last executing test programs: 10m16.980730168s ago: executing program 32 (id=4454): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0x2201, &(0x7f00000000c0)={0x2, 0x6, 0x0, 0x0}) 10m8.894591132s ago: executing program 33 (id=4480): r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x1) r1 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x3) 7m5.424607987s ago: executing program 34 (id=6467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x802d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x1, 0x0, 0x0, 0xff, 0x100, @void}, "b68ed34f131c03e57e518e4d0800000040"}}}}, 0xfdef) 7m1.384102114s ago: executing program 5 (id=6511): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r1, 0x4004480d, &(0x7f0000000080)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) 6m59.935616504s ago: executing program 5 (id=6520): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000340)) close_range(r0, 0xffffffffffffffff, 0x0) 6m59.748685387s ago: executing program 5 (id=6522): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 6m59.636221128s ago: executing program 5 (id=6523): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x44000, 0x0) 6m58.609875899s ago: executing program 5 (id=6531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) close(0x4) 6m58.150857932s ago: executing program 5 (id=6535): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x80000000, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private0={0xfc, 0x0, '\x00', 0x1}, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) 6m57.60236209s ago: executing program 35 (id=6535): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x80000000, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private0={0xfc, 0x0, '\x00', 0x1}, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) 3m14.384527879s ago: executing program 7 (id=9077): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r0}) 3m14.367676242s ago: executing program 7 (id=9078): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 3m11.219552873s ago: executing program 7 (id=9110): syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x1c, 0x2, 0xeffe, 0x9, "8d510291002a49500d000080009b1dffff6a1d73f2000000fffffffc00fbf29c"}) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) 3m8.747561622s ago: executing program 8 (id=9136): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="add124a0c9a43b2292136226b5ba7ada5317f080e8b9"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@getsa={0x28, 0x12, 0x20, 0x70bd26, 0x25dfdbfb, {@in=@local, 0x4d2, 0x2, 0x3c}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 3m8.080614036s ago: executing program 7 (id=9141): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xc) 3m7.060905275s ago: executing program 7 (id=9146): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x121a02) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xb38a, 0x80, 0x8002, 0x272}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x101, 0x11, 0x5, 0x0, 0x0) 3m6.799786823s ago: executing program 8 (id=9149): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macsec0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x5, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) 3m6.567810764s ago: executing program 7 (id=9151): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x6, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "715150b1971bbe75", "8c419c4cb217d59a5e2108c76ca18dad", "8869fdbb", "ddc7586e28e54682"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 3m5.8892427s ago: executing program 36 (id=9151): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x6, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "715150b1971bbe75", "8c419c4cb217d59a5e2108c76ca18dad", "8869fdbb", "ddc7586e28e54682"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 3m5.824476929s ago: executing program 8 (id=9154): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000001c0)) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000d1a000/0x2000)=nil, 0x1, 0x0, 0x0, 0x237, 0x0, 0x2, 0x0, 0x2}) 3m5.730418799s ago: executing program 8 (id=9156): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xc) 3m4.705517443s ago: executing program 8 (id=9164): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x1) 3m4.331880499s ago: executing program 8 (id=9168): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902"], 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/pm_print_times', 0x2242, 0x114) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/4\x00') close_range(r0, 0xffffffffffffffff, 0x0) 3m3.950059511s ago: executing program 37 (id=9168): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902"], 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/pm_print_times', 0x2242, 0x114) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/4\x00') close_range(r0, 0xffffffffffffffff, 0x0) 2m30.247578939s ago: executing program 1 (id=9448): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, &(0x7f0000000080)={0x0, 0x0, 0x7fff}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f00000001c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 2m30.026892081s ago: executing program 6 (id=9441): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 2m29.966689573s ago: executing program 1 (id=9442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) r3 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) readv(r3, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0x20000}, {0x0, 0xffb6}], 0x2) 2m29.822436247s ago: executing program 6 (id=9444): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000001c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x40080, &(0x7f000005ffe4)={0xa, 0xffff, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x7b) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfc, 0x0, 0x0, 0x40, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x0, 0x0) 2m29.664742027s ago: executing program 1 (id=9445): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbee2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) 2m29.53331789s ago: executing program 6 (id=9446): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x26000, 0xe9, &(0x7f0000000380)=""/233}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x40000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) 2m29.380110629s ago: executing program 6 (id=9447): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) 2m29.185160534s ago: executing program 6 (id=9449): r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x1) poll(&(0x7f0000000000)=[{r0, 0x10}], 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 2m28.751987341s ago: executing program 6 (id=9451): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2m27.736141116s ago: executing program 38 (id=9451): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2m26.557604261s ago: executing program 1 (id=9459): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) 2m26.276465081s ago: executing program 1 (id=9462): r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x1) poll(&(0x7f0000000000)=[{r0, 0x10}], 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 2m25.24654262s ago: executing program 1 (id=9466): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={r2, 0x371fee32, 0xa2, 0x98a}, &(0x7f0000000200)=0x10) 2m24.850358018s ago: executing program 39 (id=9466): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={r2, 0x371fee32, 0xa2, 0x98a}, &(0x7f0000000200)=0x10) 5.719739162s ago: executing program 2 (id=10447): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x1) r1 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r1, 0x1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r2) 5.607401352s ago: executing program 2 (id=10449): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='lp', 0x2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.163377766s ago: executing program 0 (id=10458): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0x12d) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000100)=@usbdevfs_driver={0x80000001, 0x6, 0x0}) 4.135667492s ago: executing program 2 (id=10459): r0 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xa}, {0xb}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x0, 0xfffffffd, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x4, 0x8, 0x409, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000000)={0x4, 0x7, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000100000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9e}) 3.867249057s ago: executing program 0 (id=10462): r0 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r0, &(0x7f0000000700)=""/115, 0x73, 0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x8}) close(r0) 3.632802971s ago: executing program 0 (id=10464): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206030000000000000000000000000011000300686173683a6e65742c6e657400000000050001000700000005000500020000000900020073797a30000000000500040000000000140007800800084000000078050014"], 0x60}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0x122, @tick=0x7, 0x0, {}, 0xfc, 0x0, 0x8}) 3.403988328s ago: executing program 0 (id=10466): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x0, 0xd13a5dbb099f029b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.719526089s ago: executing program 2 (id=10475): io_submit(0x0, 0x0, &(0x7f0000000140)) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040ba124b0700000000000109022400010000102c09040005010300010009210080090122180009058103"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 2.406389372s ago: executing program 9 (id=10479): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000340)="1735", 0x2, 0x240148c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x10022, 0x0) 2.299156816s ago: executing program 9 (id=10481): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x0, 0x7, 0x5, 0x8, 0xffffffff, 0x7}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000006000)=@vmx={0x0, 0x0, 0x2080, {0x54000, 0x8080000, {}, 0x1, 0x6}, {"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", "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"}}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48e, 0x0, 0x40}]}) 1.974132189s ago: executing program 9 (id=10482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) 1.768263802s ago: executing program 9 (id=10483): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x4, 0x0, &(0x7f0000000080)) 1.688747429s ago: executing program 9 (id=10484): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) tee(r0, r4, 0xf3a, 0x4) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) 1.42551899s ago: executing program 9 (id=10485): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000040)=ANY=[]) 1.162349189s ago: executing program 4 (id=10489): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) 1.097902095s ago: executing program 4 (id=10490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5656d, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0x1, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) 1.010230865s ago: executing program 2 (id=10492): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x9) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 977.650605ms ago: executing program 3 (id=10493): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 920.295777ms ago: executing program 4 (id=10494): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e28, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 916.503211ms ago: executing program 3 (id=10495): r0 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xc3) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xe6) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xffffffffffffffff) 784.559212ms ago: executing program 4 (id=10496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x7, 0xff07}, {{0x2, 0x1}, {0x4, 0x1}}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 778.644588ms ago: executing program 3 (id=10497): socket$inet6_tcp(0xa, 0x1, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x24000000) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000180640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB="601810"], 0x0) 591.887935ms ago: executing program 3 (id=10498): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000001007b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) 258.355376ms ago: executing program 0 (id=10499): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x61646, 0x3020}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x480) 258.170867ms ago: executing program 3 (id=10500): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8820) 257.986636ms ago: executing program 4 (id=10501): write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000001300)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1b}}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 111.121826ms ago: executing program 3 (id=10502): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040), 0x4) read(r0, &(0x7f0000000080)=""/135, 0x87) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 25.161724ms ago: executing program 2 (id=10503): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00100000000000000000000c000f"], 0x6c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 9.450173ms ago: executing program 0 (id=10504): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) 0s ago: executing program 4 (id=10505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): dv_slave_1 [ 881.593984][T28221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9349'. [ 881.788718][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.792499][ T264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.793506][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.822115][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.094072][T15195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.094107][T15195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.202424][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.202452][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.312077][ T52] Bluetooth: hci1: command tx timeout [ 884.017123][T28301] bond1: entered allmulticast mode [ 884.413589][T28322] netlink: 92 bytes leftover after parsing attributes in process `syz.9.9377'. [ 884.419504][T28322] netlink: 92 bytes leftover after parsing attributes in process `syz.9.9377'. [ 884.577559][T28328] loop5: detected capacity change from 0 to 7 [ 885.145197][T28334] loop5: detected capacity change from 7 to 0 [ 885.145302][T28328] ldm_validate_partition_table(): Disk read failed. [ 885.145334][T28328] Dev loop5: unable to read RDB block 0 [ 885.145364][T28328] loop5: unable to read partition table [ 885.145585][T28328] loop5: partition table beyond EOD, truncated [ 885.145622][T28328] loop_reread_partitions: partition scan of loop5 (CD:ôÿŒŠÒqÑn²;;ÖPÏ ) failed (rc=-5) [ 886.013676][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9396'. [ 886.013708][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9396'. [ 886.071968][T28381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 887.221583][ T5621] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 887.372420][ T5621] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 887.374006][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.380920][ T5621] usb 4-1: config 0 descriptor?? [ 887.608703][ T5621] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 887.800019][T20086] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 887.835118][ T5621] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 887.835139][ T5621] [drm] Initialized udl on minor 1 [ 887.968799][T20086] usb 2-1: Using ep0 maxpacket: 16 [ 887.972291][T20086] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 887.989164][T20086] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.989237][T20086] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.989262][T20086] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 887.989335][T20086] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.040256][T20086] usb 2-1: config 0 descriptor?? [ 888.373276][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 888.515857][T20086] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0089/input/input163 [ 888.534151][ T10] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 888.547381][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.570900][ T10] usb 10-1: config 0 descriptor?? [ 888.594899][ T10] cp210x 10-1:0.0: cp210x converter detected [ 888.600327][T20086] microsoft 0003:045E:07DA.0089: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 889.002885][ T10] cp210x 10-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 889.035632][ T10] usb 10-1: cp210x converter now attached to ttyUSB0 [ 889.096025][T20090] usb 2-1: USB disconnect, device number 96 [ 889.213667][T20082] usb 10-1: USB disconnect, device number 3 [ 889.264772][T20082] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 889.265357][T20082] cp210x 10-1:0.0: device disconnected [ 889.574515][T28495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9423'. [ 889.577688][T28495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9423'. [ 889.892259][T28507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9426'. [ 889.951205][T28511] netlink: 27 bytes leftover after parsing attributes in process `syz.1.9428'. [ 890.330953][T28529] binder: 28528:28529 ioctl c0306201 80000640 returned -22 [ 890.557597][ T31] audit: type=1326 audit(1791075448.774:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28534 comm="syz.6.9436" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f950ec code=0x0 [ 892.913175][ T5621] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 892.914150][ T5621] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 892.929554][T20086] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 892.936777][T20086] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 892.937031][T20086] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 892.960809][ T5621] usb 4-1: USB disconnect, device number 42 [ 894.569662][T19113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 894.583599][T19113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 894.588045][T19113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 894.609597][T19113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 894.613368][T19113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 895.561450][T20082] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 895.710888][T28590] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.711072][T28590] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.712639][T20082] usb 4-1: Using ep0 maxpacket: 8 [ 895.715411][T20082] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 895.722821][T20082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 895.722973][T20082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.789204][T20082] usb 4-1: config 0 descriptor?? [ 895.816691][T28590] bridge_slave_0: entered allmulticast mode [ 895.836187][T28590] bridge_slave_0: entered promiscuous mode [ 895.865776][T28590] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.874306][T28590] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.880139][T28590] bridge_slave_1: entered allmulticast mode [ 895.910537][T28590] bridge_slave_1: entered promiscuous mode [ 896.047549][T20082] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 896.214090][T28590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.316533][ T9437] usb 4-1: USB disconnect, device number 43 [ 896.435433][T28590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.603495][T28590] team0: Port device team_slave_0 added [ 896.633085][T28590] team0: Port device team_slave_1 added [ 896.671683][ T52] Bluetooth: hci4: command tx timeout [ 897.035387][T28590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.035410][T28590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.036256][T28590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.038412][T28590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.038427][T28590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.038457][T28590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.403315][T28590] hsr_slave_0: entered promiscuous mode [ 897.408215][T28590] hsr_slave_1: entered promiscuous mode [ 897.412836][T28590] debugfs: 'hsr0' already exists in 'hsr' [ 897.412863][T28590] Cannot create hsr debugfs directory [ 897.515780][T19113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 897.530844][T19113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 897.541505][T19113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 897.543200][T19113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 897.543866][T19113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 897.691452][ T5621] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 897.842839][ T5621] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 897.844115][ T5621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.844148][ T5621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.844172][ T5621] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 897.844216][ T5621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.849214][ T5621] usb 3-1: config 0 descriptor?? [ 898.327647][ T5621] plantronics 0003:047F:FFFF.008A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 898.626584][ T5621] usb 3-1: USB disconnect, device number 104 [ 898.751599][ T52] Bluetooth: hci4: command tx timeout [ 899.051240][T15195] vlan1: left promiscuous mode [ 899.051266][T15195] bridge_slave_0: left promiscuous mode [ 899.052257][T15195] bridge0: port 3(vlan1) entered disabled state [ 899.080558][T15195] veth0: left allmulticast mode [ 899.080587][T15195] veth0: left promiscuous mode [ 899.080812][T15195] bridge0: port 2(veth0) entered disabled state [ 899.108664][T15195] dvmrp8: left allmulticast mode [ 899.110723][T15195] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 899.214573][T15195] batman_adv: batadv0: Removing interface: ip6gretap1 [ 899.566347][T15195] bond0 (unregistering): left promiscuous mode [ 899.566952][T15195] bond0 (unregistering): Released all slaves [ 899.600449][T15195] bond1 (unregistering): Released all slaves [ 899.637703][ T52] Bluetooth: hci3: command tx timeout [ 899.955188][T15195] ovs-dp0: left promiscuous mode [ 900.438685][T15195] tipc: Disabling bearer [ 900.438834][T15195] tipc: Left network mode [ 900.831380][ T52] Bluetooth: hci4: command tx timeout [ 900.845779][T28635] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.847522][T28635] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.847688][T28635] bridge_slave_0: entered allmulticast mode [ 900.898635][T28635] bridge_slave_0: entered promiscuous mode [ 900.952617][T28635] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.952734][T28635] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.952922][T28635] bridge_slave_1: entered allmulticast mode [ 900.954997][T28635] bridge_slave_1: entered promiscuous mode [ 901.220347][T28635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.232738][T28635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.351432][ T5621] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 901.444338][T28635] team0: Port device team_slave_0 added [ 901.484155][T28635] team0: Port device team_slave_1 added [ 901.502223][ T5621] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 901.520902][ T5621] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.520939][ T5621] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.520981][ T5621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.712656][ T52] Bluetooth: hci3: command tx timeout [ 902.198866][T28635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.198890][T28635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.198920][T28635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.255045][ T5621] wacom 0003:056A:033B.008B: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 902.274004][ T5621] wacom 0003:056A:033B.008B: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 902.280673][ T5621] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.008B/input/input164 [ 902.312844][T28715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 902.413216][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 902.418069][T28635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.418089][T28635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.418119][T28635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.719528][ T9437] usb 3-1: USB disconnect, device number 105 [ 902.897671][T28635] hsr_slave_0: entered promiscuous mode [ 902.900365][T28635] hsr_slave_1: entered promiscuous mode [ 902.901226][T28635] debugfs: 'hsr0' already exists in 'hsr' [ 902.901248][T28635] Cannot create hsr debugfs directory [ 902.922684][ T52] Bluetooth: hci4: command tx timeout [ 902.935840][T15195] batadv0: left promiscuous mode [ 903.241533][ T5621] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 903.393880][ T5621] usb 10-1: unable to get BOS descriptor or descriptor too short [ 903.393936][ T5621] usb 10-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 903.396109][ T5621] usb 10-1: config 129 has an invalid interface number: 80 but max is 0 [ 903.396138][ T5621] usb 10-1: config 129 has an invalid interface number: 5 but max is 0 [ 903.396160][ T5621] usb 10-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 903.396185][ T5621] usb 10-1: config 129 has no interface number 0 [ 903.396203][ T5621] usb 10-1: config 129 has no interface number 1 [ 903.396262][ T5621] usb 10-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 903.396318][ T5621] usb 10-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 903.396358][ T5621] usb 10-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 903.396388][ T5621] usb 10-1: config 129 interface 80 has no altsetting 0 [ 903.396408][ T5621] usb 10-1: config 129 interface 5 has no altsetting 0 [ 903.521478][ T5621] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.521510][ T5621] usb 10-1: SerialNumber: syz [ 903.800792][ T5621] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 903.800881][ T5621] usb 10-1: MIDIStreaming interface descriptor not found [ 903.803089][ T52] Bluetooth: hci3: command tx timeout [ 903.858206][T28748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9510'. [ 903.917177][ T5621] usb 10-1: USB disconnect, device number 4 [ 904.005937][T14203] udevd[14203]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 904.267196][T28590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 904.286034][T28590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 904.287190][T28590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 904.323187][T28590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 904.435014][T28590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 904.458114][T28590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 904.461128][T28590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 904.540390][T28590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 905.039568][T15195] IPVS: stop unused estimator thread 0... [ 905.783771][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 905.854176][T28590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 905.871891][ T52] Bluetooth: hci3: command tx timeout [ 905.987829][T28590] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.237985][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.238097][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.298666][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.298775][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.936752][T28590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.169416][T28590] veth0_vlan: entered promiscuous mode [ 907.213746][T28590] veth1_vlan: entered promiscuous mode [ 907.379960][T28590] veth0_macvtap: entered promiscuous mode [ 907.427236][T28590] veth1_macvtap: entered promiscuous mode [ 907.480891][T28590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.503599][T28635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 907.529793][T28635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 907.544490][T28590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.544785][T28635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 907.573340][T28635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 907.574372][T28635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 907.607666][T28635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 907.639680][T28635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 907.661603][T28635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 907.662748][T15195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.662798][T15195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.662839][T15195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.803220][T15195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.055149][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.055173][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.163079][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.163104][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.351188][T28635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.415201][T28635] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.453505][T15195] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.453602][T15195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.493431][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.493572][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.516285][T20090] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 908.674340][T20090] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 908.676376][T20090] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 908.676416][T20090] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.676438][T20090] usb 4-1: config 0 has no interface number 0 [ 908.678777][T20090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.678804][T20090] usb 4-1: Product: syz [ 908.678821][T20090] usb 4-1: Manufacturer: syz [ 908.678838][T20090] usb 4-1: SerialNumber: syz [ 908.742470][T20090] usb 4-1: config 0 descriptor?? [ 908.760969][T20090] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 908.863491][T28635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.971515][T28635] veth0_vlan: entered promiscuous mode [ 909.007160][T28635] veth1_vlan: entered promiscuous mode [ 909.101178][T28635] veth0_macvtap: entered promiscuous mode [ 909.129578][T28635] veth1_macvtap: entered promiscuous mode [ 909.203043][T28635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.235925][T28635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.271535][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.271920][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.271999][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.272037][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.428980][T24570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.429001][T24570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.593717][T15195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.593741][T15195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.721630][ T5621] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 910.873478][ T5621] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 910.874672][ T5621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.874701][ T5621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.874738][ T5621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.879806][ T5621] usb 5-1: config 0 descriptor?? [ 911.341650][T28948] loop2: detected capacity change from 0 to 7 [ 911.347499][T28948] Dev loop2: unable to read RDB block 7 [ 911.347531][T28948] loop2: AHDI p1 p2 p3 [ 911.347555][T28948] loop2: partition table partially beyond EOD, truncated [ 911.350025][T28948] loop2: p1 start 1601398130 is beyond EOD, truncated [ 911.350053][T28948] loop2: p2 start 1702059890 is beyond EOD, truncated [ 911.444202][T20085] usb 4-1: USB disconnect, device number 44 [ 911.522271][ T5621] hid-steam 0003:28DE:1142.008C: unknown main item tag 0x0 [ 911.522312][ T5621] hid-steam 0003:28DE:1142.008C: unknown main item tag 0x0 [ 911.522341][ T5621] hid-steam 0003:28DE:1142.008C: unknown main item tag 0x0 [ 911.522370][ T5621] hid-steam 0003:28DE:1142.008C: unknown main item tag 0x0 [ 911.522398][ T5621] hid-steam 0003:28DE:1142.008C: unknown main item tag 0x0 [ 911.583741][ T5621] hid-steam 0003:28DE:1142.008C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 912.034768][T20085] usb 5-1: USB disconnect, device number 35 [ 913.199749][T29000] netlink: 