417][T14325] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.225376][T14325] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.280887][T14325] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1117.325945][T14325] usb 3-1: config 7 interface 0 has no altsetting 0 [ 1117.358080][T14325] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1117.390041][T14325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.572316][ T383] bridge_slave_1: left allmulticast mode [ 1117.588629][ T383] bridge_slave_1: left promiscuous mode [ 1117.607902][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.875143][ T4273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.935307][ T4273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.986001][T14325] hid (null): unknown global tag 0xd [ 1118.100376][T14325] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.0045/input/input92 [ 1118.407135][T14325] kye 0003:0458:5010.0045: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 1118.469628][T14325] usb 3-1: USB disconnect, device number 96 [ 1118.636428][ T4302] fido_id[4302]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1118.681544][ T5633] Bluetooth: hci3: command tx timeout [ 1119.380287][ T383] bond1 (unregistering): Released all slaves [ 1119.443773][ T383] bond2 (unregistering): Released all slaves [ 1119.549143][ T383] bond3 (unregistering): Released all slaves [ 1119.605968][ T383] bond4 (unregistering): Released all slaves [ 1119.659974][ T383] bond5 (unregistering): Released all slaves [ 1119.703527][ T383] bond6 (unregistering): Released all slaves [ 1119.765766][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1119.961400][ T383] ?: left promiscuous mode [ 1120.092183][ T383] m1Ie5n: left promiscuous mode [ 1120.364556][ T383] tipc: Disabling bearer [ 1120.386668][ T383] tipc: Left network mode [ 1120.759996][ T5633] Bluetooth: hci3: command tx timeout [ 1120.817846][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.825337][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.832895][ T4272] bridge_slave_0: entered allmulticast mode [ 1120.841356][ T4272] bridge_slave_0: entered promiscuous mode [ 1120.933334][ T4348] ip6erspan3: entered allmulticast mode [ 1120.958878][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.990418][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.028902][ T4272] bridge_slave_1: entered allmulticast mode [ 1121.086137][ T4272] bridge_slave_1: entered promiscuous mode [ 1121.320583][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.367673][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.627859][ T4272] team0: Port device team_slave_0 added [ 1121.702335][ T4272] team0: Port device team_slave_1 added [ 1122.128514][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.160262][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.228149][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.315211][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1122.358666][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.386549][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.468005][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.840671][ T5633] Bluetooth: hci3: command tx timeout [ 1122.896970][ T4272] hsr_slave_0: entered promiscuous mode [ 1122.938548][ T4272] hsr_slave_1: entered promiscuous mode [ 1122.965523][ T4272] debugfs: 'hsr0' already exists in 'hsr' [ 1123.003093][ T4272] Cannot create hsr debugfs directory [ 1123.075931][ T4403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1123.800492][ T29] audit: type=1800 audit(1778084947.379:677): pid=4421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.14494" name="file0" dev="tmpfs" ino=14187 res=0 errno=0 [ 1123.893020][ T4426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1124.479951][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1124.918973][ T5633] Bluetooth: hci3: command tx timeout [ 1125.168080][ T383] hsr_slave_0: left promiscuous mode [ 1125.198175][ T383] hsr_slave_1: left promiscuous mode [ 1125.219786][ T383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1125.220874][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14504'. [ 1125.255113][ T383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.589028][ T383] team0 (unregistering): Port device macvlan1 removed [ 1126.120088][ T383] team_slave_1 (unregistering): left allmulticast mode [ 1126.243823][ T383] team0 (unregistering): Port device team_slave_1 removed [ 1126.265202][ T383] team_slave_0 (unregistering): left allmulticast mode [ 1126.279881][ T383] team0 (unregistering): Port device team_slave_0 removed [ 1128.170201][ T29] audit: type=1326 audit(1778084951.749:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4511 comm="syz.0.14519" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa66059cdd9 code=0x0 [ 1128.236849][ T383] IPVS: stop unused estimator thread 0... [ 1128.244784][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1128.286549][ T4272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1128.332141][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1128.429368][ T4272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1128.463113][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1128.494296][ T4272] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1128.519205][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1128.557322][ T4272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1129.004660][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.095432][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.140418][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.147599][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.228639][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.235841][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.624681][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1129.846572][ T4272] veth0_vlan: entered promiscuous mode [ 1129.902474][ T4272] veth1_vlan: entered promiscuous mode [ 1129.979156][ T4563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14534'. [ 1130.025161][ T4563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14534'. [ 1130.053031][ T4272] veth0_macvtap: entered promiscuous mode [ 1130.101724][ T4272] veth1_macvtap: entered promiscuous mode [ 1130.202532][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1130.249820][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1130.345086][ T383] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.401820][ T383] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.442601][ T383] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.515559][ T383] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.651923][ T4583] dummy0: Caught tx_queue_len zero misconfig [ 1130.943798][T32506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.988559][T32506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.030686][ T4595] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 