last executing test programs: 18m20.23455175s ago: executing program 32 (id=13926): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000024c0)=""/4080, 0xff0}, {&(0x7f00000000c0)=""/77, 0x4d}], 0x2}, 0x2020) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) 17m13.422414855s ago: executing program 1 (id=14942): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0xa20}, 0x1fe) write(r0, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800030000000000", 0x24) 17m12.593797843s ago: executing program 1 (id=14943): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r0, &(0x7f0000000040)=0x10, r1, 0x0, 0x807, 0x0) 17m12.513863248s ago: executing program 1 (id=14944): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) 17m12.390456328s ago: executing program 1 (id=14947): r0 = socket(0xa, 0x3, 0xff) fcntl$setstatus(r0, 0x4, 0x42000) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xd, 0x7, @mcast2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c60133", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00', 0x3}, {&(0x7f0000000280)="bdac", 0x2}], 0x4}, 0x20008b88) 17m12.359435645s ago: executing program 1 (id=14955): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 17m12.186612775s ago: executing program 1 (id=14949): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000500)={{0x16, @dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x4, 'wrr\x00', 0x0, 0x20, 0x50}, {@local, 0x4e20, 0x10000, 0x0, 0x7ffffffd, 0xffffffff}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) 16m56.992398412s ago: executing program 33 (id=14949): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000500)={{0x16, @dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x4, 'wrr\x00', 0x0, 0x20, 0x50}, {@local, 0x4e20, 0x10000, 0x0, 0x7ffffffd, 0xffffffff}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) 6m18.513178229s ago: executing program 5 (id=24384): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x58, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x28, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7}, @broadcast, @broadcast, @initial, {0x0, 0x39}, @device_a, @value={0x6, 0x0, 0x0, 0x1, 0x7}, @value=@ver_80211n={0x0, 0xf6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6m18.395935995s ago: executing program 5 (id=24387): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) 6m18.204112124s ago: executing program 5 (id=24391): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x5, {0x2, 0x4, 0x888a, 0x3}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000140)=ANY=[], &(0x7f0000000280)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m16.411394273s ago: executing program 5 (id=24410): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000280)='./file0/../file0\x00', 0x0) 6m16.245353313s ago: executing program 5 (id=24414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r1, 0x5, 0x0, 0x0, {{0x5d}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 6m15.975926551s ago: executing program 3 (id=24417): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r0, 0x80047437, 0x0) 6m15.870979502s ago: executing program 3 (id=24419): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x4000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 6m15.758193167s ago: executing program 3 (id=24420): r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000caa000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x2, 0x7f, 0x3) 6m15.392919266s ago: executing program 3 (id=24424): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000280)='./file0/../file0\x00', 0x0) 6m15.321125275s ago: executing program 3 (id=24425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000118, 0x0, 0x1}]}) 6m15.006971536s ago: executing program 5 (id=24426): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, r1, 0x1, 0xfffbff80, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20088804}, 0x4080) 6m14.724098538s ago: executing program 34 (id=24426): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, r1, 0x1, 0xfffbff80, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20088804}, 0x4080) 6m13.91614499s ago: executing program 3 (id=24430): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x4}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) 6m13.605226331s ago: executing program 35 (id=24430): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x4}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) 2m24.158830365s ago: executing program 0 (id=26821): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000e80)={0x1, {{0xa, 0x0, 0xfffffff7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback, 0x4}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 2m24.108666108s ago: executing program 0 (id=26822): r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x666666666666763}) 2m23.858545746s ago: executing program 0 (id=26826): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 2m23.707996739s ago: executing program 0 (id=26837): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, @ib={0x1b, 0x5, 0xffffffff, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r1, 0x2}}, 0x18) 2m23.614124818s ago: executing program 0 (id=26830): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2m23.581857088s ago: executing program 0 (id=26832): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth0_virt_wifi\x00', 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 2m8.392215651s ago: executing program 36 (id=26832): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth0_virt_wifi\x00', 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 2m6.010473575s ago: executing program 4 (id=26903): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x4, r1, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) 2m5.83127433s ago: executing program 4 (id=26904): r0 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000000a"], 0x28}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2m5.637814458s ago: executing program 4 (id=26905): r0 = syz_open_dev$media(&(0x7f0000000180), 0x80000004, 0xa140) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r1, 0x0, 0x0}) 2m4.975198448s ago: executing program 4 (id=26914): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x40}, 0x8841) close(r1) 2m4.878553793s ago: executing program 4 (id=26909): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2m4.729967726s ago: executing program 4 (id=26910): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup3(r0, r1, 0x80000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0x18) 1m49.441352803s ago: executing program 37 (id=26910): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup3(r0, r1, 0x80000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0x18) 1m9.911606787s ago: executing program 8 (id=27351): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x1, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086201, &(0x7f0000000040)=0x7) 1m9.783673342s ago: executing program 8 (id=27353): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000080)={0x11, 0x80f3, r2, 0x1, 0xff, 0x6, @broadcast}, 0x14) 1m9.595860563s ago: executing program 8 (id=27356): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) 1m1.311463326s ago: executing program 8 (id=27415): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 1m1.268577091s ago: executing program 8 (id=27417): r0 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xb) setresuid(0x0, 0xee00, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1m0.530126797s ago: executing program 8 (id=27420): add_key$fscrypt_v1(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$setperm(0x5, r1, 0x1000) 1m0.097616861s ago: executing program 38 (id=27420): add_key$fscrypt_v1(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$setperm(0x5, r1, 0x1000) 4.879256974s ago: executing program 6 (id=27806): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x10}) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r1, &(0x7f0000000080)={r0, r2, 0x8001}) 4.781112765s ago: executing program 6 (id=27807): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) 3.836376029s ago: executing program 6 (id=27821): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x1, r0, 0x4}) 2.878260172s ago: executing program 6 (id=27832): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x7) landlock_restrict_self(r0, 0xe) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') 2.629596964s ago: executing program 7 (id=27833): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000002a000000000500000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 2.51207065s ago: executing program 6 (id=27834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x277fffffffe, 0x0, 0x4, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x8, 0x0, 0x4, r2, 0x4}) 2.373189094s ago: executing program 7 (id=27836): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r2, 0x7}, 0x8) 2.163763068s ago: executing program 9 (id=27837): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='highspeed', 0x9) shutdown(r0, 0x1) 2.163346146s ago: executing program 7 (id=27838): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) shutdown(r0, 0x1) 2.014812408s ago: executing program 7 (id=27839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 1.996055154s ago: executing program 9 (id=27840): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) 1.84965844s ago: executing program 6 (id=27842): syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.6316486s ago: executing program 9 (id=27844): setuid(0xee01) getpid() r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 1.48109055s ago: executing program 7 (id=27846): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x105, 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)="9f4544018ea380a07d420cad5c0ba74b922430688d2c4062e4dc26c13b79099781cfb01a5d9665e128959156930d951f8a85276c6a4fda4d4fc1ad3a", 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20040848) 1.435321194s ago: executing program 7 (id=27847): syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ee3b25205a0609006560010203010902"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x575, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f0000000100)=0x1b) 1.295313222s ago: executing program 9 (id=27850): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000f2, 0x0, 0x5}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x22, 0x0, 0x0) 552.009893ms ago: executing program 2 (id=27853): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 387.995662ms ago: executing program 2 (id=27854): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x4) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000640)='./file0\x00', 0x2) 358.371662ms ago: executing program 2 (id=27855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) 207.657951ms ago: executing program 9 (id=27856): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000080)=0x3, 0x4) recvfrom$l2tp(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 207.380551ms ago: executing program 9 (id=27857): r0 = syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 112.825681ms ago: executing program 2 (id=27858): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 78.188279ms ago: executing program 2 (id=27859): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x800000, 0x0, 0xfb, "f7ffffff006af9fc1bffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x9) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x2, 0x2, "00000000000000000000000000ee00"}) 0s ago: executing program 2 (id=27860): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000000100)='[t', 0x2}], 0x1, 0x5) tee(r0, r2, 0xfffffffffffffffd, 0x0) kernel console output (not intermixed with test programs): [ 1434.694220][T24910] netlink: 43 bytes leftover after parsing attributes in process `syz.3.24052'. [ 1435.479816][ T5612] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1435.542219][T21960] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1435.654510][ T5612] usb 6-1: Using ep0 maxpacket: 16 [ 1435.657574][ T5612] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1435.657629][ T5612] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1435.657653][ T5612] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.668679][ T5612] usb 6-1: config 0 descriptor?? [ 1435.725163][T21960] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1435.725190][T21960] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1435.725207][T21960] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1435.725248][T21960] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1435.725274][T21960] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1435.733898][T21960] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1435.733928][T21960] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1435.733947][T21960] usb 4-1: Product: syz [ 1435.733961][T21960] usb 4-1: Manufacturer: syz [ 1435.826639][T21960] cdc_wdm 4-1:1.0: skipping garbage [ 1435.826660][T21960] cdc_wdm 