'syz.0.9568': attribute type 1 has an invalid length. [ 914.019108][ T52] Bluetooth: hci3: hcon ffff8880227d8000 sent 1 < count 6 [ 914.019170][ T52] Bluetooth: hci3: hcon ffff8880227d8000 sent 0 < count 8 [ 914.043201][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 915.091546][ T5621] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 915.098196][T29039] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.098928][T29039] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.243034][ T5621] usb 4-1: Using ep0 maxpacket: 32 [ 915.243951][ T5621] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 915.247142][ T5621] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 915.247170][ T5621] usb 4-1: config 2 has no interface number 0 [ 915.247215][ T5621] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 915.247247][ T5621] usb 4-1: config 2 interface 88 has no altsetting 0 [ 915.261469][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 915.261552][ T5621] usb 4-1: Product: syz [ 915.261603][ T5621] usb 4-1: Manufacturer: syz [ 915.261645][ T5621] usb 4-1: SerialNumber: syz [ 915.352732][T29035] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 915.478672][T29039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.516247][T29039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.566530][T29035] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 915.981845][ T13] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.984358][ T49] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.984405][ T49] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.984442][ T49] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.031598][ T52] Bluetooth: hci3: command 0x2016 tx timeout [ 916.597112][ T5621] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 916.597374][ T5621] asix 4-1:2.88: probe with driver asix failed with error -71 [ 916.624765][ T5621] usb 4-1: USB disconnect, device number 45 [ 917.383448][T29088] bridge0: port 3(veth0) entered blocking state [ 917.383665][T29088] bridge0: port 3(veth0) entered disabled state [ 917.383860][T29088] veth0: entered allmulticast mode [ 917.388445][T29088] veth0: entered promiscuous mode [ 918.082118][T29106] netlink: 'syz.3.9602': attribute type 1 has an invalid length. [ 918.111655][ T52] Bluetooth: hci3: command 0x2016 tx timeout [ 919.643549][T29162] bridge0: port 3(veth0) entered blocking state [ 919.668334][T29162] bridge0: port 3(veth0) entered disabled state [ 919.668559][T29162] veth0: entered allmulticast mode [ 919.687156][T29162] veth0: entered promiscuous mode [ 919.688022][T29162] bridge0: port 3(veth0) entered blocking state [ 919.688156][T29162] bridge0: port 3(veth0) entered forwarding state [ 920.019753][T29173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9621'. [ 920.964340][T29200] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.965068][T29200] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.279147][T29200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 921.296112][T29200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 921.712263][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.712346][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.712385][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.712423][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.611418][ T5621] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 922.762195][ T5621] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 922.763636][ T5621] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.770075][ T5621] usb 10-1: config 0 descriptor?? [ 923.000358][ T5621] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 923.179952][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 923.259430][ T5621] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 923.259460][ T5621] [drm] Initialized udl on minor 1 [ 924.027323][T20090] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 924.185523][T20090] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 924.186503][T20090] usb 5-1: config 0 has no interfaces? [ 924.190372][T20090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.190400][T20090] usb 5-1: Product: syz [ 924.190417][T20090] usb 5-1: Manufacturer: syz [ 924.190435][T20090] usb 5-1: SerialNumber: syz [ 924.220244][T20090] usb 5-1: config 0 descriptor?? [ 924.670194][T29275] bridge0: port 3(veth0) entered disabled state [ 924.670642][T29275] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.671454][T29275] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.827310][T20090] usb 5-1: USB disconnect, device number 36 [ 925.047866][T29275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.073551][T29275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.622509][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.622563][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.622601][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.622639][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.161492][ T9372] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 927.325902][ T9372] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 927.327351][ T9372] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.327407][ T9372] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 927.327463][ T9372] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 927.327510][ T9372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.472543][T29346] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.473933][T29346] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.593223][T29346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.619115][T29346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 927.633377][ T9372] ttusb_dec_send_command: result bulk message failed: error -8 [ 927.633659][ T9372] ttusb-dec 3-1:1.0: probe with driver ttusb-dec failed with error -8 [ 927.657708][ T9372] usb 3-1: USB disconnect, device number 106 [ 927.894284][T15195] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.894340][T15195] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.894379][T15195] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.894419][T15195] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.011447][T20090] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 928.165517][T20090] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40 [ 928.166889][T20090] usb 5-1: config 1 interface 0 has no altsetting 0 [ 928.193485][T20090] usb 5-1: string descriptor 0 read error: -22 [ 928.193637][T20090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.275342][ T5621] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 928.275797][ T5621] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 928.296389][T20085] usb 10-1: USB disconnect, device number 5 [ 928.305776][ T5621] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 928.327781][ T5621] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 928.327995][ T5621] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 928.873944][T20090] topre 0003:0853:0148.008D: unknown main item tag 0x0 [ 928.873984][T20090] topre 0003:0853:0148.008D: unknown main item tag 0x0 [ 928.874013][T20090] topre 0003:0853:0148.008D: unknown main item tag 0x0 [ 928.874040][T20090] topre 0003:0853:0148.008D: unknown main item tag 0x0 [ 928.874068][T20090] topre 0003:0853:0148.008D: unknown main item tag 0x0 [ 928.874096][T20090] topre 0003:0853:0148.008D: unknown main item tag 0x0 [ 928.874124][T20090] topre 0003:0853:0148.008D: unknown main item tag 0x0 [ 928.874152][T20090] topre 0003:0853:0148.008D: unknown main item tag 0x0 [ 928.874179][T20090] topre 0003:0853:0148.008D: unknown main item tag 0x0 [ 928.874208][T20090] topre 0003:0853:0148.008D: unknown main item tag 0x0 [ 929.158947][T20090] topre 0003:0853:0148.008D: hidraw0: USB HID vff.7f Device [HID 0853:0148] on usb-dummy_hcd.4-1/input0 [ 929.190343][T20090] usb 5-1: USB disconnect, device number 37 [ 929.448070][T29396] fido_id[29396]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 929.936260][T29418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9684'. [ 931.521027][T29477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9699'. [ 931.597799][T29477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9699'. [ 931.633855][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.633928][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.172974][T20568] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 932.201439][ T5621] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 932.323257][T20568] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 932.324651][T20568] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 932.324687][T20568] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 932.336761][T20568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.336844][T20568] usb 3-1: Product: syz [ 932.336900][T20568] usb 3-1: Manufacturer: syz [ 932.336933][T20568] usb 3-1: SerialNumber: syz [ 932.370097][ T5621] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 932.381661][ T5621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.381699][ T5621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.381735][ T5621] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 932.381782][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.440608][T20568] usb 3-1: config 0 descriptor?? [ 932.443342][T29495] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 932.453999][T29510] loop5: detected capacity change from 0 to 7 [ 932.460739][ T5621] usb 4-1: config 0 descriptor?? [ 932.465105][T29495] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 932.507273][T29510] Dev loop5: unable to read RDB block 7 [ 932.507342][T29510] loop5: AHDI p1 p2 p3 [ 932.507371][T29510] loop5: partition table partially beyond EOD, truncated [ 932.507676][T29510] loop5: p1 start 5472580 is beyond EOD, truncated [ 932.507706][T29510] loop5: p2 start 167772160 is beyond EOD, truncated [ 932.741769][T29495] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 932.741940][T29495] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 932.875624][T29516] macvlan2: entered promiscuous mode [ 932.875652][T29516] bridge0: entered promiscuous mode [ 932.986112][ T5621] plantronics 0003:047F:FFFF.008E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 933.142437][T29520] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9711'. [ 933.147949][T29520] bridge_slave_0: left allmulticast mode [ 933.147980][T29520] bridge_slave_0: left promiscuous mode [ 933.148330][T29520] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.169787][T20568] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 933.308799][ T7772] usb 4-1: USB disconnect, device number 46 [ 933.837477][T20568] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 933.876523][T20568] dm9601 3-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 06:3f:75:d7:39:74 [ 933.902740][T20568] usb 3-1: USB disconnect, device number 107 [ 933.922921][T20568] dm9601 3-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 934.179733][T29551] syzkaller0: entered promiscuous mode [ 934.179764][T29551] syzkaller0: entered allmulticast mode [ 934.665554][T29569] netlink: 276 bytes leftover after parsing attributes in process `syz.2.9722'. [ 935.944308][T29596] netlink: 276 bytes leftover after parsing attributes in process `syz.9.9733'. [ 937.990931][T29571] syz.2.9723 (29571): drop_caches: 1 [ 938.513843][ T7772] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 938.678957][ T7772] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 938.680098][ T7772] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 938.680150][ T7772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.716079][ T7772] as10x_usb: device has been detected [ 938.717036][ T7772] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 938.762150][ T7772] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 938.975545][ T7772] as10x_usb: error during firmware upload part1 [ 938.976047][ T7772] Registered device Abilis Systems DVB-Titan [ 939.816477][T20568] usb 3-1: USB disconnect, device number 108 [ 939.913490][T20568] Unregistered device Abilis Systems DVB-Titan [ 939.915366][T20568] as10x_usb: device has been disconnected [ 940.792475][T29639] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9748'. [ 940.847251][T29640] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9748'. [ 941.037996][T29578] geneve2: entered promiscuous mode [ 941.043734][T29619] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9741'. [ 941.046006][T29620] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9741'. [ 941.058126][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 40414 - 0 [ 941.058325][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 40414 - 0 [ 941.058453][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 40414 - 0 [ 941.058610][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 40414 - 0 [ 941.098879][T29639] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.106486][T29639] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.261654][T29644] syz_tun: entered allmulticast mode [ 941.262633][T29642] syz_tun: left allmulticast mode [ 942.359997][T29698] input: syz1 as /devices/virtual/input/input167 [ 943.392753][T29744] kvm: user requested TSC rate below hardware speed [ 943.412821][T29737] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 943.581989][T29753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9782'. [ 943.634638][T29753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 944.253634][T29788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9791'. [ 944.399835][T29788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 944.400996][T29792] bond1: option ad_select: unable to set because the bond device is up [ 944.417653][T29796] tipc: Started in network mode [ 944.417677][T29796] tipc: Node identity 4, cluster identity 4711 [ 944.417692][T29796] tipc: Node number set to 4 [ 944.443724][T29796] tipc: Enabled bearer , priority 0 [ 944.591871][ T7772] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 944.619365][T29805] input: syz0 as /devices/virtual/input/input168 [ 944.663475][T29808] netlink: 'syz.0.9797': attribute type 10 has an invalid length. [ 944.738942][T29808] team0 (unregistering): Port device team_slave_0 removed [ 944.752982][ T7772] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 944.754608][ T7772] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.754662][ T7772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.783372][T29808] team0 (unregistering): Port device team_slave_1 removed [ 944.830628][ T7772] as10x_usb: device has been detected [ 944.840881][ T7772] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 944.885946][ T7772] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 944.915704][ T7772] as10x_usb: error during firmware upload part1 [ 944.916360][ T7772] Registered device Abilis Systems DVB-Titan [ 945.499961][T29840] bridge_slave_0: left allmulticast mode [ 945.499992][T29840] bridge_slave_0: left promiscuous mode [ 945.500243][T29840] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.635444][T29845] input: syz0 as /devices/virtual/input/input169 [ 945.849772][ T10] usb 4-1: USB disconnect, device number 47 [ 945.966274][ T10] Unregistered device Abilis Systems DVB-Titan [ 945.969258][ T10] as10x_usb: device has been disconnected [ 946.153228][T29867] ipvlan2: entered allmulticast mode [ 946.153255][T29867] macvlan1: entered allmulticast mode [ 946.156310][T29867] batman_adv: batadv0: Adding interface: ipvlan2 [ 946.156327][T29867] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.156361][T29867] batman_adv: batadv0: Interface activated: ipvlan2 [ 946.248024][ T5621] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 946.257538][T29869] ipvlan3: entered allmulticast mode [ 946.266304][T29869] batman_adv: batadv0: Adding interface: ipvlan3 [ 946.266324][T29869] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.266407][T29869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: ipvlan2 [ 946.266458][T29869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.266527][T29869] batman_adv: batadv0: Interface activated: ipvlan3 [ 946.403228][ T5621] usb 5-1: Using ep0 maxpacket: 16 [ 946.404072][ T5621] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 