1131.266892][T32506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.315714][T32506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.668156][ T4641] ip6erspan0: entered allmulticast mode [ 1133.387056][ T4658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1133.865980][ T4667] loop8: detected capacity change from 0 to 1 [ 1133.939147][ T4667] Dev loop8: unable to read RDB block 1 [ 1133.965239][ T4667] loop8: unable to read partition table [ 1133.974208][ T4667] loop8: partition table beyond EOD, truncated [ 1133.993971][ T4667] loop_reread_partitions: partition scan of loop8 (被x^>અ;) failed (rc=-5) [ 1134.341465][ T4682] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1137.208816][T14324] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1137.410934][T14324] usb 4-1: Using ep0 maxpacket: 8 [ 1137.446837][T14324] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1137.478392][T14324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.497328][T14324] usb 4-1: Product: syz [ 1137.505899][T14324] usb 4-1: Manufacturer: syz [ 1137.518317][T14324] usb 4-1: SerialNumber: syz [ 1137.546626][T14324] usb 4-1: config 0 descriptor?? [ 1137.573991][T14324] gspca_main: se401-2.14.0 probing 047d:5003 [ 1137.928294][T23533] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1137.984187][T14324] gspca_se401: Frame size: 0x0 1/16th janggu [ 1138.006933][T14324] gspca_se401: Frame size: 0x0 1/16th janggu [ 1138.025855][T14324] gspca_se401: Frame size: 0x0 1/16th janggu [ 1138.050885][T14324] gspca_se401: Frame size: 0x0 1/16th janggu [ 1138.066844][T14324] gspca_se401: Frame size: 0x0 1/16th janggu [ 1138.078168][T14324] gspca_se401: Frame size: 0x0 1/16th janggu [ 1138.113375][T23533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.148589][T23533] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1138.178794][T23533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.213754][T23533] usb 3-1: config 0 descriptor?? [ 1138.236508][T14324] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input96 [ 1138.304295][T14324] usb 4-1: USB disconnect, device number 65 [ 1138.650993][ T4795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.691518][ T4795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.716831][T23533] sunplus 0003:04FC:05D8.0046: unknown main item tag 0x0 [ 1138.739668][T23533] sunplus 0003:04FC:05D8.0046: unknown main item tag 0x4 [ 1138.764151][T23533] sunplus 0003:04FC:05D8.0046: unknown main item tag 0x0 [ 1138.788567][T23533] sunplus 0003:04FC:05D8.0046: unknown main item tag 0x0 [ 1138.810706][T23533] sunplus 0003:04FC:05D8.0046: unknown main item tag 0x0 [ 1138.837683][T23533] sunplus 0003:04FC:05D8.0046: unknown main item tag 0x2 [ 1138.857815][T23533] sunplus 0003:04FC:05D8.0046: unknown main item tag 0x0 [ 1138.880544][T23533] sunplus 0003:04FC:05D8.0046: unknown main item tag 0x0 [ 1138.908023][T23533] sunplus 0003:04FC:05D8.0046: unknown main item tag 0x0 [ 1138.925368][T23533] sunplus 0003:04FC:05D8.0046: unknown main item tag 0x0 [ 1138.948077][T23533] sunplus 0003:04FC:05D8.0046: item fetching failed at offset 40/41 [ 1138.982863][T23533] sunplus 0003:04FC:05D8.0046: probe with driver sunplus failed with error -22 [ 1139.039292][T23533] usb 3-1: USB disconnect, device number 97 [ 1139.229824][ T4831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14643'. [ 1139.463548][ T4839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1139.534687][ T4843] netlink: 300 bytes leftover after parsing attributes in process `syz.4.14649'. [ 1140.073256][ T4862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14658'. [ 1140.121865][ T4865] netlink: 'syz.2.14660': attribute type 30 has an invalid length. [ 1140.231942][ T4869] IPv6: Can't replace route, no match found [ 1140.858238][ T5745] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1141.038149][ T5745] usb 3-1: Using ep0 maxpacket: 16 [ 1141.061209][ T5745] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1141.091083][ T5745] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1141.110945][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.134093][ T5745] usb 3-1: Product: syz [ 1141.150795][ T5745] usb 3-1: Manufacturer: syz [ 1141.168236][ T5745] usb 3-1: SerialNumber: syz [ 1141.189640][ T5745] usb 3-1: config 0 descriptor?? [ 1141.215528][ T5745] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1141.242181][ T5745] usb 3-1: Detected FT232R [ 1141.316946][ T4903] bridge0: port 3(netdevsim0) entered blocking state [ 1141.347717][ T4903] bridge0: port 3(netdevsim0) entered disabled state [ 1141.359111][ T4903] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1141.420872][ T5745] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1141.467149][ T4903] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1141.500105][ T4903] bridge0: port 3(netdevsim0) entered blocking state [ 1141.507065][ T4903] bridge0: port 3(netdevsim0) entered forwarding state [ 1141.665515][ T5745] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1141.871335][ T5745] usb 3-1: USB disconnect, device number 98 [ 1141.908209][ T5745] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1141.946348][ T5745] ftdi_sio 3-1:0.0: device disconnected [ 1143.495140][ T4990] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14713'. [ 1143.545556][ T29] audit: type=1326 audit(1778084967.129:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4991 comm="syz.3.14714" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1143.631689][ T29] audit: type=1326 audit(1778084967.139:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4991 comm="syz.3.14714" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1143.695695][ T29] audit: type=1326 audit(1778084967.149:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4991 comm="syz.3.14714" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1143.782222][ T29] audit: type=1326 audit(1778084967.149:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4991 comm="syz.3.14714" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1143.854364][ T29] audit: type=1326 audit(1778084967.149:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4991 comm="syz.3.14714" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1143.928625][ T29] audit: type=1326 audit(1778084967.149:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4991 comm="syz.3.14714" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1144.026276][ T29] audit: type=1326 audit(1778084967.149:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4991 comm="syz.3.14714" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1144.090954][ T29] audit: type=1326 audit(1778084967.149:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4991 comm="syz.3.14714" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1144.171847][ T29] audit: type=1326 audit(1778084967.149:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4991 