4-1:1.0: skipping garbage [ 1435.829364][T21960] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1435.829385][T21960] cdc_wdm 4-1:1.0: Unknown control protocol [ 1436.124782][ T5612] mcp2221 0003:04D8:00DD.0092: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1436.127227][T21960] usb 4-1: USB disconnect, device number 109 [ 1436.717550][ T5612] usb 6-1: USB disconnect, device number 123 [ 1436.895306][T24971] netlink: 'syz.3.24081': attribute type 16 has an invalid length. [ 1436.895329][T24971] netlink: 'syz.3.24081': attribute type 3 has an invalid length. [ 1436.895695][T24971] netlink: 'syz.3.24081': attribute type 2 has an invalid length. [ 1436.895712][T24971] netlink: 64046 bytes leftover after parsing attributes in process `syz.3.24081'. [ 1437.257773][ T5614] Bluetooth: hci0: unexpected event for opcode 0x0c1a [ 1437.977784][T24984] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1437.985328][T24987] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1437.986021][T24987] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1438.166203][T24987] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1438.969627][T21960] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 1439.126289][T21960] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1439.126328][T21960] usb 4-1: can't read configurations, error -71 [ 1439.402186][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 1440.051189][T25027] netlink: 116 bytes leftover after parsing attributes in process `syz.3.24105'. [ 1440.360834][T24987] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1440.399143][T25034] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1441.356545][T25058] netlink: 277 bytes leftover after parsing attributes in process `syz.5.24118'. [ 1441.479440][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 1442.133114][ T5612] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1442.321585][ T5612] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.321612][ T5612] usb 6-1: config 0 has no interfaces? [ 1442.321639][ T5612] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1442.321661][ T5612] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.370399][ T5612] usb 6-1: config 0 descriptor?? [ 1443.212380][T20480] usb 6-1: USB disconnect, device number 124 [ 1444.033784][T25115] sctp: [Deprecated]: syz.5.24144 (pid 25115) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1444.033784][T25115] Use struct sctp_sack_info instead [ 1444.694866][T25142] tap0: tun_chr_ioctl cmd 1074025675 [ 1444.694880][T25142] tap0: persist enabled [ 1446.097993][T25196] tmpfs: Invalid gid '0x00000000ffffffff' [ 1446.201736][T25203] tap0: tun_chr_ioctl cmd 1074025675 [ 1446.201758][T25203] tap0: persist enabled [ 1446.611233][T25218] tmpfs: Invalid gid '0x00000000ffffffff' [ 1447.461477][T21960] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1447.629238][T21960] usb 6-1: Using ep0 maxpacket: 16 [ 1447.646811][T21960] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1447.646839][T21960] usb 6-1: config 1 has no interface number 0 [ 1447.646892][T21960] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1447.646916][T21960] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1447.646938][T21960] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1447.692959][T21960] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1447.692990][T21960] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1447.693009][T21960] usb 6-1: Product: syz [ 1447.693023][T21960] usb 6-1: Manufacturer: syz [ 1447.693037][T21960] usb 6-1: SerialNumber: syz [ 1447.745886][T25238] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1447.746015][T25238] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1447.869661][ T5612] kernel write not supported for file /snd/seq (pid: 5612 comm: kworker/0:5) [ 1448.162971][T25238] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1448.163095][T25238] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1448.365166][T21960] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1448.365455][T21960] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71 [ 1448.389407][T21960] usb 6-1: USB disconnect, device number 125 [ 1449.179675][T21960] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1449.331027][T21960] usb 4-1: Using ep0 maxpacket: 32 [ 1449.332891][T21960] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1449.332919][T21960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.366368][T21960] usb 4-1: config 0 descriptor?? [ 1449.384612][T21960] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1450.218493][T21960] gspca_sunplus: reg_w_riv err -71 [ 1450.218581][T21960] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1450.248725][T21960] usb 4-1: USB disconnect, device number 112 [ 1452.382806][T25410] netlink: 104 bytes leftover after parsing attributes in process `syz.5.24276'. [ 1452.478808][ T5612] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1452.628929][ T5612] usb 4-1: Using ep0 maxpacket: 16 [ 1452.631704][ T5612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.631736][ T5612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.631774][ T5612] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1452.631797][ T5612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.656937][ T5612] usb 4-1: config 0 descriptor?? [ 1453.090945][ T5612] corsair 0003:1B1C:1B02.0093: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 1453.264508][T25425] netlink: 256 bytes leftover after parsing attributes in process `syz.5.24283'. [ 1453.352194][ T5612] corsair 0003:1B1C:1B02.0093: Read invalid backlight brightness: 8b. [ 1453.533476][T21960] usb 4-1: USB disconnect, device number 113 [ 1454.320787][T20480] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1454.412613][ T5612] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 1454.485320][T20480] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1454.485350][T20480] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.485370][T20480] usb 6-1: Product: syz [ 1454.485385][T20480] usb 6-1: Manufacturer: syz [ 1454.485399][T20480] usb 6-1: SerialNumber: syz [ 1454.496624][T20480] usb 6-1: config 0 descriptor?? [ 1454.505251][T20480] hub 6-1:0.0: bad descriptor, ignoring hub [ 1454.505288][T20480] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1454.571465][ T5612] usb 4-1: not running at top speed; connect to a high speed hub [ 1454.573540][ T5612] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 160, changing to 4 [ 1454.573794][ T5612] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 1454.580686][ T5612] usb 4-1: string descriptor 0 read error: -22 [ 1454.581217][ T5612] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1454.581969][ T5612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.705861][ T5612] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1454.707137][T20480] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1454.715866][T20480] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1454.727179][T20480] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1454.727231][T20480] usb 6-1: media controller created [ 1454.790635][T20480] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1454.832818][T25445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1454.850909][T25445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.931325][ T5612] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1454.937513][T20480] DVB: Unable to find symbol dib7000p_attach() [ 1454.937524][T20480] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1454.971175][ T5612] usb 4-1: USB disconnect, device number 114 [ 1455.070671][T20480] rc_core: IR keymap rc-dib0700-rc5 not found [ 1455.070693][T20480] Registered IR keymap rc-empty [ 1455.071219][T20480] dvb-usb: could not initialize remote control. [ 1455.071231][T20480] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1455.311012][ T5612] usb 6-1: USB disconnect, device number 126 [ 1455.406704][ T5612] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1457.716103][T25522] futex_wake_op: syz.4.24322 tries to shift op by 32; fix this program [ 1458.088751][ T5612] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1458.251773][ T5612] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1458.251803][ T5612] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.258126][ T5612] usb 6-1: config 0 descriptor?? [ 1458.295148][ T5612] cp210x 6-1:0.0: cp210x converter detected [ 1458.717819][ T5612] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1458.927305][ T5612] cp210x 6-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1458.927332][ T5612] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 1458.939723][ T5612] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1458.952362][ T5612] usb 6-1: USB disconnect, device number 127 [ 1458.980713][ T5612] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1458.981419][ T5612] cp210x 6-1:0.0: device disconnected [ 1460.091520][T21960] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1460.271948][T21960] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1460.271994][T21960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1460.272020][T21960] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1460.272061][T21960] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1460.272084][T21960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.340586][T21960] usb 6-1: config 0 descriptor?? [ 1460.347289][T25578] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1460.771493][T21960] hid_parser_main: 13 callbacks suppressed [ 1460.771515][T21960] hid-multitouch 0003:1FD2:6007.0094: unknown main item tag 0x1 [ 1460.771544][T21960] hid-multitouch 0003:1FD2:6007.0094: ignoring exceeding usage max [ 1460.773823][T21960] hid-multitouch 0003:1FD2:6007.0094: unknown main item tag 0x0 [ 1460.773860][T21960] hid-multitouch 0003:1FD2:6007.0094: unknown main item tag 0x2 [ 1460.777716][T21960] hid-multitouch 0003:1FD2:6007.0094: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 1461.004753][ T5612] usb 6-1: USB disconnect, device number 2 [ 1461.793257][T25631] input: syz1 as /devices/virtual/input/input136 [ 1461.793293][T25631] input: failed to attach handler leds to device input136, error: -6 [ 1461.978320][T21960] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1461.988314][ T9829] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1462.131145][T21960] usb 4-1: Using ep0 maxpacket: 16 [ 1462.147937][T21960] usb 4-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 1462.147967][T21960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.147988][T21960] usb 4-1: Product: syz [ 1462.148002][T21960] usb 4-1: Manufacturer: syz [ 1462.148017][T21960] usb 4-1: SerialNumber: syz [ 1462.148388][ T9829] usb 6-1: Using ep0 maxpacket: 8 [ 1462.186826][ T9829] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1462.186855][ T9829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.186875][ T9829] usb 6-1: Product: syz [ 1462.186889][ T9829] usb 6-1: Manufacturer: syz [ 1462.186903][ T9829] usb 6-1: SerialNumber: syz [ 1462.234647][ T9829] usb 6-1: config 0 descriptor?? [ 1462.244951][ T9829] gspca_main: se401-2.14.0 probing 047d:5003 [ 1462.437442][T21960] upd78f0730 4-1:8.0: upd78f0730 converter detected [ 1462.451087][T21960] usb 4-1: upd78f0730 converter now attached to ttyUSB0 [ 1462.463824][T21960] usb 4-1: USB disconnect, device number 115 [ 1462.492610][T21960] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 1462.496492][T21960] upd78f0730 4-1:8.0: device disconnected [ 1462.651501][ T9829] gspca_se401: ExtraFeatures: 48 [ 1462.651514][ T9829] gspca_se401: Frame size: 0x0 1/16th janggu [ 1462.651521][ T9829] gspca_se401: Frame size: 0x0 1/16th janggu [ 1462.651528][ T9829] gspca_se401: Frame size: 0x0 1/16th janggu [ 1462.651535][ T9829] gspca_se401: Frame size: 0x0 1/16th janggu [ 1462.651548][ T9829] gspca_se401: Frame size: 0x0 1/16th janggu [ 1462.651554][ T9829] gspca_se401: Frame size: 0x0 1/16th janggu [ 1462.651561][ T9829] gspca_se401: Frame size: 0x0 1/16th janggu [ 1462.651568][ T9829] gspca_se401: Frame size: 0x0 1/16th janggu [ 1462.651574][ T9829] gspca_se401: Frame size: 0x0 1/16th janggu [ 1462.651581][ T9829] gspca_se401: Frame size: 0x0 1/16th janggu [ 1462.861975][ T9829] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input137 [ 1462.941546][ T9829] usb 6-1: USB disconnect, device number 3 [ 1463.135296][T25649] program syz.3.24376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1463.690873][T25673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24386'. [ 1464.158238][ T9829] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1464.314811][ T9829] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1464.314840][ T9829] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1464.314864][ T9829] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1464.331365][ T9829] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1464.331394][ T9829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.331414][ T9829] usb 6-1: Product: syz [ 1464.331440][ T9829] usb 6-1: Manufacturer: syz [ 1464.331455][ T9829] usb 6-1: SerialNumber: syz [ 1464.347206][ T9829] usb 6-1: config 0 descriptor?? [ 1464.350916][T25681] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1464.351084][T25681] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1464.358687][ T9829] usb 6-1: ucan: probing device on interface #0 [ 1464.538173][ T5612] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1464.688177][ T5612] usb 4-1: Using ep0 maxpacket: 32 [ 1464.700210][ T5612] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1464.700241][ T5612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.774667][ T9829] usb 6-1: ucan: device reported invalid device info [ 1464.774689][ T9829] usb 6-1: ucan: probe failed; try to update the device firmware [ 1464.810170][T25705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1464.814855][ T10] kernel write not supported for file /uhid (pid: 10 comm: kworker/0:1) [ 1464.972496][ T5612] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1464.989412][ T5612] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1464.991130][ T5612] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1464.991197][ T5612] usb 4-1: media controller created [ 1464.992411][ T10] usb 6-1: USB disconnect, device number 4 [ 1465.044483][ T5612] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1465.377147][ T5612] az6027: usb out operation failed. (-71) [ 1465.377166][ T5612] stb0899_attach: Driver disabled by Kconfig [ 1465.377176][ T5612] az6027: no front-end attached [ 1465.377176][ T5612] [ 1465.392004][ T5612] az6027: usb out operation failed. (-71) [ 1465.392023][ T5612] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1465.415450][ T5612] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input138 [ 1465.432525][ T5612] dvb-usb: schedule remote query interval to 400 msecs. [ 1465.432546][ T5612] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1465.451793][ T5612] usb 4-1: USB disconnect, device number 116 [ 1465.872867][ T5612] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1467.475144][ T4921] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1467.596878][ T4921] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1467.600323][ T4921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1467.676960][ T4921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1467.688927][ T4921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1468.700929][ T4921] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1468.757674][ T4921] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1468.771598][ T4921] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1468.775311][ T4921] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1468.777186][ T4921] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1469.135480][T12386] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.727256][ T5614] Bluetooth: hci0: command tx timeout [ 1469.989216][T12386] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.031471][T25799] netlink: 766 bytes leftover after parsing attributes in process `syz.0.24440'. [ 1470.508502][T12386] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.997758][ T5614] Bluetooth: hci1: command tx timeout [ 1471.232933][T25759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.233270][T25759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.233450][T25759] bridge_slave_0: entered allmulticast mode [ 1471.235458][T25759] bridge_slave_0: entered promiscuous mode [ 1471.279915][T25759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1471.280098][T25759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.280312][T25759] bridge_slave_1: entered allmulticast mode [ 1471.286128][T25759] bridge_slave_1: entered promiscuous mode [ 1471.407469][T25759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1471.441252][T25759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.538715][ T38] audit: type=1326 audit(2000000104.155:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25809 comm="syz.0.24442" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ec48ce59 code=0x7fc00000 [ 1471.799380][ T5614] Bluetooth: hci0: command tx timeout [ 1471.815046][T25759] team0: Port device team_slave_0 added [ 1471.856392][T25759] team0: Port device team_slave_1 added [ 1471.970022][T25759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1471.970039][T25759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1471.970064][T25759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1471.982363][T25759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1471.982378][T25759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1471.982404][T25759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1472.252532][T12386] dvmrp0: left allmulticast mode [ 1472.252664][T12386] hsr0: left allmulticast mode [ 1472.252686][T12386] hsr_slave_1: left allmulticast mode [ 1472.267263][T12386] dvmrp2: left allmulticast mode [ 1473.077754][ T5614] Bluetooth: hci1: command tx timeout [ 1473.118895][T12386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1473.198569][T12386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1473.298535][T12386] bond0 (unregistering): (slave batadv_slave_1): Releasing backup interface [ 1473.346060][T12386] bond0 (unregistering): Released all slaves [ 1473.386775][T25759] hsr_slave_0: entered promiscuous mode [ 1473.394078][T25759] hsr_slave_1: entered promiscuous mode [ 1473.395116][T25759] debugfs: 'hsr0' already exists in 'hsr' [ 1473.395139][T25759] Cannot create hsr debugfs directory [ 1473.679826][T12386] tipc: Left network mode [ 1473.929133][ T5614] Bluetooth: hci0: command tx timeout [ 1474.094732][T25774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.094990][T25774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.095260][T25774] bridge_slave_0: entered allmulticast mode [ 1474.099388][T25774] bridge_slave_0: entered promiscuous mode [ 1474.160384][T25774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.161021][T25774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.161314][T25774] bridge_slave_1: entered allmulticast mode [ 1474.218267][T25774] bridge_slave_1: entered promiscuous mode [ 1474.434655][T25774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1474.486802][T25774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1474.812805][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1474.950859][T25774] team0: Port device team_slave_0 added [ 1474.968458][T25774] team0: Port device team_slave_1 added [ 1475.186639][ T5614] Bluetooth: hci1: command tx timeout [ 1475.395417][T12386] IPVS: stopping backup sync thread 17388 ... [ 1475.491218][T25774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1475.491230][T25774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1475.491245][T25774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1475.494450][T25774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1475.494463][T25774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1475.494482][T25774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1475.968766][ T5614] Bluetooth: hci0: command tx timeout [ 1476.731282][T25774] hsr_slave_0: entered promiscuous mode [ 1476.734788][T25774] hsr_slave_1: entered promiscuous mode [ 1476.736494][T25774] debugfs: 'hsr0' already exists in 'hsr' [ 1476.736519][T25774] Cannot create hsr debugfs directory [ 1476.821603][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1476.970005][T25759] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1477.023427][T25759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1477.055610][T25759] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1477.076943][T25889] Bluetooth: MGMT ver 1.23 [ 1477.121196][T25759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1477.167400][T25759] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1477.243138][ T5614] Bluetooth: hci1: command tx timeout [ 1477.246684][T25759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1477.271179][T25759] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1477.342321][T25759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1477.468659][T25894] block nbd3: server does not support multiple connections per device. [ 1477.521264][T25894] block nbd3: shutting down sockets [ 1477.917360][T12386] hsr_slave_1: left promiscuous mode [ 1478.110744][T12386] veth1_macvtap: left promiscuous mode [ 1478.110851][T12386] veth0_macvtap: left promiscuous mode [ 1478.111083][T12386] 8-ºñ4: left allmulticast mode [ 1478.111325][T12386] 8-ºñ4: left promiscuous mode [ 1478.111379][T12386] veth0_vlan: left promiscuous mode [ 1479.128280][T12386] team0 (unregistering): Port device macvlan1 removed [ 1479.287831][T12386] team0 (unregistering): Port device team_slave_1 removed [ 1479.328818][T12386] team0 (unregistering): Port device team_slave_0 removed [ 1479.469828][T12386] smc: removing net device team0 with user defined pnetid SYZ2 [ 1479.582984][ T5267] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1480.443190][T25759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1480.788368][T25759] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.218049][T25905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.275651][T25905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1481.331342][ T5267] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1481.376949][T25905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.425010][T25905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1482.348071][T25774] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1482.451020][T25774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1482.522798][T25774] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1482.582506][T25774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1482.606676][T25774] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1482.674442][T25774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1482.729062][T12386] IPVS: stop unused estimator thread 0... [ 1482.732112][T25774] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1482.833799][T25774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1483.433332][T26040] input: syz0 as /devices/virtual/input/input139 [ 1483.867869][T25774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1483.881315][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.881407][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.067432][T25774] 8021q: adding VLAN 0 to HW filter on device team0 [ 1484.115771][ T2289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.122148][ T2289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1484.277641][T26058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24506'. [ 1484.321496][T12386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.321659][T12386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1484.443362][T25759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1485.166043][T25759] veth0_vlan: entered promiscuous mode [ 1485.305863][T25759] veth1_vlan: entered promiscuous mode [ 1485.460563][T25774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1485.565941][T25759] veth0_macvtap: entered promiscuous mode [ 1485.650241][T25759] veth1_macvtap: entered promiscuous mode [ 1485.873598][T25759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1485.911505][T25759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1485.952300][T25905] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.954412][T25905] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.960702][T25905] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.963026][T25905] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.150872][T25774] veth0_vlan: entered promiscuous mode [ 1487.272001][T25774] veth1_vlan: entered promiscuous mode [ 1487.291547][ T1550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.291567][ T1550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.585938][ T1550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.585957][ T1550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.716085][T25774] veth0_macvtap: entered promiscuous mode [ 1487.782016][T25774] veth1_macvtap: entered promiscuous mode [ 1488.029072][T25774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1488.085919][T25774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1488.140196][T26119] loop9: detected capacity change from 0 to 1 [ 1488.180105][T12385] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.185578][T12385] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.248323][T12385] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.269930][T12385] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.282049][T26119] Dev loop9: unable to read RDB block 1 [ 1488.282092][T26119] loop9: unable to read partition table [ 1488.282297][T26119] loop9: partition table beyond EOD, truncated [ 1488.282327][T26119] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1490.261000][ T1550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1490.261018][ T1550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1490.793795][T25905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1490.793813][T25905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.889346][T26316] netlink: 176 bytes leftover after parsing attributes in process `syz.4.24579'. [ 1497.380651][T26330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24585'. [ 1497.382804][T26330] netlink: 12 bytes leftover after parsing attributes in process `syz.6.24585'. [ 1498.023446][T26351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1498.039639][T26351] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1498.216472][T26358] program syz.6.24597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1498.545740][T26370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24602'. [ 1500.798674][T26429] netlink: 6 bytes leftover after parsing attributes in process `syz.7.24629'. [ 1500.798718][T26429] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1501.144528][T26439] tipc: Started in network mode [ 1501.144557][T26439] tipc: Node identity ac14140f, cluster identity 4711 [ 1501.144848][T26439] tipc: New replicast peer: 172.30.0.8 [ 1501.145166][T26439] tipc: Enabled bearer , priority 15 [ 1501.150195][T26439] netlink: 12 bytes leftover after parsing attributes in process `syz.7.24632'. [ 1501.150223][T26439] tipc: Disabling bearer [ 1502.486219][T26478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1504.543080][T26536] JFS: charset not found [ 1507.146870][T26616] input: syz0 as /devices/virtual/input/input142 [ 1508.382658][T26641] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1508.919212][T26666] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1509.092708][ T38] audit: type=1326 audit(2000000141.697:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26671 comm="syz.4.24732" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3aba3ce59 code=0x0 [ 1510.138983][T26700] loop6: detected capacity change from 0 to 524288000 [ 1510.430644][T26706] netlink: 188 bytes leftover after parsing attributes in process `syz.0.24748'. [ 1510.743833][T26702] Invalid logical block size (255) [ 1511.106578][T26719] sg_write: data in/out 352340/136 bytes for SCSI command 0x0-- guessing data in; [ 1511.106578][T26719] program syz.7.24753 not setting count and/or reply_len properly [ 1511.181057][ T38] audit: type=1326 audit(2000000143.788:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26721 comm="syz.0.24754" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03ec48ce59 code=0x0 [ 1511.741289][T26737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24762'. [ 1511.741316][T26737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.24762'. [ 1514.508615][T26813] kvm: kvm [26811]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4 [ 1514.779529][T26824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24801'. [ 1514.853848][T26826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1514.987636][T26834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24806'. [ 1514.987661][T26834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24806'. [ 1515.220167][T26844] netlink: 12 bytes leftover after parsing attributes in process `syz.7.24811'. [ 1515.500727][T26850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1516.576812][ T38] audit: type=1326 audit(2000000149.188:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.24831" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b9face59 code=0x7ffc0000 [ 1516.577513][ T38] audit: type=1326 audit(2000000149.188:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.24831" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b9face59 code=0x7ffc0000 [ 1516.580510][ T38] audit: type=1326 audit(2000000149.188:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.24831" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b9face59 code=0x7ffc0000 [ 1516.580556][ T38] audit: type=1326 audit(2000000149.188:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.24831" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f86b9face59 code=0x7ffc0000 [ 1516.580594][ T38] audit: type=1326 audit(2000000149.188:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.24831" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b9face59 code=0x7ffc0000 [ 1516.580628][ T38] audit: type=1326 audit(2000000149.188:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.24831" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b9face59 code=0x7ffc0000 [ 1516.580664][ T38] audit: type=1326 audit(2000000149.188:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.24831" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b9face59 code=0x7ffc0000 [ 1516.581817][ T38] audit: type=1326 audit(2000000149.188:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.24831" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b9face59 code=0x7ffc0000 [ 1516.581861][ T38] audit: type=1326 audit(2000000149.188:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.24831" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f86b9face59 code=0x7ffc0000 [ 1516.581899][ T38] audit: type=1326 audit(2000000149.188:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.24831" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b9face59 code=0x7ffc0000 [ 1519.873716][T26980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24870'. [ 1520.023321][T26986] netlink: 64 bytes leftover after parsing attributes in process `syz.4.24872'. [ 1520.164248][ T5614] block nbd3: Receive control failed (result -32) [ 1522.097996][T27032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24896'. [ 1522.196968][T27034] netlink: 84 bytes leftover after parsing attributes in process `syz.4.24897'. [ 1524.432923][T27070] netlink: 64 bytes leftover after parsing attributes in process `syz.4.24911'. [ 1525.763900][T27101] loop9: detected capacity change from 0 to 2640 [ 1527.544840][T27127] program syz.4.24935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1529.443150][ T9829] kernel read not supported for file /media6 (pid: 9829 comm: kworker/1:4) [ 1536.571474][T27317] binder: 27316:27317 ioctl c0306201 200000000080 returned -14 [ 1536.571892][T27317] binder: 27316:27317 ioctl c0306201 2000000003c0 returned -14 [ 1536.654304][T27321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25027'. [ 1536.654331][T27321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25027'. [ 1536.803234][T27325] netlink: 'syz.6.25031': attribute type 6 has an invalid length. [ 1536.900376][T27328] netlink: 104 bytes leftover after parsing attributes in process `syz.0.25030'. [ 1537.059073][T27338] netlink: 96 bytes leftover after parsing attributes in process `syz.7.25036'. [ 1542.026101][T27426] pim6reg: entered allmulticast mode [ 1542.062837][T27426] team0: entered allmulticast mode [ 1542.062858][T27426] team_slave_0: entered allmulticast mode [ 1542.062884][T27426] team_slave_1: entered allmulticast mode [ 1542.430312][T27440] netlink: 20 bytes leftover after parsing attributes in process `syz.7.25082'. [ 1543.286589][T27477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25101'. [ 1543.286627][T27477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25101'. [ 1543.358508][T27479] netlink: 40 bytes leftover after parsing attributes in process `syz.7.25102'. [ 1543.358541][T27479] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25102'. [ 1543.822719][T27499] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1543.831768][T27499] VFS: Can't find a romfs filesystem on dev nullb0. [ 1543.831768][T27499] [ 1545.317965][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.318024][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.149809][T27528] batadv_slave_1: entered promiscuous mode [ 1547.150249][T27528] batadv_slave_1: left promiscuous mode [ 1548.704503][T27583] netlink: 164 bytes leftover after parsing attributes in process `syz.7.25150'. [ 1549.777747][T27608] can0: slcan on ttyS3. [ 1550.136942][T27610] can0 (unregistered): slcan off ttyS3. [ 1554.865848][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 1554.865957][ T38] audit: type=1326 audit(2000000187.480:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27745 comm="syz.4.25208" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3aba3ce59 code=0x0 [ 1555.560558][T27774] netlink: 12 bytes leftover after parsing attributes in process `syz.7.25216'. [ 1555.923041][ T5614] Bluetooth: hci1: link tx timeout [ 1555.923277][ T5614] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1556.151557][ T5614] Bluetooth: hci1: link tx timeout [ 1556.151578][ T5614] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1556.275719][ T5614] Bluetooth: hci1: link tx timeout [ 1556.275739][ T5614] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1556.343796][ T5614] Bluetooth: hci1: link tx timeout [ 1556.343814][ T5614] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1556.513293][ T5614] Bluetooth: hci1: link tx timeout [ 1556.513315][ T5614] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1556.939656][T27815] netlink: 72 bytes leftover after parsing attributes in process `syz.7.25231'. [ 1557.590339][ T5614] Bluetooth: hci1: link tx timeout [ 1557.590360][ T5614] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1557.953897][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 1558.055505][ T5614] Bluetooth: hci1: link tx timeout [ 1558.712439][T27872] netlink: 'syz.7.25250': attribute type 1 has an invalid length. [ 1558.712454][T27872] netlink: 24 bytes leftover after parsing attributes in process `syz.7.25250'. [ 1558.892106][T27880] netlink: 232 bytes leftover after parsing attributes in process `syz.0.25252'. [ 1561.393827][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 1561.744148][ T9829] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 1561.747672][ T9829] hid-generic 0000:0000:0000.0095: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1562.748688][ T38] audit: type=1326 audit(2000000195.360:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28004 comm="syz.4.25309" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3aba3ce59 code=0x7fc00000 [ 1562.861736][T28012] program syz.6.25311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1563.473875][ T38] audit: type=1326 audit(2000000196.090:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28004 comm="syz.4.25309" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fd3aba3ce59 code=0x7fc00000 [ 1564.621534][T28071] program syz.6.25338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1567.095604][T28117] tap0: tun_chr_ioctl cmd 1074025672 [ 1567.095617][T28117] tap0: ignored: set checksum disabled [ 1567.923168][T28135] Bluetooth: MGMT ver 1.23 [ 1569.946397][T28202] binder: 28201:28202 ioctl c0306201 200000000100 returned -14 [ 1570.559982][T29301] kernel write not supported for file /sysvipc/shm (pid: 29301 comm: kworker/1:1) [ 1570.591053][T28224] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input146 [ 1572.620947][T28296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.25430'. [ 1572.620983][T28296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.25430'. [ 1575.203763][ T9829] kernel read not supported for file /comedi4 (pid: 9829 comm: kworker/1:4) [ 1579.667629][T28511] binder: 28510:28511 ioctl c0306201 200000000080 returned -14 [ 1579.669294][T28511] binder: 28510:28511 ioctl c0306201 2000000003c0 returned -14 [ 1579.768095][T28516] netlink: 12 bytes leftover after parsing attributes in process `syz.7.25525'. [ 1579.768121][T28516] netlink: 12 bytes leftover after parsing attributes in process `syz.7.25525'. [ 1581.165339][T28578] netlink: 12 bytes leftover after parsing attributes in process `syz.6.25557'. [ 1581.165356][T28578] netlink: 12 bytes leftover after parsing attributes in process `syz.6.25557'. [ 1581.296262][T28580] binder: 28579:28580 ioctl c0306201 200000000080 returned -14 [ 1581.296656][T28580] binder: 28579:28580 ioctl c0306201 2000000003c0 returned -14 [ 1581.355889][T28582] netlink: 104 bytes leftover after parsing attributes in process `syz.6.25559'. [ 1581.843302][T28590] netlink: 'syz.0.25563': attribute type 6 has an invalid length. [ 1582.988812][T28630] input: syz0 as /devices/virtual/input/input149 [ 1583.015656][T28631] kvm: user requested TSC rate below hardware speed [ 1586.512487][T28688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25611'. [ 1586.512510][T28688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25611'. [ 1588.081355][T28736] batadv_slave_1: entered promiscuous mode [ 1588.082999][T28736] batadv_slave_1: left promiscuous mode [ 1588.156153][T28738] syz_tun: tun_net_xmit 54 [ 1591.214976][T28779] netlink: 40 bytes leftover after parsing attributes in process `syz.4.25649'. [ 1591.215008][T28779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25649'. [ 1591.737535][T28800] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1591.743161][T28800] VFS: Can't find a romfs filesystem on dev nullb0. [ 1591.743161][T28800] [ 1591.946798][T28810] batadv_slave_1: entered promiscuous mode [ 1591.947154][T28810] batadv_slave_1: left promiscuous mode [ 1593.196104][T28848] syz_tun: tun_net_xmit 54 [ 1594.118817][ T5614] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 1594.287143][T28870] syz_tun: tun_net_xmit 42 [ 1595.312283][ C1] syz_tun: tun_net_xmit 42 [ 1596.352306][ C1] syz_tun: tun_net_xmit 42 [ 1597.393375][ C1] syz_tun: tun_net_xmit 42 [ 1597.463274][T28899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25713'. [ 1598.200735][ T5614] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1598.200972][ T5614] Bluetooth: hci4: Injecting HCI hardware error event [ 1598.248961][ T4921] Bluetooth: hci4: hardware error 0x00 [ 1598.432356][ C1] syz_tun: tun_net_xmit 42 [ 1599.421505][T28969] netlink: 72 bytes leftover after parsing attributes in process `syz.6.25739'. [ 1599.472239][ C1] syz_tun: tun_net_xmit 42 [ 1600.273769][ T4921] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1600.506778][ T38] audit: type=1326 audit(2000000489.125:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.6.25758" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a8187ce59 code=0x0 [ 1600.986012][T29026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25766'. [ 1601.075371][T29030] netlink: 232 bytes leftover after parsing attributes in process `syz.6.25768'. [ 1601.075404][T29030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.25768'. [ 1605.048894][ T3289] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 1605.151563][ T3289] hid-generic 0000:0000:0000.0096: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1606.769460][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.769558][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.521097][T29160] program syz.4.25826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1608.055051][ T9829] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 1608.062521][ T9829] hid-generic 0000:0000:0000.0097: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1614.951574][T29261] binder: 29260:29261 ioctl c0306201 200000000100 returned -14 [ 1615.547627][ T9829] kernel write not supported for file /sysvipc/shm (pid: 9829 comm: kworker/1:4) [ 1616.264748][T29303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25889'. [ 1616.264782][T29303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25889'. [ 1616.346202][ T4921] Bluetooth: hci1: link tx timeout [ 1616.346221][ T4921] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1618.352177][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 1621.650525][T29449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25929'. [ 1621.650558][T29449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25929'. [ 1624.648777][T29553] netlink: 104 bytes leftover after parsing attributes in process `syz.7.25958'. [ 1624.829838][T29560] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25961'. [ 1624.831498][T29560] netlink: 12 bytes leftover after parsing attributes in process `syz.7.25961'. [ 1626.679745][T29587] input: syz0 as /devices/virtual/input/input151 [ 1627.863960][T29608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25984'. [ 1627.866163][T29608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25984'. [ 1628.345447][T29626] netlink: 128 bytes leftover after parsing attributes in process `syz.6.25990'. [ 1631.384546][T29652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.26002'. [ 1631.853299][T29665] netlink: 128 bytes leftover after parsing attributes in process `syz.7.26009'. [ 1632.201670][T29671] netlink: 20 bytes leftover after parsing attributes in process `syz.7.26012'. [ 1635.171299][T29727] bpf: Bad value for 'gid' [ 1636.992253][T29791] bpf: Bad value for 'gid' [ 1641.784977][ T38] audit: type=1326 audit(2000000531.401:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29889 comm="syz.6.26115" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8187ce59 code=0x7fc00000 [ 1643.149870][ T38] audit: type=1326 audit(2000000532.761:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29952 comm="syz.7.26144" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b9face59 code=0x7fc00000 [ 1643.224616][T29970] support for the xor transformation has been removed. [ 1643.745646][T29994] support for the xor transformation has been removed. [ 1644.479185][ T38] audit: type=1326 audit(2000000534.091:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29989 comm="syz.0.26164" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ec48ce59 code=0x7fc00000 [ 1647.136400][T30083] syz_tun: tun_net_xmit 62 [ 1650.005343][T30118] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20000 [ 1650.006494][T30118] netlink: 'syz.6.26222': attribute type 27 has an invalid length. [ 1650.413851][T30139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.26233'. [ 1653.237470][T30162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.26243'. [ 1654.480924][T30207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26263'. [ 1654.859515][T30224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.26272'. [ 1655.391110][T30249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.26283'. [ 1655.928964][T30276] netlink: 20 bytes leftover after parsing attributes in process `syz.7.26295'. [ 1657.390671][T30330] netlink: 52 bytes leftover after parsing attributes in process `syz.6.26323'. [ 1657.688134][T30341] 9p: Unknown Cache mode or invalid value n [ 1658.476646][T30370] 9p: Unknown Cache mode or invalid value n [ 1662.706490][T30477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.26391'. [ 1663.772491][ T38] audit: type=1326 audit(2000000553.381:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30481 comm="syz.6.26394" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8187ce59 code=0x7fc00000 [ 1663.772540][ T38] audit: type=1326 audit(2000000553.381:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30481 comm="syz.6.26394" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a8187ce59 code=0x7fc00000 [ 1663.772579][ T38] audit: type=1326 audit(2000000553.381:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30481 comm="syz.6.26394" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8187ce59 code=0x7fc00000 [ 1663.774144][ T38] audit: type=1326 audit(2000000553.381:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30481 comm="syz.6.26394" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8187ce59 code=0x7fc00000 [ 1664.103370][T30512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26416'. [ 1665.587986][T30564] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1666.157376][T30589] netlink: 28 bytes leftover after parsing attributes in process `syz.7.26445'. [ 1666.456422][T30600] bpf: Bad value for 'uid' [ 1667.500130][T30639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26478'. [ 1667.709350][T30650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.26473'. [ 1668.194525][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.194600][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.967437][T30672] netlink: 28 bytes leftover after parsing attributes in process `syz.6.26485'. [ 1674.028893][T30801] syz_tun: tun_net_xmit 42 [ 1674.496950][T30823] input: syz1 as /devices/virtual/input/input152 [ 1674.656914][T30832] syz_tun: tun_net_xmit 42 [ 1675.057189][T30852] input: syz1 as /devices/virtual/input/input153 [ 1675.090273][ C1] syz_tun: tun_net_xmit 42 [ 1675.588873][T30873] netlink: 60 bytes leftover after parsing attributes in process `syz.0.26579'. [ 1675.712340][ C0] syz_tun: tun_net_xmit 42 [ 1676.080749][T30884] input: syz1 as /devices/virtual/input/input154 [ 1676.124111][ C1] syz_tun: tun_net_xmit 42 [ 1676.398983][T30895] syz_tun: tun_net_xmit 42 [ 1676.752354][ C0] syz_tun: tun_net_xmit 42 [ 1677.472150][ C1] syz_tun: tun_net_xmit 42 [ 1677.792920][ C0] syz_tun: tun_net_xmit 42 [ 1678.156236][T30901] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1678.390033][T30923] netlink: 36 bytes leftover after parsing attributes in process `syz.7.26604'. [ 1678.522336][ C1] syz_tun: tun_net_xmit 42 [ 1678.832106][ C0] syz_tun: tun_net_xmit 42 [ 1679.070405][T30938] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1679.070424][T30938] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1679.204840][T30940] FAT-fs (loop15): unable to read boot sector [ 1679.520636][T30955] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1679.761632][T30961] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1679.761650][T30961] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1679.828794][T30963] FAT-fs (loop9): unable to read boot sector [ 1679.872416][ C0] syz_tun: tun_net_xmit 42 [ 1681.306134][ T9829] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 1681.341013][ T9829] hid-generic 0000:0000:0000.0098: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1683.747421][T31049] binder: 31048:31049 ioctl c0306201 200000000640 returned -22 [ 1685.228071][T31074] binder: 31073:31074 ioctl c0306201 200000000640 returned -22 [ 1686.128825][T31096] UHID_CREATE from different security context by process 11479 (syz.0.26684), this is not allowed. [ 1686.268713][T31099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.26685'. [ 1686.927456][T31123] netlink: 28 bytes leftover after parsing attributes in process `syz.7.26698'. [ 1687.181440][T31132] netlink: 8 bytes leftover after parsing attributes in process `syz.7.26702'. [ 1687.356000][T31140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26712'. [ 1687.656120][T31150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.26707'. [ 1688.389012][T31176] netlink: 28 bytes leftover after parsing attributes in process `syz.6.26720'. [ 1689.062669][T31202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.26728'. [ 1689.841471][T31231] overlayfs: workdir and upperdir must be separate subtrees [ 1690.401635][T31249] kvm_intel: kvm [31246]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 1692.610355][T31292] kvm_intel: kvm [31291]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 1693.903160][T31320] CUSE: info not properly terminated [ 1695.916576][T31361] input: syz0 as /devices/virtual/input/input155 [ 1696.325166][T31369] netlink: 'syz.7.26809': attribute type 4 has an invalid length. [ 1697.731225][ T38] audit: type=1326 audit(2000000587.341:121): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=31389 comm="syz.4.26817" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3aba3ce59 code=0x0 [ 1697.829604][T31398] netlink: 'syz.0.26821': attribute type 4 has an invalid length. [ 1698.412349][T31420] netlink: 'syz.6.26831': attribute type 4 has an invalid length. [ 1698.675360][ T38] audit: type=1326 audit(2000000588.291:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31423 comm="syz.6.26842" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a8187ce59 code=0x0 [ 1700.888958][ T38] audit: type=1326 audit(2000000590.501:123): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=31453 comm="syz.7.26848" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86b9face59 code=0x0 [ 1700.920824][T31457] vivid-004: disconnect [ 1700.921385][T31456] vivid-004: reconnect [ 1708.744503][T31529] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1708.744531][T31529] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1714.065576][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1714.159762][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1714.170953][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1714.172352][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1714.183349][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1714.410841][T31559] vlan1: entered promiscuous mode [ 1714.414240][T31559] vlan1: entered allmulticast mode [ 1714.414260][T31559] veth0_vlan: entered allmulticast mode [ 1715.565980][T31549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.566421][T31549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.566688][T31549] bridge_slave_0: entered allmulticast mode [ 1715.570048][T31549] bridge_slave_0: entered promiscuous mode [ 1715.574821][T31549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.575184][T31549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.575435][T31549] bridge_slave_1: entered allmulticast mode [ 1715.579410][T31549] bridge_slave_1: entered promiscuous mode [ 1715.634314][T31549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1715.640780][T31549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1715.693719][T31549] team0: Port