946.405601][ T5621] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.405650][ T5621] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.405678][ T5621] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.405703][ T5621] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 946.405732][ T5621] usb 5-1: config 0 interface 0 has no altsetting 0 [ 946.405767][ T5621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.498108][ T5621] usb 5-1: config 0 descriptor?? [ 946.945428][ T5621] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.008F/input/input170 [ 947.075162][ T5621] appleir 0003:05AC:8241.008F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 947.193130][T29901] input: syz0 as /devices/virtual/input/input171 [ 947.450734][T29908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9824'. [ 947.472529][T29908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9824'. [ 947.473676][T29908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9824'. [ 947.790290][ T5621] usb 5-1: USB disconnect, device number 38 [ 947.862327][ T986] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 947.862369][ T986] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.227755][ T986] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.227796][ T986] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.407042][ T986] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.407085][ T986] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.572659][T29950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9837'. [ 948.718922][ T986] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.718964][ T986] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.523367][ T986] bridge0: port 4(vlan2) entered disabled state [ 950.315488][ T986] bond0 (unregistering): Released all slaves [ 950.460495][T29990] tipc: Started in network mode [ 950.460527][T29990] tipc: Node identity 4, cluster identity 4711 [ 950.460541][T29990] tipc: Node number set to 4 [ 950.474188][T29991] tipc: Enabled bearer , priority 0 [ 950.597400][T30003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9852'. [ 951.320905][ T986] hsr_slave_0: left promiscuous mode [ 951.329238][ T986] hsr_slave_1: left promiscuous mode [ 951.379160][ T986] veth1_macvtap: left promiscuous mode [ 951.379205][ T986] veth0_macvtap: left promiscuous mode [ 951.380892][ T986] veth1_vlan: left promiscuous mode [ 951.380976][ T986] veth0_vlan: left promiscuous mode [ 952.459802][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 952.470434][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 952.508442][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 952.509483][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 952.510139][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 952.624776][T30044] netlink: 'syz.3.9863': attribute type 4 has an invalid length. [ 953.053537][ T5621] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 953.207729][ T5621] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 953.237870][ T5621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.237909][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.254266][ T5621] usb 4-1: config 0 descriptor?? [ 953.476467][T28590] tipc: Disabling bearer [ 953.499586][ T5621] usbhid 4-1:0.0: can't add hid device: -71 [ 953.499699][ T5621] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 953.508959][ T5621] usb 4-1: USB disconnect, device number 48 [ 954.011803][T20090] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 954.152111][ T986] IPVS: stop unused estimator thread 0... [ 954.193154][T20090] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 954.196051][T20090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 954.196098][T20090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.201081][T20090] usb 4-1: config 0 descriptor?? [ 954.238905][T20090] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 954.267092][T20090] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 954.591761][T19113] Bluetooth: hci2: command tx timeout [ 954.737755][T20090] usb 4-1: USB disconnect, device number 49 [ 954.757066][T20090] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 954.808619][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 954.840860][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 954.854955][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 954.856063][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 954.856767][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 955.051431][ T10] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 955.130396][T30045] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.130689][T30045] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.130846][T30045] bridge_slave_0: entered allmulticast mode [ 955.136267][T30045] bridge_slave_0: entered promiscuous mode [ 955.168040][T30045] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.168244][T30045] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.168536][T30045] bridge_slave_1: entered allmulticast mode [ 955.170650][T30045] bridge_slave_1: entered promiscuous mode [ 955.223500][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 955.226281][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 955.226363][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.486864][T30045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.505877][T30045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.604958][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 955.604979][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 955.796055][T30045] team0: Port device team_slave_0 added [ 955.889299][ T10] DVB: Unable to find symbol stv0299_attach() [ 955.903093][T20090] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 955.987250][ T10] DVB: Unable to find symbol tda8083_attach() [ 955.987269][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 956.006942][ T10] usb 3-1: USB disconnect, device number 109 [ 956.032552][T30045] team0: Port device team_slave_1 added [ 956.061365][T20090] usb 4-1: Using ep0 maxpacket: 32 [ 956.094669][T30109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.095244][T30109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.142951][T30109] sg_write: data in/out 475148/136 bytes for SCSI command 0x0-- guessing data in; [ 956.142951][T30109] program syz.3.9878 not setting count and/or reply_len properly [ 956.199643][T20090] usb 4-1: unable to get BOS descriptor or descriptor too short [ 956.199697][T20090] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a18, bcdDevice= 0.00 [ 956.200568][T20090] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 956.200615][T20090] usb 4-1: can't read configurations, error -71 [ 956.300713][T30045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.300727][T30045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.300749][T30045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.478961][T30045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.478981][T30045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.479009][T30045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.671479][T19113] Bluetooth: hci2: command tx timeout [ 956.912221][T19113] Bluetooth: hci4: command tx timeout [ 957.071002][T30045] hsr_slave_0: entered promiscuous mode [ 957.080701][T30045] hsr_slave_1: entered promiscuous mode [ 957.222707][T30154] sg_write: data in/out 483328/136 bytes for SCSI command 0x0-- guessing data in; [ 957.222707][T30154] program syz.0.9886 not setting count and/or reply_len properly [ 957.381833][ T31] audit: type=1326 audit(1791075515.604:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.3.9887" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f150ec code=0x0 [ 958.114191][T30094] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.114308][T30094] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.114811][T30094] bridge_slave_0: entered allmulticast mode [ 958.117676][T30094] bridge_slave_0: entered promiscuous mode [ 958.158128][T30094] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.158240][T30094] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.158530][T30094] bridge_slave_1: entered allmulticast mode [ 958.183795][T30094] bridge_slave_1: entered promiscuous mode [ 958.464159][T30094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.489683][T30094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.727443][T30094] team0: Port device team_slave_0 added [ 958.730933][T30094] team0: Port device team_slave_1 added [ 958.751501][T19113] Bluetooth: hci2: command tx timeout [ 958.788833][T30094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.788852][T30094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.788881][T30094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.790974][T30094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.790989][T30094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.791013][T30094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.994219][T19113] Bluetooth: hci4: command tx timeout [ 959.125659][T30094] hsr_slave_0: entered promiscuous mode [ 959.134840][T30094] hsr_slave_1: entered promiscuous mode [ 959.140746][T30094] debugfs: 'hsr0' already exists in 'hsr' [ 959.140810][T30094] Cannot create hsr debugfs directory [ 959.605740][T30222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9904'. [ 960.023361][ T986] bridge_slave_1: left allmulticast mode [ 960.023394][ T986] bridge_slave_1: left promiscuous mode [ 960.023631][ T986] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.067708][ T986] veth0: left allmulticast mode [ 960.067738][ T986] veth0: left promiscuous mode [ 960.068046][ T986] bridge0: port 3(veth0) entered disabled state [ 960.070956][ T986] bridge_slave_1: left allmulticast mode [ 960.070981][ T986] bridge_slave_1: left promiscuous mode [ 960.071171][ T986] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.476874][ T986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 960.493182][ T986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.495573][ T986] bond0 (unregistering): Released all slaves [ 960.733273][ T986] bridge0 (unregistering): left promiscuous mode [ 960.767183][ T986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 960.769459][ T986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.770391][ T986] bond0 (unregistering): Released all slaves [ 960.825155][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 960.831632][T19113] Bluetooth: hci2: command tx timeout [ 961.087098][T19113] Bluetooth: hci4: command tx timeout [ 961.365925][ T986] tipc: Left network mode [ 962.177301][ T986] hsr_slave_0: left promiscuous mode [ 962.178922][ T986] hsr_slave_1: left promiscuous mode [ 962.179851][ T986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.204001][ T986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.227618][ T986] hsr_slave_0: left promiscuous mode [ 962.228452][ T986] hsr_slave_1: left promiscuous mode [ 962.229484][ T986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.252709][ T986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.261092][ T986] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 962.261116][ T986] batman_adv: batadv0: Removing interface: ipvlan2 [ 962.280666][ T986] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 962.280693][ T986] batman_adv: batadv0: Removing interface: ipvlan3 [ 962.470803][T30288] input: syz1 as /devices/virtual/input/input172 [ 962.634564][ T986] team0 (unregistering): Port device team_slave_1 removed [ 962.665361][ T986] team0 (unregistering): Port device team_slave_0 removed [ 963.107540][ T986] team0 (unregistering): Port device team_slave_1 removed [ 963.129735][ T986] team0 (unregistering): Port device team_slave_0 removed [ 963.151592][T19113] Bluetooth: hci4: command tx timeout [ 963.400822][T30304] tun0: tun_chr_ioctl cmd 1074025678 [ 963.400850][T30304] tun0: group set to 0 [ 963.749411][T30045] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 963.780922][T30045] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 963.814749][T30045] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 963.840148][T30045] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 963.849421][T30045] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 963.875314][T30045] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 963.939841][T30045] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 963.968209][T30045] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 964.021803][T30319] netlink: 'syz.2.9936': attribute type 1 has an invalid length. [ 964.021822][T30319] netlink: 'syz.2.9936': attribute type 6 has an invalid length. [ 964.021833][T30319] netlink: 'syz.2.9936': attribute type 3 has an invalid length. [ 964.774961][T30045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.842782][T30045] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.886359][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.886464][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.176970][ T264] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.286471][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.286585][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.381529][ T10] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 965.509975][ T264] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.546064][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 965.547260][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.547323][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.588893][ T10] usb 3-1: config 0 descriptor?? [ 965.820607][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 965.820722][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 965.845648][ T10] usb 3-1: USB disconnect, device number 110 [ 965.947809][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 966.044543][ T264] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.221200][ T264] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.288374][T30094] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 966.308121][T30094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 966.309166][T30094] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 966.328208][T30094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 966.342147][ T7772] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 966.361725][T30094] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 966.369874][T30094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 966.370968][T30094] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 966.400475][T30094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 966.462347][T30045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.510780][ T7772] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 966.529890][ T7772] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 966.529941][ T7772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.555878][ T7772] usb 3-1: config 0 descriptor?? [ 966.585422][ T7772] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 966.609166][ T7772] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 967.073358][ T7772] usb 3-1: USB disconnect, device number 111 [ 967.088435][ T7772] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 967.195820][ T264] pimreg: left allmulticast mode [ 967.395273][T20085] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 967.574042][T20085] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 967.602198][T20085] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 967.602238][T20085] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 967.602300][T20085] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 967.602349][T20085] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.617839][T30409] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 967.839419][ T264] bond1 (unregistering): (slave gretap0): Releasing active interface [ 967.958192][ T264] bond0 (unregistering): Released all slaves [ 967.975861][ T264] bond1 (unregistering): Released all slaves [ 968.028378][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 968.083194][T30045] veth0_vlan: entered promiscuous mode [ 968.103814][T30094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.154156][T30094] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.170198][T30045] veth1_vlan: entered