comm="syz.3.14714" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1144.228710][ T29] audit: type=1326 audit(1778084967.149:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4991 comm="syz.3.14714" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1144.790853][ T5028] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 1144.963727][ T5033] vivid-003: ================= START STATUS ================= [ 1144.994230][ T5033] vivid-003: Radio HW Seek Mode: Bounded [ 1145.041883][ T5033] vivid-003: Radio Programmable HW Seek: false [ 1145.066465][ T5033] vivid-003: RDS Rx I/O Mode: Block I/O [ 1145.076554][ T5033] vivid-003: Generate RBDS Instead of RDS: false [ 1145.094292][ T5033] vivid-003: RDS Reception: true [ 1145.109356][ T5033] vivid-003: RDS Program Type: 0 inactive [ 1145.140663][ T5033] vivid-003: RDS PS Name: inactive [ 1145.157876][ T5033] vivid-003: RDS Radio Text: inactive [ 1145.189642][ T5033] vivid-003: RDS Traffic Announcement: false inactive [ 1145.210870][ T5033] vivid-003: RDS Traffic Program: false inactive [ 1145.227431][ T5033] vivid-003: RDS Music: false inactive [ 1145.243477][ T5033] vivid-003: ================== END STATUS ================== [ 1146.048390][T14324] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1146.241665][T14324] usb 3-1: Using ep0 maxpacket: 16 [ 1146.258769][T14324] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.301829][T14324] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1146.324249][T14324] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1146.345529][T14324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.379359][T14324] usb 3-1: config 0 descriptor?? [ 1146.503087][ T5067] netlink: 277 bytes leftover after parsing attributes in process `syz.3.14748'. [ 1146.830504][T14324] mcp2221 0003:04D8:00DD.0047: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1147.139709][ T5080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14754'. [ 1147.265258][ T386] usb 3-1: USB disconnect, device number 99 [ 1148.303208][ T386] IPVS: starting estimator thread 0... [ 1148.338297][ T5745] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1148.408770][ T5125] IPVS: using max 30 ests per chain, 72000 per kthread [ 1148.508137][ T5745] usb 4-1: Using ep0 maxpacket: 32 [ 1148.525995][ T5745] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1148.548100][ T5745] usb 4-1: config 0 has no interface number 0 [ 1148.574531][ T5745] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1148.601356][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.628609][ T5745] usb 4-1: Product: syz [ 1148.647960][ T5745] usb 4-1: Manufacturer: syz [ 1148.664520][ T5745] usb 4-1: SerialNumber: syz [ 1148.691690][ T5745] usb 4-1: config 0 descriptor?? [ 1148.718196][ T5745] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1148.943362][ T5745] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1149.014688][ T5745] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1149.398911][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1149.400840][T14325] usb 4-1: USB disconnect, device number 66 [ 1149.471850][T14325] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1149.556399][T14325] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1149.609706][T14325] quatech2 4-1:0.51: device disconnected [ 1150.129567][ T5189] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14802'. [ 1150.362276][ T5199] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 1151.120381][ T5220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1151.393955][ T5226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14818'. [ 1151.461594][ T5226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14818'. [ 1151.817882][ T5238] trusted_key: encrypted_key: keyword 'upd' not recognized [ 1151.874058][ T5241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14825'. [ 1154.310094][ T5317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14858'. [ 1154.798063][T14324] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1154.948326][ T5342] netlink: 92 bytes leftover after parsing attributes in process `syz.4.14870'. [ 1155.005270][ T5633] Bluetooth: hci3: unexpected subevent 0x05 length: 248 > 12 [ 1155.014949][T14324] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1155.040123][T14324] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1155.059718][T14324] usb 4-1: can't read configurations, error -71 [ 1155.704024][ T5374] netlink: 889 bytes leftover after parsing attributes in process `syz.3.14883'. [ 1155.937184][ T5385] netlink: 'syz.0.14888': attribute type 3 has an invalid length. [ 1155.971306][ T5385] netlink: 788 bytes leftover after parsing attributes in process `syz.0.14888'. [ 1156.669397][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1156.669413][ T29] audit: type=1326 audit(1778084980.259:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.0.14901" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66059cdd9 code=0x7ffc0000 [ 1156.720415][ T29] audit: type=1326 audit(1778084980.299:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.0.14901" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66059cdd9 code=0x7ffc0000 [ 1156.750051][ T29] audit: type=1326 audit(1778084980.299:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.0.14901" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa66059cdd9 code=0x7ffc0000 [ 1156.804602][ T29] audit: type=1326 audit(1778084980.299:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5414 comm="syz.0.14901" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa66059cdd9 code=0x0 [ 1157.080256][ T5633] Bluetooth: hci3: command tx timeout [ 1157.327826][ T5431] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1158.429168][ T5473] bond1: ARP target 9.0.0.0 is already present [ 1158.435577][ T5473] bond1: option arp_ip_target: invalid value (9) [ 1158.451051][ T5473] bond1 (unregistering): Released all slaves [ 1159.897437][ T5514] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14941'. [ 1160.365876][ T5531] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1160.385405][T14324] team_slave_0: entered promiscuous mode [ 1160.391173][T14324] team_slave_1: entered promiscuous mode [ 1160.945947][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1160.955194][ C0] buffer_io_error: 96 callbacks suppressed [ 1160.955211][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1160.978179][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1160.987387][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 1160.995341][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1161.004523][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 1161.012463][ C1] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1161.021629][ C1] Buffer I/O error on dev loop9, logical block 3, async page read [ 1161.022387][ T5558] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.14962'. [ 1161.029551][ C1] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1161.029579][ C1] Buffer I/O error on dev loop9, logical block 4, async page read [ 1161.055957][ C1] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1161.065136][ C1] Buffer I/O error on dev loop9, logical block 5, async page read [ 1161.073043][ C1] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1161.073180][ T5558] openvswitch: netlink: Message has 16 unknown bytes. [ 1161.082224][ C1] Buffer I/O error on dev loop9, logical block 6, async page read [ 1161.101934][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1161.102181][ C0] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1161.111123][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1161.120291][ C0] Buffer I/O error on dev loop9, logical block 2, async page read [ 1161.129555][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1161.137435][ C0] Buffer I/O error on dev loop9, logical block 3, async page read [ 1161.180607][ T4992] ldm_validate_partition_table(): Disk read failed. [ 1161.212170][ T4992] Dev loop9: unable to read RDB block 0 [ 1161.240505][ T4992] loop9: unable to read partition table [ 1161.266127][ T4992] loop9: partition table beyond EOD, truncated [ 1164.299242][T23533] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1164.468033][T23533] usb 3-1: Using ep0 maxpacket: 16 [ 1164.490092][T23533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.530277][T23533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.568521][T23533] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1164.598381][T23533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.632509][T23533] usb 3-1: config 0 descriptor?? [ 1165.095743][T23533] corsair 0003:1B1C:1B02.0048: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 1165.273113][T23533] corsair 0003:1B1C:1B02.0048: Read invalid backlight brightness: ae. [ 1165.505918][T14324] usb 3-1: USB disconnect, device number 100 [ 1165.764300][ T5718] input: syz0 as /devices/virtual/input/input97 [ 1168.926564][ T5807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1169.664904][ T5836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15068'. [ 1171.133016][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15082'. [ 1172.258016][T14325] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1172.429429][T14325] usb 3-1: Using ep0 maxpacket: 32 [ 1172.443993][T14325] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1172.463042][T14325] usb 3-1: config 0 has no interface number 0 [ 1172.478960][T14325] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1172.514717][T14325] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1172.552677][T14325] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1172.563145][T14325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.582783][T14325] usb 3-1: Product: syz [ 1172.592138][T14325] usb 3-1: Manufacturer: syz [ 1172.601331][T14325] usb 3-1: SerialNumber: syz [ 1172.621694][T14325] usb 3-1: config 0 descriptor?? [ 1172.862160][T14325] radio-si470x 3-1:0.35: this is not a si470x device. [ 1173.063978][T14325] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1173.111463][T14325] usb 3-1: USB disconnect, device number 101 [ 1173.738302][T14325] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1173.918518][T14325] usb 4-1: Using ep0 maxpacket: 8 [ 1173.933484][T14325] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1173.955521][T14325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.977599][T14325] usb 4-1: config 0 has no interface number 0 [ 1173.995480][T14325] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1174.013566][T14325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.030942][T14325] usb 4-1: Product: syz [ 1174.041642][T14325] usb 4-1: Manufacturer: syz [ 1174.051636][T14325] usb 4-1: SerialNumber: syz [ 1174.071632][T14325] usb 4-1: config 0 descriptor?? [ 1174.087630][T14325] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1174.103004][T14325] uvcvideo 4-1:0.31: No valid video chain found. [ 1174.329342][T14325] usb 4-1: USB disconnect, device number 69 [ 1175.278137][ T386] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1175.448169][ T386] usb 4-1: Using ep0 maxpacket: 16 [ 1175.478494][ T386] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1175.507621][ T386] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1175.568675][ T386] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1175.620020][ T386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.662641][ T386] usb 4-1: Product: syz [ 1175.686294][ T386] usb 4-1: Manufacturer: syz [ 1175.712960][ T386] usb 4-1: SerialNumber: syz [ 1175.798501][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15133'. [ 1176.355843][ T386] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1176.508523][ T386] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1176.622096][ T386] usb 4-1: USB disconnect, device number 70 [ 1176.674075][ T6011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15144'. [ 1176.684388][T25081] udevd[25081]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1176.716844][ T6010] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1176.746513][ T6010] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1177.319701][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.326126][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.673558][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15161'. [ 1178.281802][ T6062] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15169'. [ 1179.172830][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15178'. [ 1180.416248][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15195'. [ 1180.440034][ T6123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1183.661227][ T6208] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1183.691694][ T6208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15231'. [ 1184.078388][T14325] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1184.281163][T14325] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1184.310923][T14325] usb 4-1: config 0 has no interface number 0 [ 1184.336950][T14325] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1184.387055][T14325] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1184.406610][T14325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.426893][T14325] usb 4-1: Product: syz [ 1184.431494][T14325] usb 4-1: Manufacturer: syz [ 1184.447820][T14325] usb 4-1: SerialNumber: syz [ 1184.479318][T14325] usb 4-1: config 0 descriptor?? [ 1184.521875][T14325] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 1186.039983][T12518] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1186.208543][T12518] usb 3-1: Using ep0 maxpacket: 32 [ 1186.222673][T12518] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.233967][T12518] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1186.245426][T12518] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1186.259565][T12518] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1186.266320][T12518] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1186.277199][T12518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.300275][T12518] usb 