device team_slave_0 added [ 1715.696964][T31549] team0: Port device team_slave_1 added [ 1715.729308][T31549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1715.729320][T31549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1715.729334][T31549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1715.731410][T31549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1715.731419][T31549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1715.731433][T31549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1715.844393][T31549] hsr_slave_0: entered promiscuous mode [ 1715.845687][T31549] hsr_slave_1: entered promiscuous mode [ 1716.431939][ T4921] Bluetooth: hci2: command tx timeout [ 1716.684518][T31549] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1716.737809][T31549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1716.738781][T31549] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1716.771248][T31549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1716.779182][T31549] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1716.828677][T31549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1716.830265][T31549] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1716.931317][T31549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1717.194985][T31611] vlan1: entered promiscuous mode [ 1717.195571][T31611] vlan1: entered allmulticast mode [ 1717.195588][T31611] veth0_vlan: entered allmulticast mode [ 1717.285019][T31549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1717.335039][T31549] 8021q: adding VLAN 0 to HW filter on device team0 [ 1717.356133][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 1717.356225][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1717.433253][T25860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1717.433513][T25860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1718.119040][T31617] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1718.119066][T31617] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1718.518349][ T4921] Bluetooth: hci2: command tx timeout [ 1718.586665][T31549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1719.140685][T31549] veth0_vlan: entered promiscuous mode [ 1719.175385][T31549] veth1_vlan: entered promiscuous mode [ 1719.259989][T31549] veth0_macvtap: entered promiscuous mode [ 1719.287041][T31549] veth1_macvtap: entered promiscuous mode [ 1719.487237][T31549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1719.506395][T31549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1719.531093][T12385] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.531139][T12385] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.531171][T12385] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.531203][T12385] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.594378][ T4921] Bluetooth: hci2: command tx timeout [ 1720.705329][ T1550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.705347][ T1550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.108018][T25905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.108038][T25905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.611909][ T5612] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1721.764818][ T5612] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1721.764870][ T5612] usb 9-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 1721.764894][ T5612] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.802828][ T5612] usb 9-1: config 0 descriptor?? [ 1722.219388][T31633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1722.238977][T31633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1722.268479][ T5612] itetech 0003:048D:8595.0099: unknown main item tag 0x0 [ 1722.268515][ T5612] itetech 0003:048D:8595.0099: unknown main item tag 0x4 [ 1722.268593][ T5612] itetech 0003:048D:8595.0099: unknown main item tag 0x0 [ 1722.268619][ T5612] itetech 0003:048D:8595.0099: unknown main item tag 0x0 [ 1722.271343][ T5612] itetech 0003:048D:8595.0099: unknown main item tag 0x0 [ 1722.271381][ T5612] itetech 0003:048D:8595.0099: unknown main item tag 0x2 [ 1722.271425][ T5612] itetech 0003:048D:8595.0099: unknown main item tag 0x0 [ 1722.271452][ T5612] itetech 0003:048D:8595.0099: unknown main item tag 0x0 [ 1722.329621][ T5612] itetech 0003:048D:8595.0099: unknown main item tag 0x0 [ 1722.329665][ T5612] itetech 0003:048D:8595.0099: unknown main item tag 0x0 [ 1722.329717][ T5612] itetech 0003:048D:8595.0099: item fetching failed at offset 40/41 [ 1722.330526][ T5612] itetech 0003:048D:8595.0099: probe with driver itetech failed with error -22 [ 1722.457725][ T9829] usb 9-1: USB disconnect, device number 2 [ 1722.674336][ T4921] Bluetooth: hci2: command tx timeout [ 1723.351886][ T5612] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1723.502657][ T5612] usb 9-1: Using ep0 maxpacket: 32 [ 1723.505260][ T5612] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 1723.505287][ T5612] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1723.505307][ T5612] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1723.505327][ T5612] usb 9-1: config 1 has no interface number 0 [ 1723.505371][ T5612] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1723.505398][ T5612] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1723.505439][ T5612] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1723.505462][ T5612] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.556149][T31654] vivid-003: disconnect [ 1723.556927][T31653] vivid-003: reconnect [ 1723.577014][ T5612] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 1723.784580][ T5612] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 1724.228401][ T9829] usb 9-1: USB disconnect, device number 3 [ 1724.230295][ T9829] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 1727.569964][T31701] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1727.569991][T31701] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1728.134201][T31711] vlan1: entered promiscuous mode [ 1728.134556][T31711] vlan1: entered allmulticast mode [ 1728.134570][T31711] veth0_vlan: entered allmulticast mode [ 1729.634503][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.634620][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.076975][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1733.163926][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1733.165772][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1733.168567][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1733.204392][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1733.789935][T31733] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1733.790212][T31733] syzkaller1: linktype set to 778 [ 1734.842258][T31761] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1734.969216][T31761] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1734.971138][T31761] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1735.051318][T31761] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1735.103135][T31769] netlink: 8 bytes leftover after parsing attributes in process `syz.7.26973'. [ 1735.199817][T31761] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1735.199900][T31761] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1735.285020][T31761] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1735.374316][T31761] Restarting kernel threads ... [ 1735.431956][T31761] Done restarting kernel threads. [ 1735.731864][ T5612] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1735.883443][ T5612] usb 9-1: Using ep0 maxpacket: 8 [ 1735.885343][ T5612] usb 9-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1735.885375][ T5612] usb 9-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1735.885391][ T5612] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1735.885411][ T5612] usb 9-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1735.885422][ T5612] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.946311][ T5612] usb 9-1: config 0 descriptor?? [ 1736.504657][ T5612] hid_parser_main: 2 callbacks suppressed [ 1736.504683][ T5612] smartjoyplus 0003:6666:8804.009A: unknown main item tag 0x0 [ 1736.504712][ T5612] smartjoyplus 0003:6666:8804.009A: unknown main item tag 0x0 [ 1736.504736][ T5612] smartjoyplus 0003:6666:8804.009A: collection stack underflow [ 1736.504761][ T5612] smartjoyplus 0003:6666:8804.009A: item 0 0 0 12 parsing failed [ 1736.512604][ T5612] smartjoyplus 0003:6666:8804.009A: parse failed [ 1736.512677][ T5612] smartjoyplus 0003:6666:8804.009A: probe with driver smartjoyplus failed with error -22 [ 1736.593853][ T5612] usb 9-1: USB disconnect, device number 4 [ 1736.920450][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 1736.992739][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 1737.042891][T31719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.043257][T31719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.043535][T31719] bridge_slave_0: entered allmulticast mode [ 1737.046899][T31719] bridge_slave_0: entered promiscuous mode [ 1737.060525][T31719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1737.060882][T31719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.061148][T31719] bridge_slave_1: entered allmulticast mode [ 1737.065032][T31719] bridge_slave_1: entered promiscuous mode [ 1737.237973][ T5614] Bluetooth: hci3: command 0x041b tx timeout [ 1737.369129][T31719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1737.420321][T31719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1737.529740][T31719] team0: Port device team_slave_0 added [ 1737.541057][T31719] team0: Port device team_slave_1 added [ 1737.696399][T31719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1737.696417][T31719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.696443][T31719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1737.746317][T31719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1737.746334][T31719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.746361][T31719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1738.038934][T31719] hsr_slave_0: entered promiscuous mode [ 1738.052446][T31719] hsr_slave_1: entered promiscuous mode [ 1738.055778][T31719] debugfs: 'hsr0' already exists in 'hsr' [ 1738.055803][T31719] Cannot create hsr debugfs directory [ 1738.113908][T31823] netlink: 20 bytes leftover after parsing attributes in process `syz.8.26995'. [ 1738.263372][T31827] netlink: 16 bytes leftover after parsing attributes in process `syz.8.26997'. [ 1738.299425][T31827] netlink: 16 bytes leftover after parsing attributes in process `syz.8.26997'. [ 1739.072787][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 1739.316471][ T5614] Bluetooth: hci3: command 0x041b tx timeout [ 1739.724196][T31719] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1739.780505][T31719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1739.809067][T31719] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1739.991295][T31719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1740.018045][T31719] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1740.111439][T31719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1740.124052][T31719] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1740.370923][T31719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1740.938641][T31875] ieee802154 phy0 wpan0: encryption failed: -126 [ 1741.014890][T31719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1741.077390][T31719] 8021q: adding VLAN 0 to HW filter on device team0 [ 1741.090811][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.091117][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1741.146461][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.146554][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1741.152134][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 1741.391921][ T5614] Bluetooth: hci3: command 0x041b tx timeout [ 1741.974746][T31719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1742.338952][T31719] veth0_vlan: entered promiscuous mode [ 1742.366103][T31719] veth1_vlan: entered promiscuous mode [ 1742.423064][T31719] veth0_macvtap: entered promiscuous mode [ 1742.428424][T31719] veth1_macvtap: entered promiscuous mode [ 1742.469672][T31719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1742.536755][T31719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1742.653750][ T1550] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.677129][ T1550] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.698888][ T1550] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.713825][ T1550] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.907132][T31908] netlink: 20 bytes leftover after parsing attributes in process `syz.6.27024'. [ 1743.506601][ T5614] Bluetooth: hci3: command 0x041b tx timeout [ 1743.999337][ T3852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1743.999356][ T3852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.571798][T31919] syz_tun: tun_net_xmit 54 [ 1744.780231][ T1550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1744.780251][ T1550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.825947][T31922] netlink: 16 bytes leftover after parsing attributes in process `syz.6.27028'. [ 1744.859320][T31922] netlink: 16 bytes leftover after parsing attributes in process `syz.6.27028'. [ 1745.149523][T31932] netlink: 20 bytes leftover after parsing attributes in process `syz.7.27033'. [ 1745.575787][ T5614] Bluetooth: hci3: command 0x041b tx timeout [ 1746.465133][T31975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27051'. [ 1747.074981][T32000] netlink: 8 bytes leftover after parsing attributes in process `syz.8.27065'. [ 1747.619398][T32016] netlink: 16 bytes leftover after parsing attributes in process `syz.9.27073'. [ 1747.619471][T32016] netlink: 16 bytes leftover after parsing attributes in process `syz.9.27073'. [ 1747.632587][ T5614] Bluetooth: hci3: command 0x041b tx timeout [ 1749.813336][T32061] binder: 32060:32061 ioctl c00c620f 200000000140 returned -22 [ 1750.362000][ T5742] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1750.531763][ T5742] usb 9-1: Using ep0 maxpacket: 8 [ 1750.534547][ T5742] usb 9-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1750.534579][ T5742] usb 9-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1750.534601][ T5742] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1750.534630][ T5742] usb 9-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1750.534649][ T5742] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.599124][ T5742] usb 9-1: config 0 descriptor?? [ 1751.019986][ T5742] smartjoyplus 0003:6666:8804.009B: unknown main item tag 0x0 [ 1751.020022][ T5742] smartjoyplus 0003:6666:8804.009B: unknown main item tag 0x0 [ 1751.020043][ T5742] smartjoyplus 0003:6666:8804.009B: unknown main item tag 0x0 [ 1751.020076][ T5742] smartjoyplus 0003:6666:8804.009B: unknown main item tag 0x0 [ 1751.020100][ T5742] smartjoyplus 0003:6666:8804.009B: unknown main item tag 0x0 [ 1751.076769][ T5742] smartjoyplus 0003:6666:8804.009B: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.8-1/input0 [ 1751.076804][ T5742] smartjoyplus 0003:6666:8804.009B: no output reports found [ 1751.173165][T26131] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1751.221464][ T5742] usb 9-1: USB disconnect, device number 5 [ 1751.256456][T32083] fido_id[32083]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:6666:8804.009B/report_descriptor': No such file or directory [ 1751.322941][T26131] usb 10-1: Using ep0 maxpacket: 8 [ 1751.325224][T26131] usb 10-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1751.325253][T26131] usb 10-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1751.325361][T26131] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1751.325392][T26131] usb 10-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1751.325411][T26131] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.351392][T26131] usb 10-1: config 0 descriptor?? [ 1751.783565][T26131] smartjoyplus 0003:6666:8804.009C: unknown main item tag 0x0 [ 1751.783603][T26131] smartjoyplus 0003:6666:8804.009C: unknown main item tag 0x0 [ 1751.783628][T26131] smartjoyplus 0003:6666:8804.009C: collection stack underflow [ 1751.783661][T26131] smartjoyplus 0003:6666:8804.009C: item 0 0 0 12 parsing failed [ 1751.784337][T26131] smartjoyplus 0003:6666:8804.009C: parse failed [ 1751.784404][T26131] smartjoyplus 0003:6666:8804.009C: probe with driver smartjoyplus failed with error -22 [ 1751.891429][T32100] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1751.917845][T32100] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1752.005378][T26131] usb 10-1: USB disconnect, device number 2 [ 1752.723702][T32117] netlink: 'syz.7.27121': attribute type 10 has an invalid length. [ 1752.723726][T32117] netlink: 152 bytes leftover after parsing attributes in process `syz.7.27121'. [ 1753.150716][T32130] loop5: detected capacity change from 0 to 7 [ 1753.180995][T32130] Dev loop5: unable to read RDB block 7 [ 1753.181028][T32130] loop5: AHDI p1 [ 1753.181060][T32130] loop5: partition table partially beyond EOD, truncated [ 1753.370198][T32137] netlink: 36 bytes leftover after parsing attributes in process `syz.9.27130'. [ 1753.508545][T32137] netlink: 36 bytes leftover after parsing attributes in process `syz.9.27130'. [ 1753.654888][T32137] netlink: 36 bytes leftover after parsing attributes in process `syz.9.27130'. [ 1754.141844][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1754.192185][ T5742] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1754.292057][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1754.295451][ T10] usb 9-1: config 0 has an invalid interface number: 98 but max is 0 [ 1754.295478][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.295497][ T10] usb 9-1: config 0 has no interface number 0 [ 1754.296704][ T10] usb 9-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 1754.296721][ T10] usb 9-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1754.296734][ T10] usb 9-1: config 0 interface 98 has no altsetting 0 [ 1754.299020][ T10] usb 9-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 1754.299047][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.299066][ T10] usb 9-1: Product: syz [ 1754.299077][ T10] usb 9-1: Manufacturer: syz [ 1754.299084][ T10] usb 9-1: SerialNumber: syz [ 1754.335937][ T10] usb 9-1: config 0 descriptor?? [ 1754.342148][T32148] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1754.342279][T32148] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1754.421911][ T5742] usb 10-1: Using ep0 maxpacket: 16 [ 1754.550119][ T5742] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1754.550149][ T5742] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.550169][ T5742] usb 10-1: Product: syz [ 1754.550183][ T5742] usb 10-1: Manufacturer: syz [ 1754.550197][ T5742] usb 10-1: SerialNumber: syz [ 1754.591055][ T5742] usb 10-1: config 0 descriptor?? [ 1754.611918][ T5742] ssu100 10-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1754.651992][T32148] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1754.652176][T32148] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1755.079362][ T10] asix 9-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1755.079634][ T10] asix 9-1:0.98: probe with driver asix failed with error -71 [ 1755.138333][ T10] usb 9-1: USB disconnect, device number 6 [ 1755.430510][ T5742] ssu100 10-1:0.0: probe with driver ssu100 failed with error -71 [ 1755.448082][ T5742] usb 10-1: USB disconnect, device number 3 [ 1756.239050][T32193] netlink: 8 bytes leftover after parsing attributes in process `syz.9.27155'. [ 1756.625632][T32209] netlink: 60 bytes leftover after parsing attributes in process `syz.9.27163'. [ 1756.626678][T32209] netlink: 60 bytes leftover after parsing attributes in process `syz.9.27163'. [ 1756.719194][T32212] misc userio: Begin command sent, but we're already running [ 1758.941879][ T32] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1759.097632][ T32] usb 9-1: Using ep0 maxpacket: 32 [ 1759.108562][ T32] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 1759.108588][ T32] usb 9-1: config 0 has no interface number 0 [ 1759.108630][ T32] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1759.108656][ T32] usb 9-1: config 0 interface 85 has no altsetting 0 [ 1759.111560][ T32] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1759.111588][ T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.111607][ T32] usb 9-1: Product: syz [ 1759.114596][ T32] usb 9-1: Manufacturer: syz [ 1759.114617][ T32] usb 9-1: SerialNumber: syz [ 1759.121049][ T32] usb 9-1: config 0 descriptor?? [ 1759.760348][ T32] appletouch 9-1:0.85: Geyser mode initialized. [ 1759.763149][ T32] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input157 [ 1759.963347][T26072] usb 9-1: USB disconnect, device number 7 [ 1759.972692][ C1] appletouch 9-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1760.085119][T26072] appletouch 9-1:0.85: input: appletouch disconnected [ 1760.976815][T32325] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1760.977116][T32325] syzkaller1: linktype set to 778 [ 1761.492475][T32333] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1761.492745][T32333] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1761.492976][T32333] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1761.609808][T32343] netlink: 88 bytes leftover after parsing attributes in process `syz.6.27228'. [ 1761.736844][T21960] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 1761.736880][T21960] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 1761.842627][T21960] hid-generic 0000:0000:0000.009D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1762.010366][T32357] fido_id[32357]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1762.211898][T32361] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1762.212172][T32361] syzkaller1: linktype set to 778 [ 1762.702818][T32368] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1762.703079][T32368] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1762.703401][T32368] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1762.758909][T32380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27241'. [ 1764.023208][T32406] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1764.023966][T32406] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1764.024248][T32406] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1764.033491][T32406] Restarting kernel threads ... [ 1764.071855][T32406] Done restarting kernel threads. [ 1764.242307][T32422] vxcan0: tx address claim with dest, not broadcast [ 1764.310302][T32425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1764.942711][T32445] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1764.942990][T32445] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1764.943265][T32445] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1764.948642][T32445] Restarting kernel threads ... [ 1764.968522][T32448] netlink: 4 bytes leftover after parsing attributes in process `syz.9.27273'. [ 1764.968548][T32448] netlink: 'syz.9.27273': attribute type 3 has an invalid length. [ 1765.007662][T32445] Done restarting kernel threads. [ 1765.301114][T32462] netlink: 28 bytes leftover after parsing attributes in process `syz.6.27280'. [ 1765.532052][ T5742] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1765.759133][ T5742] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1765.790064][ T5742] usb 9-1: string descriptor 0 read error: -22 [ 1765.790204][ T5742] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1765.790242][ T5742] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.476907][T32483] binder: 32482:32483 ioctl 4018620d 0 returned -22 [ 1766.488806][ T5742] usb 9-1: failed to read current rate; disabling the check [ 1766.769187][ T5742] usb 9-1: USB disconnect, device number 8 [ 1766.992011][ T5614] Bluetooth: hci3: command 0x041b tx timeout [ 1766.992050][ T5614] Bluetooth: hci1: command 0x0c1a tx timeout [ 1766.992759][ T4921] Bluetooth: hci2: command 0x0c1a tx timeout [ 1767.264161][T32491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1767.480437][T32498] netlink: 4 bytes leftover after parsing attributes in process `syz.7.27296'. [ 1767.774648][T32514] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.27304'. [ 1767.776657][T32512] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.27303'. [ 1767.777316][T32514] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.27304'. [ 1768.077824][T32523] netlink: 8 bytes leftover after parsing attributes in process `syz.7.27309'. [ 1768.904085][T32563] netlink: 12 bytes leftover after parsing attributes in process `syz.8.27328'. [ 1769.063390][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1769.219115][ T10] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1769.219144][ T10] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1769.219163][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1769.219211][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1769.219238][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1769.227024][ T10] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1769.227054][ T10] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1769.227074][ T10] usb 10-1: Product: syz [ 1769.227089][ T10] usb 10-1: Manufacturer: syz [ 1769.249579][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 1769.249599][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 1769.360837][ T10] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1769.360860][ T10] cdc_wdm 10-1:1.0: Unknown control protocol [ 1769.881826][T21960] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1770.108418][T26131] usb 