promiscuous mode [ 968.240929][ T986] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.241034][ T986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.299767][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.299886][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.300484][ T264] tipc: Disabling bearer [ 968.300614][ T264] tipc: Left network mode [ 968.415638][T30045] veth0_macvtap: entered promiscuous mode [ 968.501008][T30045] veth1_macvtap: entered promiscuous mode [ 968.620688][T30094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 968.697390][T30045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 968.731126][T30045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 968.792150][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.798969][T30094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 968.839296][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.166080][T24570] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.168114][T24570] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.260170][T20085] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 969.270629][T20085] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input173 [ 969.419341][T15195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.419365][T15195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.488631][T20085] usb 4-1: USB disconnect, device number 52 [ 969.488743][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 969.518798][T30094] veth0_vlan: entered promiscuous mode [ 969.866921][T30094] veth1_vlan: entered promiscuous mode [ 969.871492][T15195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.871515][T15195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.130434][T30094] veth0_macvtap: entered promiscuous mode [ 970.179098][T30094] veth1_macvtap: entered promiscuous mode [ 970.311368][ T7772] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 970.319235][T30094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 970.397137][T30094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 970.398849][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8 [ 970.472994][ T7772] usb 10-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 970.474839][ T7772] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 970.474894][ T7772] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.525129][ T7772] as10x_usb: device has been detected [ 970.525996][ T7772] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 970.576868][ T7772] usb 10-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 970.613969][ T7772] as10x_usb: error during firmware upload part1 [ 970.614726][ T7772] Registered device Abilis Systems DVB-Titan [ 970.654281][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.106654][T30484] loop8: detected capacity change from 0 to 9 [ 971.127885][T30484] Dev loop8: unable to read RDB block 9 [ 971.127941][T30484] loop8: unable to read partition table [ 971.128174][T30484] loop8: partition table beyond EOD, truncated [ 971.128195][T30484] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 971.538444][ T7772] usb 10-1: USB disconnect, device number 6 [ 971.595649][ T7772] Unregistered device Abilis Systems DVB-Titan [ 971.605373][ T7772] as10x_usb: device has been disconnected [ 971.870655][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 971.907269][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.907291][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.972213][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.972316][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.972365][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.972390][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.972618][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.404181][ T264] IPVS: stop unused estimator thread 0... [ 972.891359][T20568] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 973.042420][T20568] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 973.043923][T20568] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.043961][T20568] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.044005][T20568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.095293][T20568] usb 5-1: config 0 descriptor?? [ 973.458825][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 973.554199][T20568] hid_parser_main: 4022 callbacks suppressed [ 973.554230][T20568] cm6533_jd 0003:0D8C:0022.0090: unknown main item tag 0x0 [ 973.554361][T20568] cm6533_jd 0003:0D8C:0022.0090: unknown main item tag 0x0 [ 973.620252][T20568] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0090/input/input174 [ 973.684917][T20568] cm6533_jd 0003:0D8C:0022.0090: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 973.838846][T20086] usb 5-1: USB disconnect, device number 39 [ 974.395551][T30571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.413344][T30571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.674602][T30571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.729160][T30571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.827528][T30571] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 974.827559][T30571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 974.944993][T30571] veth1_vlan: left promiscuous mode [ 974.973915][T30571] veth0_vlan: left promiscuous mode [ 974.998357][T30571] veth0_vlan: entered promiscuous mode [ 975.028952][T30571] veth1_vlan: entered promiscuous mode [ 975.136130][T30571] veth1_macvtap: left promiscuous mode [ 975.171169][T30571] veth0_macvtap: left promiscuous mode [ 975.184017][T30571] veth0_macvtap: entered promiscuous mode [ 975.224151][T30571] veth1_macvtap: entered promiscuous mode [ 975.354655][T30571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 975.389394][T30571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 975.424230][T30571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 975.450715][T30571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 975.744825][ T36] bridge0: port 3(veth0) entered blocking state [ 975.744956][ T36] bridge0: port 3(veth0) entered forwarding state [ 975.747303][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.747430][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.786188][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.786318][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.914883][ T5281] 8021q: adding VLAN 0 to HW filter on device eth11 [ 976.124110][T30612] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 976.154434][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.154508][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.158214][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.158264][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.501832][T30623] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 976.502605][T30623] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 976.504499][T30623] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 976.505065][T30623] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 976.613465][T30625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9999'. [ 976.613498][T30625] netlink: 'syz.4.9999': attribute type 6 has an invalid length. [ 976.613513][T30625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9999'. [ 976.618882][T30627] gretap1: entered promiscuous mode [ 976.620256][T30625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9999'. [ 976.620285][T30625] netlink: 'syz.4.9999': attribute type 6 has an invalid length. [ 976.620300][T30625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9999'. [ 976.958303][T30644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10005'. [ 977.925575][T30671] loop5: detected capacity change from 0 to 7 [ 977.929200][T30671] Dev loop5: unable to read RDB block 7 [ 977.929248][T30671] loop5: unable to read partition table [ 977.929472][T30671] loop5: partition table beyond EOD, truncated [ 977.933799][T30671] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 978.393084][ T5281] 8021q: adding VLAN 0 to HW filter on device eth12 [ 978.785872][T30697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10022'. [ 979.501638][T20086] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 979.651520][T20086] usb 3-1: Using ep0 maxpacket: 32 [ 979.654123][T20086] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 979.655725][T20086] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.680918][T20086] usb 3-1: config 0 descriptor?? [ 980.125693][T20086] uclogic 0003:28BD:0078.0091: interface is invalid, ignoring [ 980.342912][ T9437] usb 3-1: USB disconnect, device number 112 [ 980.524108][ T31] audit: type=1326 audit(1791075538.744:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30739 comm="syz.9.10033" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc90ec code=0x0 [ 981.261404][T20568] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 981.367317][ T5621] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 981.424246][T20568] usb 3-1: Using ep0 maxpacket: 32 [ 981.426535][T20568] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 981.429913][T20568] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 981.429944][T20568] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 981.429967][T20568] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 981.430017][T20568] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 981.430042][T20568] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 981.430068][T20568] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 981.430113][T20568] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.531105][T20568] usb 3-1: config 0 descriptor?? [ 981.542274][ T5621] usb 5-1: Using ep0 maxpacket: 8 [ 981.543944][ T5621] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 981.546127][ T5621] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.546181][ T5621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.624003][ T5621] usb 5-1: config 0 descriptor?? [ 981.649936][ T5621] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 981.752577][T20568] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 113 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 981.791539][ T9437] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 981.960260][ T9437] usb 10-1: Using ep0 maxpacket: 16 [ 981.966912][ T9437] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 981.970620][ T9437] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.970648][ T9437] usb 10-1: Product: syz [ 981.970665][ T9437] usb 10-1: Manufacturer: syz [ 981.970682][ T9437] usb 10-1: SerialNumber: syz [ 982.037650][T20568] usb 3-1: USB disconnect, device number 113 [ 982.053889][T20568] usblp0: removed [ 982.899479][ T5621] gspca_vc032x: reg_w err -71 [ 982.899564][ T5621] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 982.908910][ T5621] usb 5-1: USB disconnect, device number 40 [ 983.246956][ T9437] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 983.250680][ T9437] usb 10-1: USB disconnect, device number 7 [ 983.883612][ T5621] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 983.960135][T30838] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10053'. [ 984.037717][ T5621] usb 5-1: Using ep0 maxpacket: 32 [ 984.038444][ T5621] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 984.039769][ T5621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.068721][ T5621] usb 5-1: config 0 descriptor?? [ 984.411135][T30845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10055'. [ 984.492300][ T5621] uclogic 0003:28BD:0078.0092: interface is invalid, ignoring [ 984.708595][ T5621] usb 5-1: USB disconnect, device number 41 [ 984.921972][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 985.072181][ T9437] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 985.242677][ T9437] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 985.243932][ T9437] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.243968][ T9437] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 985.243997][ T9437] usb 3-1: config 0 interface 0 has no altsetting 0 [ 985.244032][ T9437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.292801][ T9437] usb 3-1: config 0 descriptor?? [ 985.809847][ T9437] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:06A3:0CD0.0093/input/input175 [ 985.908704][ T9437] saitek 0003:06A3:0CD0.0093: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.2-1/input0 [ 986.467114][T30904] netlink: 'syz.4.10072': attribute type 1 has an invalid length. [ 986.603843][ T9437] usb 3-1: USB disconnect, device number 114 [ 986.705536][T30904] bond1 (unregistering): Released all slaves [ 987.431860][ T9437] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 987.585221][ T9437] usb 5-1: Using ep0 maxpacket: 8 [ 987.597171][ T9437] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 987.615587][ T9437] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 987.615650][ T9437] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 987.615676][ T9437] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 987.615704][ T9437] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 987.615731][ T9437] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 987.615777][ T9437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.898886][ T9437] usb 5-1: usb_control_msg returned -32 [ 987.898942][ T9437] usbtmc 5-1:16.0: can't read capabilities [ 988.783803][T30958] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 988.988328][ T9437] usb 5-1: USB disconnect, device number 42 [ 989.278194][ T175] IPVS: starting estimator thread 0... [ 989.279908][T30970] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 989.361585][T30971] IPVS: using max 31 ests per chain, 74400 per kthread [ 989.941486][ T5709] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 990.091363][ T5709] usb 5-1: Using ep0 maxpacket: 8 [ 990.092361][ T5709] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 990.096580][ T5709] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 990.096637][ T5709] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 990.096679][ T5709] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 990.096706][ T5709] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 990.096732][ T5709] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 990.096778][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.724296][ T9437] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 990.768805][T31003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10097'. [ 990.768836][T31003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10097'. [ 990.822143][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.822299][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.822349][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.822388][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.891354][ T9437] usb 10-1: Using ep0 maxpacket: 8 [ 990.892215][ T9437] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 990.893660][ T9437] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 990.893710][ T9437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.898365][ T9437] usb 10-1: config 0 descriptor?? [ 991.026566][T31005] usbtmc 5-1:16.0: simple control status returned 0 [ 991.131161][ T9437] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 991.240504][ T5709] usb 5-1: USB disconnect, device number 43 [ 991.356247][ T7772] usb 10-1: USB disconnect, device number 8 [ 991.425524][T31020] dummy0: entered promiscuous mode [ 991.450050][T31018] input: syz0 as /devices/virtual/input/input176 [ 991.467345][T31020] gretap0: entered promiscuous mode [ 991.506714][T31020] hsr1: entered allmulticast mode [ 991.506743][T31020] dummy0: entered allmulticast mode [ 991.506828][T31020] gretap0: entered allmulticast mode [ 991.649379][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 991.663771][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 991.665761][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 991.668329][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 991.669375][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 992.043272][T31037] netlink: 'syz.0.10104': attribute type 1 has an invalid length. [ 992.228165][T31037] bond1: entered promiscuous mode [ 992.239758][T31037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 