3-1: config 0 descriptor?? [ 1186.751465][T12518] hid_parser_main: 2 callbacks suppressed [ 1186.751488][T12518] hid-thrustmaster 0003:044F:B65D.0049: unknown main item tag 0x0 [ 1186.773094][ C0] usb 4-1: yurex_control_callback - control failed: -2 [ 1186.780259][ C0] usb 4-1: yurex_control_callback - control failed: -32 [ 1186.791478][ T5745] usb 4-1: USB disconnect, device number 71 [ 1186.821604][T12518] hid-thrustmaster 0003:044F:B65D.0049: unknown main item tag 0x0 [ 1186.835279][ T5745] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 1186.857990][T12518] hid-thrustmaster 0003:044F:B65D.0049: unknown main item tag 0x0 [ 1186.893545][T12518] hid-thrustmaster 0003:044F:B65D.0049: unknown main item tag 0x0 [ 1186.918572][T12518] hid-thrustmaster 0003:044F:B65D.0049: unknown main item tag 0x0 [ 1186.961440][T12518] hid-thrustmaster 0003:044F:B65D.0049: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 1186.978809][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15252'. [ 1187.008340][T12518] hid-thrustmaster 0003:044F:B65D.0049: Unexpected non-int endpoint [ 1187.028764][ C0] hid-thrustmaster 0003:044F:B65D.0049: URB to get model id failed with error -71 [ 1187.055060][T12518] usb 3-1: USB disconnect, device number 102 [ 1187.154980][ T6254] fido_id[6254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1187.689067][T12518] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1187.886295][T12518] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1187.919205][T12518] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1187.942767][T12518] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1187.979958][T12518] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1188.001061][T12518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.024799][T12518] usb 4-1: Product: syz [ 1188.041043][T12518] usb 4-1: Manufacturer: syz [ 1188.052086][T12518] usb 4-1: SerialNumber: syz [ 1188.082145][T12518] hub 4-1:1.0: bad descriptor, ignoring hub [ 1188.097938][T12518] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1188.304896][T12518] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 72 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1188.614425][T12518] usb 4-1: USB disconnect, device number 72 [ 1188.648895][T12518] usblp0: removed [ 1189.166970][ T6290] input: syz0 as /devices/virtual/input/input98 [ 1190.443401][ T6314] netlink: 'syz.4.15279': attribute type 12 has an invalid length. [ 1190.475505][ T6314] netlink: 'syz.4.15279': attribute type 29 has an invalid length. [ 1190.506964][ T6314] netlink: 148 bytes leftover after parsing attributes in process `syz.4.15279'. [ 1190.858748][T14324] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1191.048565][T14324] usb 4-1: Using ep0 maxpacket: 32 [ 1191.067697][T14324] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1191.095058][T14324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.118843][T14324] usb 4-1: config 0 descriptor?? [ 1191.157839][T14324] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1192.018137][T14324] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 1192.098225][T14324] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 1192.135307][T14324] usb 4-1: USB disconnect, device number 73 [ 1192.412719][ T6362] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15301'. [ 1192.710169][ T6367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15303'. [ 1192.992190][ T6378] erspan0: entered promiscuous mode [ 1193.375748][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15310'. [ 1193.531472][ T6391] binder: 6390:6391 ioctl c018620c 200000000000 returned -22 [ 1193.661143][ T6397] binder: 6396:6397 ioctl c018620c 200000000900 returned -1 [ 1193.838397][T14324] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1194.021132][T14324] usb 3-1: Using ep0 maxpacket: 16 [ 1194.036634][T14324] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 1194.052071][ T29] audit: type=1326 audit(1778085017.639:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.15320" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267ab9cdd9 code=0x7ffc0000 [ 1194.086183][T14324] usb 3-1: config 0 has no interface number 0 [ 1194.099297][T14324] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.136587][ T29] audit: type=1326 audit(1778085017.639:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.15320" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267ab9cdd9 code=0x7ffc0000 [ 1194.139346][T14324] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1194.222043][ T29] audit: type=1326 audit(1778085017.679:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.15320" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f267ab9cdd9 code=0x7ffc0000 [ 1194.232517][T14324] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1194.307087][T14324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.314610][ T29] audit: type=1326 audit(1778085017.679:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.15320" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267ab9cdd9 code=0x7ffc0000 [ 1194.351483][T14324] usb 3-1: config 0 descriptor?? [ 1194.356790][ T29] audit: type=1326 audit(1778085017.679:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.15320" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267ab9cdd9 code=0x7ffc0000 [ 1194.453202][ T29] audit: type=1326 audit(1778085017.699:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.15320" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f267ab5d60e code=0x7ffc0000 [ 1194.555804][ T29] audit: type=1326 audit(1778085017.699:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.15320" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267ab9cdd9 code=0x7ffc0000 [ 1194.627575][ T29] audit: type=1326 audit(1778085017.699:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.15320" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267ab9cdd9 code=0x7ffc0000 [ 1194.682158][ T29] audit: type=1326 audit(1778085017.709:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.15320" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f267ab9cdd9 code=0x7ffc0000 [ 1194.753342][ T29] audit: type=1326 audit(1778085017.709:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.15320" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267ab9cdd9 code=0x7ffc0000 [ 1194.821723][T14324] hid (null): unknown global tag 0xc [ 1194.833889][T14324] hid (null): invalid report_size -1305842040 [ 1194.852222][T14324] hid (null): invalid report_size 1736397498 [ 1195.128631][ T5745] usb 3-1: USB disconnect, device number 103 [ 1195.480680][ T6430] ipip1: entered allmulticast mode [ 1198.590402][ T6516] bridge0: port 1(netdevsim0) entered blocking state [ 1198.628195][ T6516] bridge0: port 1(netdevsim0) entered disabled state [ 1198.652721][ T6516] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1198.700443][ T6516] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1199.682182][ T6554] binder: 6553:6554 ioctl c018620c 200000000900 returned -1 [ 1200.664752][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15391'. [ 1200.710370][ T6573] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1200.725567][ T6573] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1200.747642][ T6573] bridge0: port 3(netdevsim0) entered disabled state [ 1200.787284][ T6573] bridge_slave_1: left allmulticast mode [ 1200.805115][ T6573] bridge_slave_1: left promiscuous mode [ 1200.827124][ T6573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.891485][ T6573] bridge_slave_0: left allmulticast mode [ 1200.908283][ T6573] bridge_slave_0: left promiscuous mode [ 1200.936186][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.519581][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15394'. [ 1201.669849][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15396'. [ 1202.147967][T14325] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1202.349476][T14325] usb 4-1: Using ep0 maxpacket: 8 [ 1202.367787][T14325] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1202.391502][T14325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.445031][T14325] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1202.474398][T14325] pvrusb2: ********** [ 1202.486413][T14325] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1202.529318][T14325] pvrusb2: Important functionality might not be entirely working. [ 1202.557612][T14325] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1202.591929][T14325] pvrusb2: ********** [ 1202.671524][ T2363] pvrusb2: Invalid write control endpoint [ 1202.903715][T23533] usb 4-1: USB disconnect, device number 74 [ 1203.072699][ T2363] pvrusb2: Invalid write control endpoint [ 1203.107088][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1203.154233][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1203.182265][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1203.214291][ T2363] pvrusb2: Device being rendered inoperable [ 1203.236394][ T2363] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1203.258141][ T2363] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1203.363630][ T2363] pvrusb2: Attached sub-driver cx25840 [ 1203.377236][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1203.414356][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1204.046285][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1204.046302][ T29] audit: type=1326 audit(1778085027.629:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.3.15414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1204.183741][ T29] audit: type=1326 audit(1778085027.659:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.3.15414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1204.245818][ T29] audit: type=1326 audit(1778085027.659:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.3.15414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1204.310492][ T29] audit: type=1326 audit(1778085027.659:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.3.15414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02c995d60e code=0x7ffc0000 [ 1204.375667][ T29] audit: type=1326 audit(1778085027.679:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.3.15414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1204.417954][ T29] audit: type=1326 audit(1778085027.679:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.3.15414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1204.496393][ T29] audit: type=1326 audit(1778085027.679:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.3.15414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1204.506344][ T6646] input: syz0 as /devices/virtual/input/input99 [ 1204.573665][ T29] audit: type=1326 audit(1778085027.679:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.3.15414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1204.685576][ T29] audit: type=1326 audit(1778085027.679:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.3.15414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1204.773956][ T29] audit: type=1326 audit(1778085027.679:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.3.15414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c999cdd9 code=0x7ffc0000 [ 1205.348375][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15432'. [ 1205.660781][ T6685] [ 1205.663190][ T6685] ===================================================== [ 1205.670125][ T6685] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1205.677597][ T6685] syzkaller #0 Tainted: G L [ 1205.683662][ T6685] ----------------------------------------------------- [ 1205.690593][ T6685] syz.0.15437/6685 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1205.698328][ T6685] ffff888026815820 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1205.706983][ T6685] [ 1205.706983][ T6685] and this task is already holding: [ 1205.714349][ T6685] ffff88803732c168 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1205.723081][ T6685] which would create a new lock dependency: [ 1205.729058][ T6685] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 1205.736664][ T6685] [ 1205.736664][ T6685] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1205.746115][ T6685] (&dev->event_lock#2){..-.}-{3:3} [ 1205.746158][ T6685] [ 1205.746158][ T6685] ... which became SOFTIRQ-irq-safe at: [ 1205.759054][ T6685] lock_acquire+0x106/0x350 [ 1205.763660][ T6685] _raw_spin_lock_irqsave+0x40/0x60 [ 1205.768959][ T6685] input_inject_event+0xa4/0x330 [ 1205.773995][ T6685] led_trigger_event+0x138/0x210 [ 1205.779031][ T6685] kbd_bh+0x1c6/0x2e0 [ 1205.783108][ T6685] tasklet_action_common+0x2da/0x4b0 [ 1205.788498][ T6685] handle_softirqs+0x22a/0x840 [ 1205.793360][ T6685] run_ksoftirqd+0x36/0x60 [ 1205.797876][ T6685] smpboot_thread_fn+0x541/0xa50 [ 1205.802913][ T6685] kthread+0x388/0x470 [ 1205.807087][ T6685] ret_from_fork+0x514/0xb70 [ 1205.811773][ T6685] ret_from_fork_asm+0x1a/0x30 [ 1205.816640][ T6685] [ 1205.816640][ T6685] to a SOFTIRQ-irq-unsafe lock: [ 1205.823658][ T6685] (tasklist_lock){.+.