992.388411][T31045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 992.412182][T31045] bond1: (slave bond2): making interface the new active one [ 992.412209][T31045] bond2: entered promiscuous mode [ 992.415347][T31045] bond1: (slave bond2): Enslaving as an active interface with an up link [ 992.696964][T31065] binder: 31064:31065 ioctl c0306201 800003c0 returned -14 [ 992.758142][ T31] audit: type=1326 audit(1791075550.974:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31067 comm="syz.9.10112" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc90ec code=0x7ffc0000 [ 992.758409][ T31] audit: type=1326 audit(1791075550.974:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31067 comm="syz.9.10112" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc90ec code=0x7ffc0000 [ 992.828420][ T31] audit: type=1326 audit(1791075551.044:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31067 comm="syz.9.10112" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc90ec code=0x7ffc0000 [ 992.828666][ T31] audit: type=1326 audit(1791075551.044:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31067 comm="syz.9.10112" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc90ec code=0x7ffc0000 [ 992.829002][ T31] audit: type=1326 audit(1791075551.044:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31067 comm="syz.9.10112" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc90ec code=0x7ffc0000 [ 992.829383][ T31] audit: type=1326 audit(1791075551.044:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31067 comm="syz.9.10112" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc90ec code=0x7ffc0000 [ 992.833947][ T31] audit: type=1326 audit(1791075551.054:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31067 comm="syz.9.10112" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc90ec code=0x7ffc0000 [ 992.851181][ T31] audit: type=1326 audit(1791075551.064:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31067 comm="syz.9.10112" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc90ec code=0x7ffc0000 [ 992.851696][ T31] audit: type=1326 audit(1791075551.064:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31067 comm="syz.9.10112" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc90ec code=0x7ffc0000 [ 992.863912][ T31] audit: type=1326 audit(1791075551.084:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31067 comm="syz.9.10112" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fc90ec code=0x7ffc0000 [ 993.075278][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.075342][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.137823][ T5709] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 993.265842][ T5709] hid-generic 0000:0000:0000.0094: hidraw0: HID v0.00 Device [syz1] on syz0 [ 993.772861][T31029] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.773072][T31029] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.773295][T31029] bridge_slave_0: entered allmulticast mode [ 993.775676][T31029] bridge_slave_0: entered promiscuous mode [ 993.796453][T19113] Bluetooth: hci0: command tx timeout [ 993.812473][T31029] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.812663][T31029] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.812824][T31029] bridge_slave_1: entered allmulticast mode [ 993.837275][T31029] bridge_slave_1: entered promiscuous mode [ 993.880022][T31029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.892689][T31029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.942142][T31029] team0: Port device team_slave_0 added [ 993.945674][T31029] team0: Port device team_slave_1 added [ 994.030608][T31029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.030629][T31029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.030658][T31029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.086259][T31029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.086280][T31029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.086310][T31029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.213961][T31029] hsr_slave_0: entered promiscuous mode [ 994.215088][T31029] hsr_slave_1: entered promiscuous mode [ 994.215856][T31029] debugfs: 'hsr0' already exists in 'hsr' [ 994.215878][T31029] Cannot create hsr debugfs directory [ 994.382161][T31106] loop6: detected capacity change from 0 to 2640 [ 994.386180][T31106] Buffer I/O error on dev loop6, logical block 0, async page read [ 994.386346][T31106] Buffer I/O error on dev loop6, logical block 0, async page read [ 994.386384][T31106] Buffer I/O error on dev loop6, logical block 0, async page read [ 994.386417][T31106] Buffer I/O error on dev loop6, logical block 0, async page read [ 994.386449][T31106] Buffer I/O error on dev loop6, logical block 0, async page read [ 994.386501][T31106] Buffer I/O error on dev loop6, logical block 0, async page read [ 994.386550][T31106] Buffer I/O error on dev loop6, logical block 0, async page read [ 994.386583][T31106] Buffer I/O error on dev loop6, logical block 0, async page read [ 994.386601][T31106] ldm_validate_partition_table(): Disk read failed. [ 994.386631][T31106] Buffer I/O error on dev loop6, logical block 0, async page read [ 994.386663][T31106] Buffer I/O error on dev loop6, logical block 0, async page read [ 994.386711][T31106] Dev loop6: unable to read RDB block 0 [ 994.386879][T31106] loop6: unable to read partition table [ 994.387126][T31106] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 994.955833][T31029] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 40414 - 0 [ 995.183994][T31120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10124'. [ 995.437502][T31029] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 40414 - 0 [ 995.781866][T31029] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 40414 - 0 [ 995.872130][T19113] Bluetooth: hci0: command tx timeout [ 996.169221][T31029] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 40414 - 0 [ 997.233763][T31029] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 997.262952][T31029] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 997.266518][T31029] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 997.296472][T31029] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 997.299889][T31029] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 997.356838][T31029] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 997.359664][T31029] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 997.441804][T31029] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 997.912615][T31029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.953442][T19113] Bluetooth: hci0: command tx timeout [ 998.002375][T31029] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.054805][T31174] netlink: 'syz.2.10135': attribute type 1 has an invalid length. [ 998.056645][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.056758][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.278228][T31174] bond2: entered promiscuous mode [ 998.279459][T31174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 998.425297][T31180] 8021q: adding VLAN 0 to HW filter on device bond3 [ 998.447244][T31180] bond2: (slave bond3): making interface the new active one [ 998.447271][T31180] bond3: entered promiscuous mode [ 998.448370][T31180] bond2: (slave bond3): Enslaving as an active interface with an up link [ 998.459213][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.459346][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.553615][ T9437] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 998.702598][ T9437] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 998.704305][ T9437] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.704367][ T9437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.758616][ T9437] as10x_usb: device has been detected [ 998.759534][ T9437] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 998.794769][ T9437] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 998.819824][ T9437] as10x_usb: error during firmware upload part1 [ 998.820449][ T9437] Registered device Abilis Systems DVB-Titan [ 998.844970][T31205] netlink: 'syz.9.10142': attribute type 16 has an invalid length. [ 998.844997][T31205] netlink: 'syz.9.10142': attribute type 17 has an invalid length. [ 999.156161][T31201] tap0: tun_chr_ioctl cmd 1074025677 [ 999.156190][T31201] tap0: Linktype set failed because interface is up [ 999.440382][T31029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.547783][T31230] pim6reg: entered allmulticast mode [ 999.585002][T31230] team0: entered allmulticast mode [ 999.585027][T31230] team_slave_0: entered allmulticast mode [ 999.585048][T31230] team_slave_1: entered allmulticast mode [ 999.590550][T31230] pim6reg: left allmulticast mode [ 999.675298][T31229] team0: left allmulticast mode [ 999.675324][T31229] team_slave_0: left allmulticast mode [ 999.675345][T31229] team_slave_1: left allmulticast mode [ 999.804884][ T5709] usb 5-1: USB disconnect, device number 44 [ 999.850115][T31029] veth0_vlan: entered promiscuous mode [ 999.896284][T31029] veth1_vlan: entered promiscuous mode [ 999.961243][T31242] netlink: 'syz.9.10153': attribute type 1 has an invalid length. [ 1000.013383][ T5709] Unregistered device Abilis Systems DVB-Titan [ 1000.017373][ T5709] as10x_usb: device has been disconnected [ 1000.033013][T19113] Bluetooth: hci0: command tx timeout [ 1000.066979][T31242] bond1: entered promiscuous mode [ 1000.067457][T31242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1000.131913][T31244] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1000.140766][T31244] bond1: (slave bond2): making interface the new active one [ 1000.140794][T31244] bond2: entered promiscuous mode [ 1000.177174][T31244] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1000.271679][T19113] Bluetooth: hci1: command 0x0406 tx timeout [ 1000.378579][T31253] netlink: 260 bytes leftover after parsing attributes in process `syz.0.10155'. [ 1000.394850][T31029] veth0_macvtap: entered promiscuous mode [ 1000.413361][T31029] veth1_macvtap: entered promiscuous mode [ 1000.605363][T31029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.645445][T31029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.722798][ T1424] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.780161][T31265] netlink: 'syz.2.10158': attribute type 5 has an invalid length. [ 1000.780179][T31265] netlink: 'syz.2.10158': attribute type 9 has an invalid length. [ 1000.780189][T31265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10158'. [ 1000.783951][ T264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.832048][T20090] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1000.854025][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.897615][T31270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10161'. [ 1001.002994][T20090] usb 10-1: Using ep0 maxpacket: 8 [ 1001.004702][T20090] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1001.036016][T20090] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.059098][T20090] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1001.059117][T20090] pvrusb2: ********** [ 1001.059126][T20090] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1001.059140][T20090] pvrusb2: Important functionality might not be entirely working. [ 1001.059150][T20090] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1001.059162][T20090] pvrusb2: ********** [ 1001.098892][ T264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.130392][T31270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10161'. [ 1001.130881][T31270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10161'. [ 1001.185631][T31270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10161'. [ 1001.211622][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.211645][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.259874][ T2365] pvrusb2: Invalid write control endpoint [ 1001.385618][ T2365] pvrusb2: Invalid write control endpoint [ 1001.385637][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1001.385648][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1001.385657][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1001.385668][ T2365] pvrusb2: Device being rendered inoperable [ 1001.440733][ T2365] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1001.440821][ T2365] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1001.483422][ T9437] usb 10-1: USB disconnect, device number 9 [ 1001.486608][ T1424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.486627][ T1424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.517775][ T2365] pvrusb2: Attached sub-driver cx25840 [ 1001.517792][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1001.517805][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1002.213153][T31298] loop6: detected capacity change from 0 to 2640 [ 1002.218754][T31298] buffer_io_error: 11 callbacks suppressed [ 1002.218777][T31298] Buffer I/O error on dev loop6, logical block 0, async page read [ 1002.218818][T31298] Buffer I/O error on dev loop6, logical block 0, async page read [ 1002.218851][T31298] Buffer I/O error on dev loop6, logical block 0, async page read [ 1002.218883][T31298] Buffer I/O error on dev loop6, logical block 0, async page read [ 1002.218914][T31298] Buffer I/O error on dev loop6, logical block 0, async page read [ 1002.218969][T31298] Buffer I/O error on dev loop6, logical block 0, async page read [ 1002.219016][T31298] Buffer I/O error on dev loop6, logical block 0, async page read [ 1002.219047][T31298] Buffer I/O error on dev loop6, logical block 0, async page read [ 1002.219064][T31298] ldm_validate_partition_table(): Disk read failed. [ 1002.219094][T31298] Buffer I/O error on dev loop6, logical block 0, async page read [ 1002.219126][T31298] Buffer I/O error on dev loop6, logical block 0, async page read [ 1002.219176][T31298] Dev loop6: unable to read RDB block 0 [ 1002.219337][T31298] loop6: unable to read partition table [ 1002.243876][T31298] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1002.825967][T31303] binder: 31299:31303 ioctl 40046205 0 returned -22 [ 1003.379885][T31330] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 1003.379981][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 1003.380130][T31330] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 1003.380195][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 1004.241479][ T9382] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1004.393769][ T9382] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1004.399531][ T9382] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.399560][ T9382] usb 10-1: Product: syz [ 1004.399577][ T9382] usb 10-1: Manufacturer: syz [ 1004.399593][ T9382] usb 10-1: SerialNumber: syz [ 1004.430607][ T9382] usb 10-1: config 0 descriptor?? [ 1004.450532][ T9382] hub 10-1:0.0: bad descriptor, ignoring hub [ 1004.450565][ T9382] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1004.664814][ T9382] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1004.699045][ T9382] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1004.711444][ T9382] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1004.711489][ T9382] usb 10-1: media controller created [ 1004.785946][ T9382] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1004.950093][ T9382] DVB: Unable to find symbol dib7000p_attach() [ 1004.950111][ T9382] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1005.155772][ T9382] rc_core: IR keymap rc-dib0700-rc5 not found [ 1005.155793][ T9382] Registered IR keymap rc-empty [ 1005.156202][ T9382] dvb-usb: could not initialize remote control. [ 1005.156214][ T9382] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1005.171221][ T9382] usb 10-1: USB disconnect, device number 10 [ 1005.427172][ T9382] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1005.809463][T31411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10199'. [ 1006.406620][T31434] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10205'. [ 1006.410532][T31434] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10205'. [ 1006.435626][T31434] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10205'. [ 1006.869276][ T31] kauditd_printk_skb: 53 callbacks suppressed [ 1006.869299][ T31] audit: type=1326 audit(1791075565.084:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31446 