+}-{3:3} [ 1205.823692][ T6685] [ 1205.823692][ T6685] ... which became SOFTIRQ-irq-unsafe at: [ 1205.836324][ T6685] ... [ 1205.836335][ T6685] lock_acquire+0x106/0x350 [ 1205.843510][ T6685] _raw_read_lock+0x36/0x50 [ 1205.848114][ T6685] __do_wait+0xde/0x740 [ 1205.852378][ T6685] do_wait+0x1e7/0x510 [ 1205.856560][ T6685] kernel_wait+0xd6/0x1c0 [ 1205.861082][ T6685] call_usermodehelper_exec_work+0xbe/0x230 [ 1205.867071][ T6685] process_scheduled_works+0xb5d/0x1860 [ 1205.872713][ T6685] worker_thread+0xa53/0xfc0 [ 1205.877399][ T6685] kthread+0x388/0x470 [ 1205.881568][ T6685] ret_from_fork+0x514/0xb70 [ 1205.886274][ T6685] ret_from_fork_asm+0x1a/0x30 [ 1205.891135][ T6685] [ 1205.891135][ T6685] other info that might help us debug this: [ 1205.891135][ T6685] [ 1205.901366][ T6685] Chain exists of: [ 1205.901366][ T6685] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 1205.901366][ T6685] [ 1205.914358][ T6685] Possible interrupt unsafe locking scenario: [ 1205.914358][ T6685] [ 1205.922691][ T6685] CPU0 CPU1 [ 1205.928065][ T6685] ---- ---- [ 1205.933429][ T6685] lock(tasklist_lock); [ 1205.937688][ T6685] local_irq_disable(); [ 1205.944445][ T6685] lock(&dev->event_lock#2); [ 1205.951669][ T6685] lock(&new->fa_lock); [ 1205.958444][ T6685] [ 1205.961906][ T6685] lock(&dev->event_lock#2); [ 1205.966780][ T6685] [ 1205.966780][ T6685] *** DEADLOCK *** [ 1205.966780][ T6685] [ 1205.974921][ T6685] 4 locks held by syz.0.15437/6685: [ 1205.980125][ T6685] #0: ffffffff8eb03f30 (file_rwsem){++++}-{0:0}, at: __break_lease+0x4e1/0x1ea0 [ 1205.989298][ T6685] #1: ffff88807b9ac648 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x4eb/0x1ea0 [ 1205.998816][ T6685] #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1206.007905][ T6685] #3: ffff88803732c168 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1206.017079][ T6685] [ 1206.017079][ T6685] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1206.027488][ T6685] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1206.033341][ T6685] IN-SOFTIRQ-W at: [ 1206.037503][ T6685] lock_acquire+0x106/0x350 [ 1206.044016][ T6685] _raw_spin_lock_irqsave+0x40/0x60 [ 1206.051254][ T6685] input_inject_event+0xa4/0x330 [ 1206.058205][ T6685] led_trigger_event+0x138/0x210 [ 1206.065153][ T6685] kbd_bh+0x1c6/0x2e0 [ 1206.071152][ T6685] tasklet_action_common+0x2da/0x4b0 [ 1206.078456][ T6685] handle_softirqs+0x22a/0x840 [ 1206.085232][ T6685] run_ksoftirqd+0x36/0x60 [ 1206.091659][ T6685] smpboot_thread_fn+0x541/0xa50 [ 1206.098608][ T6685] kthread+0x388/0x470 [ 1206.104695][ T6685] ret_from_fork+0x514/0xb70 [ 1206.111294][ T6685] ret_from_fork_asm+0x1a/0x30 [ 1206.118066][ T6685] INITIAL USE at: [ 1206.122138][ T6685] lock_acquire+0x106/0x350 [ 1206.128564][ T6685] _raw_spin_lock_irqsave+0x40/0x60 [ 1206.135687][ T6685] input_inject_event+0xa4/0x330 [ 1206.142552][ T6685] kbd_led_trigger_activate+0xbc/0x100 [ 1206.149939][ T6685] led_trigger_set+0x535/0x960 [ 1206.156633][ T6685] led_trigger_set_default+0x260/0x2a0 [ 1206.164023][ T6685] led_classdev_register_ext+0x787/0x9c0 [ 1206.171607][ T6685] input_leds_connect+0x517/0x790 [ 1206.178561][ T6685] input_register_device+0xce0/0x1140 [ 1206.185872][ T6685] atkbd_connect+0x71e/0xa10 [ 1206.192402][ T6685] serio_driver_probe+0x82/0xb0 [ 1206.199186][ T6685] really_probe+0x267/0xaf0 [ 1206.205616][ T6685] __driver_probe_device+0x1ef/0x380 [ 1206.212828][ T6685] driver_probe_device+0x4f/0x240 [ 1206.219781][ T6685] __driver_attach+0x34c/0x640 [ 1206.226476][ T6685] bus_for_each_dev+0x23b/0x2c0 [ 1206.233342][ T6685] serio_handle_event+0x1af/0xf80 [ 1206.240299][ T6685] process_scheduled_works+0xb5d/0x1860 [ 1206.247770][ T6685] worker_thread+0xa53/0xfc0 [ 1206.254282][ T6685] kthread+0x388/0x470 [ 1206.260281][ T6685] ret_from_fork+0x514/0xb70 [ 1206.266789][ T6685] ret_from_fork_asm+0x1a/0x30 [ 1206.273480][ T6685] } [ 1206.276153][ T6685] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1206.285372][ T6685] -> (&client->buffer_lock){....}-{3:3} { [ 1206.291206][ T6685] INITIAL USE at: [ 1206.295190][ T6685] lock_acquire+0x106/0x350 [ 1206.301438][ T6685] _raw_spin_lock_irqsave+0x40/0x60 [ 1206.308393][ T6685] evdev_ioctl_handler+0x1a49/0x1fe0 [ 1206.315427][ T6685] __se_sys_ioctl+0xfc/0x170 [ 1206.321789][ T6685] do_syscall_64+0x15f/0xf80 [ 1206.328127][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.335767][ T6685] } [ 1206.338354][ T6685] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1206.346608][ T6685] ... acquired at: [ 1206.350497][ T6685] _raw_spin_lock+0x2e/0x40 [ 1206.355187][ T6685] evdev_handle_get_val+0x70/0x9f0 [ 1206.360477][ T6685] evdev_ioctl_handler+0x127b/0x1fe0 [ 1206.365967][ T6685] __se_sys_ioctl+0xfc/0x170 [ 1206.370727][ T6685] do_syscall_64+0x15f/0xf80 [ 1206.375485][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.381539][ T6685] [ 1206.383849][ T6685] -> (&new->fa_lock){....}-{3:3} { [ 1206.389011][ T6685] INITIAL USE at: [ 1206.392891][ T6685] lock_acquire+0x106/0x350 [ 1206.398948][ T6685] _raw_write_lock_irq+0x3d/0x50 [ 1206.405440][ T6685] fasync_remove_entry+0xf1/0x1c0 [ 1206.412027][ T6685] __fput+0x890/0xa60 [ 1206.417566][ T6685] task_work_run+0x1d9/0x270 [ 1206.423711][ T6685] exit_to_user_mode_loop+0xed/0x480 [ 1206.430550][ T6685] do_syscall_64+0x33e/0xf80 [ 1206.436694][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.444138][ T6685] INITIAL READ USE at: [ 1206.448462][ T6685] lock_acquire+0x106/0x350 [ 1206.454974][ T6685] _raw_read_lock_irqsave+0x48/0x60 [ 1206.462187][ T6685] kill_fasync+0x199/0x4d0 [ 1206.468613][ T6685] pipe_release+0x19c/0x330 [ 1206.475106][ T6685] __fput+0x44f/0xa60 [ 1206.481079][ T6685] task_work_run+0x1d9/0x270 [ 1206.487665][ T6685] exit_to_user_mode_loop+0xed/0x480 [ 1206.494942][ T6685] do_syscall_64+0x33e/0xf80 [ 1206.501526][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.509404][ T6685] } [ 1206.511889][ T6685] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1206.520552][ T6685] ... acquired at: [ 1206.524338][ T6685] _raw_read_lock_irqsave+0x48/0x60 [ 1206.529699][ T6685] kill_fasync+0x199/0x4d0 [ 1206.534301][ T6685] evdev_pass_values+0x627/0xbd0 [ 1206.539408][ T6685] evdev_events+0x1e6/0x340 [ 1206.544095][ T6685] input_pass_values+0x288/0x890 [ 1206.549201][ T6685] input_event_dispose+0x330/0x6b0 [ 1206.554477][ T6685] input_inject_event+0x1dc/0x330 [ 1206.559663][ T6685] evdev_write+0x325/0x4c0 [ 1206.564250][ T6685] vfs_write+0x29a/0xb90 [ 1206.568658][ T6685] ksys_write+0x150/0x270 [ 1206.573153][ T6685] do_syscall_64+0x15f/0xf80 [ 1206.577938][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.583992][ T6685] [ 1206.586313][ T6685] [ 1206.586313][ T6685] the dependencies between the lock to be acquired [ 1206.586322][ T6685] and SOFTIRQ-irq-unsafe lock: [ 1206.599811][ T6685] -> (tasklist_lock){.+.+}-{3:3} { [ 1206.605017][ T6685] HARDIRQ-ON-R at: [ 1206.609069][ T6685] lock_acquire+0x106/0x350 [ 1206.615388][ T6685] _raw_read_lock+0x36/0x50 [ 1206.621702][ T6685] __do_wait+0xde/0x740 [ 1206.627676][ T6685] do_wait+0x1e7/0x510 [ 1206.633565][ T6685] kernel_wait+0xd6/0x1c0 [ 1206.639715][ T6685] call_usermodehelper_exec_work+0xbe/0x230 [ 1206.647417][ T6685] process_scheduled_works+0xb5d/0x1860 [ 1206.654783][ T6685] worker_thread+0xa53/0xfc0 [ 1206.661192][ T6685] kthread+0x388/0x470 [ 1206.667075][ T6685] ret_from_fork+0x514/0xb70 [ 1206.673477][ T6685] ret_from_fork_asm+0x1a/0x30 [ 1206.680059][ T6685] SOFTIRQ-ON-R at: [ 1206.684117][ T6685] lock_acquire+0x106/0x350 [ 1206.690447][ T6685] _raw_read_lock+0x36/0x50 [ 1206.696786][ T6685] __do_wait+0xde/0x740 [ 1206.702775][ T6685] do_wait+0x1e7/0x510 [ 1206.708679][ T6685] kernel_wait+0xd6/0x1c0 [ 1206.714842][ T6685] call_usermodehelper_exec_work+0xbe/0x230 [ 1206.722553][ T6685] process_scheduled_works+0xb5d/0x1860 [ 1206.729915][ T6685] worker_thread+0xa53/0xfc0 [ 1206.736324][ T6685] kthread+0x388/0x470 [ 1206.742213][ T6685] ret_from_fork+0x514/0xb70 [ 1206.748624][ T6685] ret_from_fork_asm+0x1a/0x30 [ 1206.755213][ T6685] INITIAL USE at: [ 1206.759190][ T6685] lock_acquire+0x106/0x350 [ 1206.765426][ T6685] _raw_write_lock_irq+0x3d/0x50 [ 1206.772103][ T6685] copy_process+0x2b4c/0x4440 [ 1206.778522][ T6685] kernel_clone+0x284/0x8f0 [ 1206.784760][ T6685] user_mode_thread+0x110/0x180 [ 1206.791436][ T6685] rest_init+0x23/0x300 [ 1206.797334][ T6685] start_kernel+0x38a/0x3e0 [ 1206.803574][ T6685] x86_64_start_reservations+0x24/0x30 [ 1206.810767][ T6685] x86_64_start_kernel+0x143/0x1c0 [ 1206.817611][ T6685] common_startup_64+0x13e/0x147 [ 1206.824285][ T6685] INITIAL READ USE at: [ 1206.828692][ T6685] lock_acquire+0x106/0x350 [ 1206.835361][ T6685] _raw_read_lock+0x36/0x50 [ 1206.842027][ T6685] __do_wait+0xde/0x740 [ 1206.848351][ T6685] do_wait+0x1e7/0x510 [ 1206.854613][ T6685] kernel_wait+0xd6/0x1c0 [ 1206.861115][ T6685] call_usermodehelper_exec_work+0xbe/0x230 [ 1206.869178][ T6685] process_scheduled_works+0xb5d/0x1860 [ 1206.876890][ T6685] worker_thread+0xa53/0xfc0 [ 1206.883645][ T6685] kthread+0x388/0x470 [ 1206.889889][ T6685] ret_from_fork+0x514/0xb70 [ 1206.896642][ T6685] ret_from_fork_asm+0x1a/0x30 [ 1206.903570][ T6685] } [ 1206.906144][ T6685] ... key at: [] tasklist_lock+0x18/0x40 [ 1206.913948][ T6685] ... acquired at: [ 1206.917825][ T6685] _raw_read_lock+0x36/0x50 [ 1206.922493][ T6685] send_sigio+0x101/0x370 [ 1206.927000][ T6685] dnotify_handle_event+0x169/0x440 [ 1206.932385][ T6685] fsnotify+0x1831/0x1ae0 [ 1206.936893][ T6685] path_openat+0x15c2/0x3860 [ 1206.941659][ T6685] do_file_open+0x23e/0x4a0 [ 1206.946333][ T6685] do_sys_openat2+0x113/0x200 [ 1206.951191][ T6685] __x64_sys_open+0x11e/0x150 [ 1206.956039][ T6685] do_syscall_64+0x15f/0xf80 [ 1206.960798][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.966867][ T6685] [ 1206.969192][ T6685] -> (&f_owner->lock){....}-{3:3} { [ 1206.974409][ T6685] INITIAL USE at: [ 1206.978300][ T6685] lock_acquire+0x106/0x350 [ 1206.984376][ T6685] _raw_write_lock_irq+0x3d/0x50 [ 1206.990887][ T6685] __f_setown+0x67/0x370 [ 1206.996693][ T6685] do_fcntl+0x171c/0x1a20 [ 1207.002587][ T6685] __se_sys_fcntl+0xc8/0x150 [ 1207.008743][ T6685] do_syscall_64+0x15f/0xf80 [ 1207.014896][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.022347][ T6685] INITIAL READ USE at: [ 1207.026664][ T6685] lock_acquire+0x106/0x350 [ 1207.033155][ T6685] _raw_read_lock_irq+0x45/0x60 [ 1207.040022][ T6685] do_fcntl+0xaa3/0x1a20 [ 1207.046262][ T6685] __se_sys_fcntl+0xc8/0x150 [ 1207.052844][ T6685] do_syscall_64+0x15f/0xf80 [ 1207.059424][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.067305][ T6685] } [ 1207.069795][ T6685] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1207.078634][ T6685] ... acquired at: [ 1207.082422][ T6685] _raw_read_lock_irqsave+0x48/0x60 [ 1207.087783][ T6685] send_sigio+0x38/0x370 [ 1207.092197][ T6685] kill_fasync+0x24d/0x4d0 [ 1207.096780][ T6685] lease_break_callback+0x26/0x30 [ 1207.101978][ T6685] __break_lease+0x81f/0x1ea0 [ 1207.106820][ T6685] do_dentry_open+0x1010/0x14e0 [ 1207.111838][ T6685] vfs_open+0x3b/0x340 [ 1207.116072][ T6685] path_openat+0x2e08/0x3860 [ 1207.120826][ T6685] do_file_open+0x23e/0x4a0 [ 1207.125494][ T6685] do_sys_openat2+0x113/0x200 [ 1207.130331][ T6685] __x64_sys_openat+0x138/0x170 [ 1207.135343][ T6685] do_syscall_64+0x15f/0xf80 [ 1207.140102][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.146157][ T6685] [ 1207.148465][ T6685] [ 1207.148465][ T6685] stack backtrace: [ 1207.154340][ T6685] CPU: 0 UID: 0 PID: 6685 Comm: syz.0.15437 Tainted: G L syzkaller #0 PREEMPT(full) [ 1207.154363][ T6685] Tainted: [L]=SOFTLOCKUP [ 1207.154369][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1207.154380][ T6685] Call Trace: [ 1207.154394][ T6685] [ 1207.154402][ T6685] dump_stack_lvl+0xe8/0x150 [ 1207.154421][ T6685] __lock_acquire+0x2a94/0x2cf0 [ 1207.154446][ T6685] ? send_sigio+0x38/0x370 [ 1207.154468][ T6685] lock_acquire+0x106/0x350 [ 1207.154484][ T6685] ? send_sigio+0x38/0x370 [ 1207.154505][ T6685] ? kill_fasync+0x199/0x4d0 [ 1207.154527][ T6685] ? lock_acquire+0x106/0x350 [ 1207.154543][ T6685] ? kill_fasync+0x199/0x4d0 [ 1207.154566][ T6685] _raw_read_lock_irqsave+0x48/0x60 [ 1207.154585][ T6685] ? send_sigio+0x38/0x370 [ 1207.154606][ T6685] send_sigio+0x38/0x370 [ 1207.154628][ T6685] kill_fasync+0x24d/0x4d0 [ 1207.154650][ T6685] ? kill_fasync+0x53/0x4d0 [ 1207.154672][ T6685] lease_break_callback+0x26/0x30 [ 1207.154697][ T6685] __break_lease+0x81f/0x1ea0 [ 1207.154722][ T6685] ? __pfx___break_lease+0x10/0x10 [ 1207.154743][ T6685] ? __pfx_apparmor_file_open+0x10/0x10 [ 1207.154761][ T6685] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1207.154785][ T6685] do_dentry_open+0x1010/0x14e0 [ 1207.154808][ T6685] vfs_open+0x3b/0x340 [ 1207.154824][ T6685] ? path_openat+0x2df0/0x3860 [ 1207.154847][ T6685] path_openat+0x2e08/0x3860 [ 1207.154873][ T6685] ? __pfx_stack_trace_save+0x10/0x10 [ 1207.154898][ T6685] ? stack_depot_save_flags+0x33/0x810 [ 1207.154922][ T6685] ? __pfx_path_openat+0x10/0x10 [ 1207.154943][ T6685] ? __x64_sys_openat+0x138/0x170 [ 1207.154963][ T6685] ? __lock_acquire+0x6b5/0x2cf0 [ 1207.154983][ T6685] do_file_open+0x23e/0x4a0 [ 1207.155006][ T6685] ? __pfx_do_file_open+0x10/0x10 [ 1207.155034][ T6685] ? _raw_spin_unlock+0x28/0x50 [ 1207.155050][ T6685] ? alloc_fd+0x64b/0x6c0 [ 1207.155071][ T6685] do_sys_openat2+0x113/0x200 [ 1207.155089][ T6685] ? __se_sys_futex+0x3a8/0x450 [ 1207.155109][ T6685] ? __pfx_do_sys_openat2+0x10/0x10 [ 1207.155128][ T6685] ? rcu_is_watching+0x15/0xb0 [ 1207.155150][ T6685] __x64_sys_openat+0x138/0x170 [ 1207.155169][ T6685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.155185][ T6685] do_syscall_64+0x15f/0xf80 [ 1207.155205][ T6685] ? trace_irq_disable+0x3b/0x140 [ 1207.155229][ T6685] ? clear_bhb_loop+0x40/0x90 [ 1207.155247][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.155264][ T6685] RIP: 0033:0x7fa66059cdd9 [ 1207.155280][ T6685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.155295][ T6685] RSP: 002b:00007fa66140f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1207.155312][ T6685] RAX: ffffffffffffffda RBX: 00007fa660815fa0 RCX: 00007fa66059cdd9 [ 1207.155325][ T6685] RDX: 000000000010103f RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1207.155337][ T6685] RBP: 00007fa660632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1207.155347][ T6685] R10: 0000000000000140 R11: 0000000000000246 R12: 0000000000000000 [ 1207.155358][ T6685] R13: 00007fa660816038 R14: 00007fa660815fa0 R15: 00007fa66093fa48 [ 1207.155375][ T6685]