comm="syz.2.10210" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708f0ec code=0x0 [ 1007.474261][T20088] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1007.621782][T20088] usb 4-1: Using ep0 maxpacket: 16 [ 1007.625656][T20088] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1007.644988][T20088] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.645027][T20088] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.645055][T20088] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1007.645094][T20088] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.687848][T20088] usb 4-1: config 0 descriptor?? [ 1008.154710][T20088] mcp2221 0003:04D8:00DD.0095: unknown main item tag 0x0 [ 1008.154751][T20088] mcp2221 0003:04D8:00DD.0095: unknown main item tag 0x0 [ 1008.154778][T20088] mcp2221 0003:04D8:00DD.0095: unknown main item tag 0x0 [ 1008.154805][T20088] mcp2221 0003:04D8:00DD.0095: unknown main item tag 0x0 [ 1008.154834][T20088] mcp2221 0003:04D8:00DD.0095: unknown main item tag 0x0 [ 1008.160341][T20088] mcp2221 0003:04D8:00DD.0095: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1008.383325][T20088] usb 4-1: USB disconnect, device number 53 [ 1008.957705][T31503] veth0: entered promiscuous mode [ 1008.980076][T31503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10224'. [ 1009.087874][T31503] veth0 (unregistering): left promiscuous mode [ 1009.751785][T20088] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1009.903282][T20088] usb 4-1: Using ep0 maxpacket: 8 [ 1009.904063][T20088] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1009.905736][T20088] usb 4-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 1009.905763][T20088] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1009.905786][T20088] usb 4-1: config 1 has no interface number 0 [ 1009.905829][T20088] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1009.905856][T20088] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 1009.905875][T20088] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 1009.908336][T20088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.908357][T20088] usb 4-1: Product: syz [ 1009.908369][T20088] usb 4-1: Manufacturer: syz [ 1009.908381][T20088] usb 4-1: SerialNumber: syz [ 1010.281929][ T9372] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1010.435369][ T9372] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1010.436120][ T9372] usb 3-1: config 0 has no interfaces? [ 1010.439644][ T9372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.439670][ T9372] usb 3-1: Product: syz [ 1010.439688][ T9372] usb 3-1: Manufacturer: syz [ 1010.439704][ T9372] usb 3-1: SerialNumber: syz [ 1010.492606][ T9372] usb 3-1: config 0 descriptor?? [ 1010.750693][T20088] usb 4-1: USB disconnect, device number 54 [ 1010.816719][ T9550] udevd[9550]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1011.172802][T20086] usb 3-1: USB disconnect, device number 115 [ 1011.741400][ T9382] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1011.892459][ T9382] usb 10-1: Using ep0 maxpacket: 16 [ 1011.904368][ T9382] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1011.910750][ T9382] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1011.910832][ T9382] usb 10-1: config 0 has no interface number 0 [ 1011.932056][ T9382] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.932087][ T9382] usb 10-1: Product: syz [ 1011.932105][ T9382] usb 10-1: Manufacturer: syz [ 1011.932121][ T9382] usb 10-1: SerialNumber: syz [ 1011.949678][ T9382] usb 10-1: config 0 descriptor?? [ 1012.024988][ T9382] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1012.673019][ T5711] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1012.822194][ T5711] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 1012.845858][ T5711] usb 5-1: config 0 interface 0 altsetting 182 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1012.845896][ T5711] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1012.845931][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.865815][ T5711] usb 5-1: config 0 descriptor?? [ 1013.195015][ T9382] gspca_spca1528: reg_w err -71 [ 1013.195347][ T9382] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71 [ 1013.201890][ T9382] usb 10-1: USB disconnect, device number 11 [ 1013.337752][ T5711] cherry 0003:046A:0027.0096: item fetching failed at offset 5/6 [ 1013.338566][ T5711] cherry 0003:046A:0027.0096: probe with driver cherry failed with error -22 [ 1013.541034][T20090] usb 5-1: USB disconnect, device number 45 [ 1013.865064][T31635] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10255'. [ 1013.871767][T31635] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10255'. [ 1013.894260][T31635] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10255'. [ 1014.128317][T31646] syzkaller1: entered allmulticast mode [ 1015.691995][ T5711] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1015.842451][ T5711] usb 4-1: Using ep0 maxpacket: 16 [ 1015.843206][ T5711] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1015.846825][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.884915][ T5711] usb 4-1: config 0 descriptor?? [ 1015.929674][ T5711] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1016.031477][ T9437] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1016.191553][ T9437] usb 3-1: Using ep0 maxpacket: 8 [ 1016.196791][ T9437] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1016.200442][ T9437] usb 3-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 1016.200473][ T9437] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1016.200497][ T9437] usb 3-1: config 1 has no interface number 0 [ 1016.200549][ T9437] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1016.200580][ T9437] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 1016.200608][ T9437] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 1016.284071][ T9437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.284102][ T9437] usb 3-1: Product: syz [ 1016.284119][ T9437] usb 3-1: Manufacturer: syz [ 1016.284135][ T9437] usb 3-1: SerialNumber: syz [ 1016.849196][ T31] audit: type=1326 audit(1791075575.064:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31725 comm="syz.9.10286" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc90ec code=0x0 [ 1017.093402][ T9382] usb 3-1: USB disconnect, device number 116 [ 1017.203822][ T5711] gspca_sonixj: reg_w1 err -71 [ 1017.224840][ T5711] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1017.268719][ T5711] usb 4-1: USB disconnect, device number 55 [ 1019.667003][T31836] loop5: detected capacity change from 0 to 7 [ 1019.669719][T31836] Dev loop5: unable to read RDB block 7 [ 1019.669751][T31836] loop5: AHDI p1 p2 p3 [ 1019.669775][T31836] loop5: partition table partially beyond EOD, truncated [ 1019.704809][T31836] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1019.704841][T31836] loop5: p3 start 335544320 is beyond EOD, truncated [ 1019.755609][T31840] loop9: detected capacity change from 0 to 7 [ 1019.778043][T31840] Dev loop9: unable to read RDB block 7 [ 1019.778070][T31840] loop9: AHDI p2 p3 [ 1019.778089][T31840] loop9: partition table partially beyond EOD, truncated [ 1019.778273][T31840] loop9: p3 start 335544320 is beyond EOD, truncated [ 1020.270046][T31862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10324'. [ 1020.350402][T31862] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1020.380117][T31865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10324'. [ 1020.421555][T31862] gretap0: entered promiscuous mode [ 1020.426465][T31862] debugfs: 'hsr1' already exists in 'hsr' [ 1020.427744][T31862] Cannot create hsr debugfs directory [ 1020.754579][T19113] Bluetooth: hci3: command 0x2016 tx timeout [ 1021.381484][ T5621] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1021.502976][T20090] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1021.543460][ T5621] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1021.546209][ T5621] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1021.546246][ T5621] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1021.546288][ T5621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.600334][T31892] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1021.630612][ T5621] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1021.651328][T20090] usb 10-1: Using ep0 maxpacket: 16 [ 1021.652047][T20090] usb 10-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1021.653198][T20090] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1021.653239][T20090] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.658245][T20090] usb 10-1: config 0 descriptor?? [ 1022.069268][ T5621] usb 5-1: USB disconnect, device number 46 [ 1022.102300][T20090] elo 0003:04E7:0009.0097: unknown main item tag 0x1 [ 1022.102343][T20090] elo 0003:04E7:0009.0097: unknown main item tag 0x0 [ 1022.102374][T20090] elo 0003:04E7:0009.0097: unknown main item tag 0x0 [ 1022.102443][T20090] elo 0003:04E7:0009.0097: unknown main item tag 0x0 [ 1022.102473][T20090] elo 0003:04E7:0009.0097: unknown main item tag 0x0 [ 1022.102503][T20090] elo 0003:04E7:0009.0097: unknown main item tag 0x0 [ 1022.102529][T20090] elo 0003:04E7:0009.0097: unknown main item tag 0x0 [ 1022.102557][T20090] elo 0003:04E7:0009.0097: unknown main item tag 0x0 [ 1022.102584][T20090] elo 0003:04E7:0009.0097: unknown main item tag 0x0 [ 1022.102610][T20090] elo 0003:04E7:0009.0097: unknown main item tag 0x0 [ 1022.102639][T20090] elo 0003:04E7:0009.0097: item fetching failed at offset 36/40 [ 1022.103367][T20090] elo 0003:04E7:0009.0097: parse failed [ 1022.103492][T20090] elo 0003:04E7:0009.0097: probe with driver elo failed with error -22 [ 1022.313246][T31897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.317878][T31897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.320466][T20090] usb 10-1: USB disconnect, device number 12 [ 1023.682613][T31956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10348'. [ 1024.275232][ T31] audit: type=1804 audit(1791075582.494:1505): pid=31973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.10355" name="/newroot/69/file1" dev="tmpfs" ino=375 res=1 errno=0 [ 1024.685401][T31992] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1024.685458][T31992] block device autoloading is deprecated and will be removed. [ 1024.901466][ T5621] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 1025.052546][ T5621] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1025.054131][ T5621] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1025.054166][ T5621] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1025.054197][ T5621] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1025.056762][ T5621] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.056792][ T5621] usb 10-1: Product: syz [ 1025.056810][ T5621] usb 10-1: Manufacturer: syz [ 1025.056827][ T5621] usb 10-1: SerialNumber: syz [ 1025.140367][ T5621] usb 10-1: config 0 descriptor?? [ 1025.141774][T31995] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1025.247545][T32010] netlink: 'syz.4.10368': attribute type 34 has an invalid length. [ 1025.291945][ T5621] rc_core: IR keymap rc-streamzap not found [ 1025.291976][ T5621] Registered IR keymap rc-empty [ 1025.296324][ T5621] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1025.329199][ T5621] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input178 [ 1025.497340][ T5621] usb 10-1: USB disconnect, device number 13 [ 1025.615174][T32013] cifs: Unknown parameter '0,€' [ 1026.724487][T32042] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10381'. [ 1026.729724][T32042] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10381'. [ 1026.738950][T32042] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10381'. [ 1026.974927][ T9437] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1027.133349][ T9437] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1027.134980][ T9437] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.135015][ T9437] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.135040][ T9437] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1027.135086][ T9437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.202146][ T9437] usb 4-1: config 0 descriptor?? [ 1027.709701][ T9437] plantronics 0003:047F:FFFF.0098: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1028.995028][ C1] plantronics 0003:047F:FFFF.0098: usb_submit_urb(ctrl) failed: -1 [ 1029.006035][ T5621] usb 4-1: USB disconnect, device number 56 [ 1029.215558][ T31] audit: type=1804 audit(1791075587.434:1506): pid=32095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.10393" name="/newroot/96/file1" dev="tmpfs" ino=507 res=1 errno=0 [ 1029.496512][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c436400: rx timeout, send abort [ 1029.496869][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c436400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1029.931362][ T9372] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1030.040548][T32132] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1030.087283][ T9372] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1030.091139][T32132] bond4: (slave lo): Enslaving as an active interface with an up link [ 1030.110614][ T9372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.110644][ T9372] usb 4-1: Product: syz [ 1030.110668][ T9372] usb 4-1: Manufacturer: syz [ 1030.110686][ T9372] usb 4-1: SerialNumber: syz [ 1030.118233][T32132] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1030.506124][ T9372] rtl8150 4-1:1.0: couldn't reset the device [ 1030.506448][ T9372] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1030.535287][ T9372] usb 4-1: USB disconnect, device number 57 [ 1031.090484][T32167] input: syz0 as /devices/virtual/input/input179 [ 1031.541635][ T7772] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1031.645735][T32194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10419'. [ 1031.706053][T32194] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1031.718388][ T7772] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1031.733722][ T7772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.733761][ T7772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.733786][ T7772] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1031.733831][ T7772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.787302][ T7772] usb 5-1: config 0 descriptor?? [ 1031.875466][T32194] bond5: (slave batadv1): Opening slave failed [ 1032.199694][T32209] netlink: 'syz.0.10424': attribute type 1 has an invalid length. [ 1032.199719][T32209] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10424'. [ 1032.346085][ T7772] plantronics 0003:047F:FFFF.0099: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1033.471701][T20090] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1033.632060][ C1] plantronics 0003:047F:FFFF.0099: usb_submit_urb(ctrl) failed: -1 [ 1033.654617][T20090] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1033.655205][T20090] usb 3-1: config 0 has no interfaces? [ 1033.678553][T20090] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.678584][T20090] usb 3-1: Product: syz [ 1033.678599][T20090] usb 3-1: Manufacturer: syz [ 1033.678614][T20090] usb 3-1: SerialNumber: syz [ 1033.705054][T20090] usb 3-1: config 0 descriptor?? [ 1033.761683][ T9372] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1033.911359][ T9372] usb 10-1: Using ep0 maxpacket: 32 [ 1033.913065][ T9372] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1033.914140][ T9372] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1033.914168][ T9372] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1033.914191][ T9372] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1033.914247][ T9372] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1033.914264][ T9372] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1033.914282][ T9372] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1033.914312][ T9372] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.920789][ T9372] usb 10-1: config 0 descriptor?? [ 1034.048038][ T9437] usb 3-1: USB disconnect, device number 117 [ 1034.148368][ T9372] usblp 10-1:0.0: usblp1: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1034.417107][ T9437] usb 10-1: USB disconnect, device number 14 [ 1034.430831][ T9437] usblp1: removed [ 1034.544893][T20089] usb 5-1: USB disconnect, device number 47 [ 1034.772131][T20083] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1034.921637][T20083] usb 4-1: Using ep0 maxpacket: 16 [ 1034.923245][T20083] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1034.927647][T20083] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1034.927678][T20083] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1034.935383][T20083] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.935443][T20083] usb 4-1: Product: syz [ 1034.935486][T20083] usb 4-1: Manufacturer: syz [ 1034.935528][T20083] usb 4-1: SerialNumber: syz [ 1034.986872][T20083] usb 4-1: config 0 descriptor?? [ 1035.268611][T32282] could not allocate digest TFM handle sha1-ni [ 1035.290150][T20083] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input180 [ 1035.613689][T20083] rc_core: IR keymap rc-imon-pad not found [ 1035.613713][T20083] Registered IR keymap rc-empty [ 1035.613798][T20083] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1035.613820][T20083] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1035.692906][T20083] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1035.697451][T20083] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input181 [ 1035.728739][T20083] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:58> initialized [ 1035.979308][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1035.979787][ T5621] usb 4-1: USB disconnect, device number 58 [ 1036.613315][T32315] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1036.618178][T32315] bond1: (slave lo): Enslaving as an active interface with an up link [ 1036.644031][T32315] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1036.671444][T20083] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1036.822218][T20083] usb 10-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1036.822971][T20083] usb 10-1: config 0 has no interfaces? [ 1036.825731][T20083] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.825760][T20083] usb 10-1: Product: syz [ 1036.825779][T20083] usb 10-1: Manufacturer: syz [ 1036.825797][T20083] usb 10-1: SerialNumber: syz [ 1036.876771][T20083] usb 10-1: config 0 descriptor?? [ 1037.109035][T20083] usb 10-1: USB disconnect, device number 15 [ 1037.111385][ T9382] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1037.302375][ T9382] usb 4-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 1037.303961][ T9382] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.304013][ T9382] usb 4-1: config 16 interface 0 altsetting 75 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1037.304045][ T9382] usb 4-1: config 16 interface 0 has no altsetting 0 [ 1037.304082][ T9382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.716413][ T9382] usb 4-1: string descriptor 0 read error: -71 [ 1037.737848][ T9382] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1037.737969][ T9382] imon 4-1:16.0: unable to initialize intf0, err -19 [ 1037.737989][ T9382] imon:imon_probe: failed to initialize context! [ 1037.738003][ T9382] imon 4-1:16.0: unable to register, err -19 [ 1037.770648][ T9382] usb 4-1: USB disconnect, device number 59 [ 1038.556408][T32349] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1038.598475][T32349] bond1: (slave lo): Enslaving as an active interface with an up link [ 1038.622944][T32349] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1039.164022][T32372] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10486'. [ 1039.164058][T32372] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10486'. [ 1039.311545][T20083] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1039.462184][T20083] usb 3-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.00 [ 1039.463460][T20083] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.463495][T20083] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.463521][T20083] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1039.463557][T20083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.468875][T20083] usb 3-1: config 0 descriptor?? [ 1039.935048][T20083] input: HID 12ba:074b as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:12BA:074B.009A/input/input182 [ 1040.014746][T20083] sony 0003:12BA:074B.009A: input,hidraw0: USB HID v80.00 Joystick [HID 12ba:074b] on usb-dummy_hcd.2-1/input0 [ 1040.158521][T20083] usb 3-1: USB disconnect, device number 118 [ 1040.198669][T32391] fido_id[32391]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1040.603479][T32401] syz_tun: entered allmulticast mode [ 1040.604825][T32400] syz_tun: left allmulticast mode [ 1040.661708][ T9437] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1040.707735][T32405] netlink: 204 bytes leftover after parsing attributes in process `syz.3.10491'. [ 1040.708585][T32405] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10491'. [ 1040.821428][ T9437] usb 10-1: Using ep0 maxpacket: 16 [ 1040.822171][ T9437] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1040.823180][ T9437] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1040.823214][ T9437] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1040.825606][ T9437] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.825634][ T9437] usb 10-1: Product: syz [ 1040.825651][ T9437] usb 10-1: Manufacturer: syz [ 1040.825674][ T9437] usb 10-1: SerialNumber: syz [ 1040.828891][ T9437] usb 10-1: config 0 descriptor?? [ 1041.118426][ C1] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1041.139199][ T9437] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input183 [ 1041.182877][ T9437] imon:send_packet: packet tx failed (-71) [ 1041.201372][ T9437] imon 10-1:0.0: panel buttons/knobs setup failed [ 1041.284833][ T9437] rc_core: IR keymap rc-imon-pad not found [ 1041.284868][ T9437] Registered IR keymap rc-empty [ 1041.284943][ T9437] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1041.284962][ T9437] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1041.286597][ T9437] imon:send_packet: packet tx failed (-71) [ 1041.328643][ T9437] imon 10-1:0.0: remote input dev register failed [ 1041.328822][ T9437] imon 10-1:0.0: imon_init_intf0: rc device setup failed [ 1041.434402][ T9437] imon 10-1:0.0: unable to initialize intf0, err 0 [ 1041.434428][ T9437] imon:imon_probe: failed to initialize context! [ 1041.434441][ T9437] imon 10-1:0.0: unable to register, err -19 [ 1041.464161][ T9437] usb 10-1: USB disconnect, device number 16 [ 1041.596419][T32425] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1041.622511][T32425] bond3: (slave lo): Enslaving as an active interface with an up link [ 1041.641740][T32425] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1041.771602][T32433] ================================================================== [ 1041.771624][T32433] BUG: KASAN: slab-out-of-bounds in try_module_get+0x46/0xc0 [ 1041.771675][T32433] Write of size 4 at addr ffff88802bd9bb00 by task syz.0.10504/32433 [ 1041.771695][T32433] [ 1041.771714][T32433] CPU: 1 UID: 0 PID: 32433 Comm: syz.0.10504 Tainted: G L syzkaller #0 PREEMPT(full) [ 1041.771744][T32433] Tainted: [L]=SOFTLOCKUP [ 1041.771753][T32433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1041.771768][T32433] Call Trace: [ 1041.771777][T32433] [ 1041.771788][T32433] dump_stack_lvl+0xe8/0x150 [ 1041.771822][T32433] print_address_description+0x55/0x1e0 [ 1041.771854][T32433] ? try_module_get+0x46/0xc0 [ 1041.771886][T32433] print_report+0x58/0x70 [ 1041.771914][T32433] kasan_report+0x117/0x150 [ 1041.771946][T32433] ? try_module_get+0x46/0xc0 [ 1041.771984][T32433] kasan_check_range+0x264/0x2c0 [ 1041.772017][T32433] try_module_get+0x46/0xc0 [ 1041.772050][T32433] dvb_device_open+0xef/0x340 [ 1041.772073][T32433] ? do_raw_spin_unlock+0xf5/0x200 [ 1041.772116][T32433] chrdev_open+0x4d9/0x600 [ 1041.772146][T32433] ? __pfx_chrdev_open+0x10/0x10 [ 1041.772173][T32433] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1041.772204][T32433] ? __pfx_chrdev_open+0x10/0x10 [ 1041.772231][T32433] do_dentry_open+0x816/0x1380 [ 1041.772265][T32433] vfs_open+0x3b/0x340 [ 1041.772292][T32433] ? path_openat+0x1428/0x1d60 [ 1041.772318][T32433] path_openat+0x1443/0x1d60 [ 1041.772352][T32433] do_file_open+0x23e/0x4a0 [ 1041.772379][T32433] ? __pfx_do_file_open+0x10/0x10 [ 1041.772416][T32433] ? _raw_spin_unlock+0x28/0x50 [ 1041.772444][T32433] ? alloc_fd+0x651/0x6c0 [ 1041.772479][T32433] do_sys_openat2+0x115/0x200 [ 1041.772511][T32433] ? __pfx_do_sys_openat2+0x10/0x10 [ 1041.772542][T32433] ? exc_page_fault+0x6a/0xc0 [ 1041.772577][T32433] __ia32_compat_sys_openat+0x131/0x160 [ 1041.772614][T32433] do_int80_emulation+0x198/0x500 [ 1041.772648][T32433] ? trace_irq_disable+0x3b/0x140 [ 1041.772672][T32433] ? asm_int80_emulation+0x1a/0x20 [ 1041.772695][T32433] ? clear_bhb_loop+0x70/0xc0 [ 1041.772718][T32433] ? clear_bhb_loop+0x70/0xc0 [ 1041.772744][T32433] asm_int80_emulation+0x1a/0x20 [ 1041.772766][T32433] RIP: 0023:0xf71f75ab [ 1041.772785][T32433] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1041.772806][T32433] RSP: 002b:00000000f54b603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1041.772832][T32433] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54b6100 [ 1041.772849][T32433] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1041.772865][T32433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1041.772880][T32433] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1041.772895][T32433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1041.772919][T32433] [ 1041.772928][T32433] [ 1041.772934][T32433] Allocated by task 1: [ 1041.772954][T32433] kasan_save_track+0x3e/0x80 [ 1041.772979][T32433] __kasan_kmalloc+0x93/0xb0 [ 1041.773004][T32433] __kmalloc_cache_noprof+0x321/0x600 [ 1041.773034][T32433] bus_add_driver+0x162/0x670 [ 1041.773054][T32433] driver_register+0x23a/0x320 [ 1041.773084][T32433] i2c_register_driver+0xbb/0x1a0 [ 1041.773122][T32433] do_one_initcall+0x250/0x870 [ 1041.773153][T32433] do_initcall_level+0x10a/0x1a0 [ 1041.773179][T32433] do_initcalls+0x59/0xa0 [ 1041.773204][T32433] kernel_init_freeable+0x29d/0x3e0 [ 1041.773229][T32433] kernel_init+0x22/0x1d0 [ 1041.773251][T32433] ret_from_fork+0x514/0xb70 [ 1041.773269][T32433] ret_from_fork_asm+0x1a/0x30 [ 1041.773301][T32433] [ 1041.773307][T32433] The buggy address belongs to the object at ffff88802bd9ba00 [ 1041.773307][T32433] which belongs to the cache kmalloc-256 of size 256 [ 1041.773326][T32433] The buggy address is located 48 bytes to the right of [ 1041.773326][T32433] allocated 208-byte region [ffff88802bd9ba00, ffff88802bd9bad0) [ 1041.773350][T32433] [ 1041.773356][T32433] The buggy address belongs to the physical page: [ 1041.773369][T32433] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bd9a [ 1041.773389][T32433] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1041.773406][T32433] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1041.773426][T32433] page_type: f5(slab) [ 1041.773447][T32433] raw: 00fff00000000040 ffff88801b041b40 dead000000000100 dead000000000122 [ 1041.773466][T32433] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1041.773488][T32433] head: 00fff00000000040 ffff88801b041b40 dead000000000100 dead000000000122 [ 1041.773509][T32433] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1041.773529][T32433] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 1041.773548][T32433] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1041.773560][T32433] page dumped because: kasan: bad access detected [ 1041.773579][T32433] page_owner tracks the page as allocated [ 1041.773588][T32433] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18481658251 [ 1041.773625][T32433] post_alloc_hook+0x1f9/0x250 [ 1041.773648][T32433] get_page_from_freelist+0x2209/0x2280 [ 1041.773673][T32433] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1041.773698][T32433] allocate_slab+0x7d/0x620 [ 1041.773726][T32433] refill_objects+0x2d5/0x350 [ 1041.773756][T32433] __pcs_replace_empty_main+0x2c8/0x6c0 [ 1041.773785][T32433] __kmalloc_cache_noprof+0x39b/0x600 [ 1041.773808][T32433] bus_add_driver+0x162/0x670 [ 1041.773826][T32433] driver_register+0x23a/0x320 [ 1041.773855][T32433] do_one_initcall+0x250/0x870 [ 1041.773884][T32433] do_initcall_level+0x10a/0x1a0 [ 1041.773908][T32433] do_initcalls+0x59/0xa0 [ 1041.773932][T32433] kernel_init_freeable+0x29d/0x3e0 [ 1041.773957][T32433] kernel_init+0x22/0x1d0 [ 1041.773977][T32433] ret_from_fork+0x514/0xb70 [ 1041.773994][T32433] ret_from_fork_asm+0x1a/0x30 [ 1041.774024][T32433] page_owner free stack trace missing [ 1041.774032][T32433] [ 1041.774038][T32433] Memory state around the buggy address: [ 1041.774050][T32433] ffff88802bd9ba00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1041.774065][T32433] ffff88802bd9ba80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 1041.774080][T32433] >ffff88802bd9bb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1041.774091][T32433] ^ [ 1041.774111][T32433] ffff88802bd9bb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1041.774127][T32433] ffff88802bd9bc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1041.774139][T32433] ================================================================== [ 1041.774248][T32433] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1042.434338][T32433] CPU: 1 UID: 0 PID: 32433 Comm: syz.0.10504 Tainted: G L syzkaller #0 PREEMPT(full) [ 1042.445757][T32433] Tainted: [L]=SOFTLOCKUP [ 1042.450095][T32433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1042.460171][T32433] Call Trace: [ 1042.463469][T32433] [ 1042.466438][T32433] vpanic+0x56d/0xa60 [ 1042.470451][T32433] ? __pfx_vpanic+0x10/0x10 [ 1042.475002][T32433] panic+0xc5/0xd0 [ 1042.478748][T32433] ? __pfx_panic+0x10/0x10 [ 1042.483192][T32433] ? preempt_schedule_thunk+0x16/0x40 [ 1042.488584][T32433] ? preempt_schedule_thunk+0x16/0x40 [ 1042.493975][T32433] ? try_module_get+0x46/0xc0 [ 1042.498680][T32433] check_panic_on_warn+0x89/0xb0 [ 1042.503642][T32433] ? try_module_get+0x46/0xc0 [ 1042.508344][T32433] end_report+0x73/0x170 [ 1042.512616][T32433] ? try_module_get+0x46/0xc0 [ 1042.517328][T32433] kasan_report+0x128/0x150 [ 1042.521875][T32433] ? try_module_get+0x46/0xc0 [ 1042.526606][T32433] kasan_check_range+0x264/0x2c0 [ 1042.531585][T32433] try_module_get+0x46/0xc0 [ 1042.536139][T32433] dvb_device_open+0xef/0x340 [ 1042.540843][T32433] ? do_raw_spin_unlock+0xf5/0x200 [ 1042.545988][T32433] chrdev_open+0x4d9/0x600 [ 1042.550435][T32433] ? __pfx_chrdev_open+0x10/0x10 [ 1042.555401][T32433] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1042.561755][T32433] ? __pfx_chrdev_open+0x10/0x10 [ 1042.566736][T32433] do_dentry_open+0x816/0x1380 [ 1042.571537][T32433] vfs_open+0x3b/0x340 [ 1042.575626][T32433] ? path_openat+0x1428/0x1d60 [ 1042.580411][T32433] path_openat+0x1443/0x1d60 [ 1042.585030][T32433] do_file_open+0x23e/0x4a0 [ 1042.589554][T32433] ? __pfx_do_file_open+0x10/0x10 [ 1042.594608][T32433] ? _raw_spin_unlock+0x28/0x50 [ 1042.599499][T32433] ? alloc_fd+0x651/0x6c0 [ 1042.603863][T32433] do_sys_openat2+0x115/0x200 [ 1042.608566][T32433] ? __pfx_do_sys_openat2+0x10/0x10 [ 1042.613794][T32433] ? exc_page_fault+0x6a/0xc0 [ 1042.618502][T32433] __ia32_compat_sys_openat+0x131/0x160 [ 1042.624074][T32433] do_int80_emulation+0x198/0x500 [ 1042.629131][T32433] ? trace_irq_disable+0x3b/0x140 [ 1042.634173][T32433] ? asm_int80_emulation+0x1a/0x20 [ 1042.639318][T32433] ? clear_bhb_loop+0x70/0xc0 [ 1042.644020][T32433] ? clear_bhb_loop+0x70/0xc0 [ 1042.648748][T32433] asm_int80_emulation+0x1a/0x20 [ 1042.653725][T32433] RIP: 0023:0xf71f75ab [ 1042.657816][T32433] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1042.677446][T32433] RSP: 002b:00000000f54b603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1042.685885][T32433] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54b6100 [ 1042.693873][T32433] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1042.701865][T32433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1042.709854][T32433] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1042.717847][T32433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1042.725845][T32433] [ 1042.729478][T32433] Kernel Offset: disabled [ 1042.733851][T32433] Rebooting in 86400 seconds..