10-1: USB disconnect, device number 4 [ 1770.265011][T21960] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1770.265045][T21960] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1770.265082][T21960] usb 9-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1770.265103][T21960] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.322645][T21960] usb 9-1: config 0 descriptor?? [ 1770.842924][T21960] hid-led 0003:1D34:000A.009E: unknown main item tag 0x0 [ 1770.842962][T21960] hid-led 0003:1D34:000A.009E: unknown main item tag 0x0 [ 1770.842985][T21960] hid-led 0003:1D34:000A.009E: unknown main item tag 0x0 [ 1771.083833][T21960] hid-led 0003:1D34:000A.009E: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.8-1/input0 [ 1771.269623][T21960] hid-led 0003:1D34:000A.009E: Dream Cheeky Webmail Notifier initialized [ 1771.301923][T21960] usb 9-1: USB disconnect, device number 9 [ 1771.779609][T32604] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.27345'. [ 1771.781095][T32604] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.27345'. [ 1771.921880][T32608] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[31549] was attempted by ""[32608] [ 1771.982385][T32610] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27349'. [ 1772.107544][T21960] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1772.268516][T21960] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1772.268547][T21960] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.268566][T21960] usb 10-1: Product: syz [ 1772.268578][T21960] usb 10-1: Manufacturer: syz [ 1772.268586][T21960] usb 10-1: SerialNumber: syz [ 1772.314078][T21960] usb 10-1: config 0 descriptor?? [ 1772.348971][T21960] i2c-tiny-usb 10-1:0.0: version 6d.cc found at bus 010 address 005 [ 1772.744770][T32627] netlink: 12 bytes leftover after parsing attributes in process `syz.7.27357'. [ 1772.957411][T21960] i2c i2c-4: failure reading functionality [ 1772.976090][T21960] i2c i2c-4: connected i2c-tiny-usb device [ 1773.000987][T21960] usb 10-1: USB disconnect, device number 5 [ 1773.731881][ T5742] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1773.882911][ T5742] usb 10-1: Using ep0 maxpacket: 8 [ 1773.884584][ T5742] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 239, changing to 11 [ 1773.884618][ T5742] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1773.884644][ T5742] usb 10-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 1773.884665][ T5742] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.887686][ T5742] usb 10-1: config 0 descriptor?? [ 1774.300369][ T5742] logitech 0003:046D:C283.009F: unknown main item tag 0x0 [ 1774.300405][ T5742] logitech 0003:046D:C283.009F: unknown main item tag 0x0 [ 1774.300432][ T5742] logitech 0003:046D:C283.009F: unknown main item tag 0x0 [ 1774.300459][ T5742] logitech 0003:046D:C283.009F: unknown main item tag 0x0 [ 1774.300485][ T5742] logitech 0003:046D:C283.009F: unknown main item tag 0x0 [ 1774.300512][ T5742] logitech 0003:046D:C283.009F: unknown main item tag 0x0 [ 1774.300538][ T5742] logitech 0003:046D:C283.009F: unknown main item tag 0x0 [ 1774.348599][ T5742] logitech 0003:046D:C283.009F: hidraw0: USB HID v0.07 Device [HID 046d:c283] on usb-dummy_hcd.9-1/input0 [ 1774.348721][ T5742] logitech 0003:046D:C283.009F: no inputs found [ 1774.499177][ T5612] usb 10-1: USB disconnect, device number 6 [ 1775.179809][T32651] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[31719] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[32651] [ 1775.581880][ T5612] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1775.755162][ T5612] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.755199][ T5612] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1775.755223][ T5612] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1775.755265][ T5612] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1775.755289][ T5612] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.761278][ T5612] usb 10-1: config 0 descriptor?? [ 1776.186786][ T5612] hid_parser_main: 33 callbacks suppressed [ 1776.186809][ T5612] plantronics 0003:047F:FFFF.00A0: unknown main item tag 0x0 [ 1776.186837][ T5612] plantronics 0003:047F:FFFF.00A0: unknown main item tag 0x0 [ 1776.186862][ T5612] plantronics 0003:047F:FFFF.00A0: unknown main item tag 0x0 [ 1776.186887][ T5612] plantronics 0003:047F:FFFF.00A0: unknown main item tag 0x0 [ 1776.186913][ T5612] plantronics 0003:047F:FFFF.00A0: unknown main item tag 0x0 [ 1776.186939][ T5612] plantronics 0003:047F:FFFF.00A0: unknown main item tag 0x0 [ 1776.186964][ T5612] plantronics 0003:047F:FFFF.00A0: unknown main item tag 0x0 [ 1776.186988][ T5612] plantronics 0003:047F:FFFF.00A0: unknown main item tag 0x0 [ 1776.187014][ T5612] plantronics 0003:047F:FFFF.00A0: unknown main item tag 0x0 [ 1776.187039][ T5612] plantronics 0003:047F:FFFF.00A0: unknown main item tag 0x0 [ 1776.307549][ T5612] plantronics 0003:047F:FFFF.00A0: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1776.481377][T12385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1776.481397][T12385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1776.582172][T26072] usb 10-1: USB disconnect, device number 7 [ 1777.361320][T32698] netlink: 68 bytes leftover after parsing attributes in process `syz.9.27390'. [ 1777.361360][T32698] netlink: 16 bytes leftover after parsing attributes in process `syz.9.27390'. [ 1777.455236][T32700] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1777.455263][T32700] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1777.794466][ T5742] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1777.956644][ T5742] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1777.957739][ T5742] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.957762][ T5742] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1777.957812][ T5742] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1777.957846][ T5742] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1777.957868][ T5742] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1777.957882][ T5742] usb 10-1: config 1 interface 1 has no altsetting 0 [ 1777.960904][ T5742] usb 10-1: string descriptor 0 read error: -22 [ 1777.961017][ T5742] usb 10-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1777.961031][ T5742] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.488404][ T5742] usb 10-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1778.488436][ T5742] usb 10-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1778.488453][ T5742] usb 10-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1779.002852][ T5742] usb 10-1: 2:0: failed to get current value for ch 1 (-71) [ 1779.035701][ T5742] usb 10-1: USB disconnect, device number 8 [ 1780.983782][T21960] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1781.207785][T21960] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1781.207820][T21960] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1781.207857][T21960] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1781.207880][T21960] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.213624][T21960] usb 10-1: config 0 descriptor?? [ 1781.555937][T32763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27419'. [ 1782.118168][T21960] hid-led 0003:27B8:01ED.00A1: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.9-1/input0 [ 1782.240467][T21960] hid-led 0003:27B8:01ED.00A1: ThingM blink(1) initialized [ 1782.273353][T21960] usb 10-1: USB disconnect, device number 9 [ 1782.329005][ T301] fido_id[301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1782.718395][T31722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1782.780775][T31722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1782.794506][T31722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1782.823193][T31722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1782.860985][T31722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1783.497365][T32293] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.185438][T32293] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.602358][T21960] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1784.719784][T32293] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.779562][T21960] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 1784.779623][T21960] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1784.779648][T21960] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1784.779668][T21960] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1784.779706][T21960] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1784.779726][T21960] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.858661][ T5742] hid_parser_main: 28 callbacks suppressed [ 1784.858684][ T5742] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 1784.927984][T21960] usb 10-1: config 0 descriptor?? [ 1784.928240][ T5742] hid-generic 0000:0000:0000.00A2: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1785.157192][T32489] Bluetooth: hci2: command tx timeout [ 1785.361122][T21960] plantronics 0003:047F:FFFF.00A3: reserved main item tag 0xd [ 1785.484630][T21960] plantronics 0003:047F:FFFF.00A3: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1785.594921][T21960] usb 10-1: USB disconnect, device number 10 [ 1785.676919][T32293] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.793228][ T339] fido_id[339]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1786.176548][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.176852][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.177126][ T300] bridge_slave_0: entered allmulticast mode [ 1786.191561][ T300] bridge_slave_0: entered promiscuous mode [ 1786.646558][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.646930][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.647210][ T300] bridge_slave_1: entered allmulticast mode [ 1786.660889][ T300] bridge_slave_1: entered promiscuous mode [ 1786.807760][ T362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1787.178326][ T300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1787.201088][ T300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1787.232772][T32489] Bluetooth: hci2: command tx timeout [ 1787.725361][ T300] team0: Port device team_slave_0 added [ 1787.760367][ T300] team0: Port device team_slave_1 added [ 1788.087062][T32293] bridge_slave_1: left allmulticast mode [ 1788.087086][T32293] bridge_slave_1: left promiscuous mode [ 1788.126222][T32293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1788.420281][T32293] bridge_slave_0: left allmulticast mode [ 1788.420328][T32293] bridge_slave_0: left promiscuous mode [ 1788.451348][T32293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.326157][T32489] Bluetooth: hci2: command tx timeout [ 1789.702466][T32293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1789.782466][T32293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1789.838312][T32293] bond0 (unregistering): Released all slaves [ 1789.883802][ T300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1789.883813][ T300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1789.883829][ T300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1790.182509][ T300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1790.182525][ T300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1790.182553][ T300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1791.076309][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.076390][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.392039][T32489] Bluetooth: hci2: command tx timeout [ 1791.399392][ T300] hsr_slave_0: entered promiscuous mode [ 1791.401437][ T300] hsr_slave_1: entered promiscuous mode [ 1791.408217][ T300] debugfs: 'hsr0' already exists in 'hsr' [ 1791.408244][ T300] Cannot create hsr debugfs directory [ 1792.261768][ T32] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1792.472112][T32293] hsr_slave_0: left promiscuous mode [ 1792.474489][ T32] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1792.474519][ T32] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1792.474542][ T32] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1792.474583][ T32] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1792.474606][ T32] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.576808][ T32] usb 10-1: config 0 descriptor?? [ 1792.630477][T32293] hsr_slave_1: left promiscuous mode [ 1792.631987][T32293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1792.632153][T32293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1792.750555][T32293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1792.750606][T32293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1792.997879][ T32] plantronics 0003:047F:FFFF.00A4: unknown main item tag 0x4 [ 1793.013628][T32293] veth1_macvtap: left promiscuous mode [ 1793.069446][T32293] veth0_macvtap: left promiscuous mode [ 1793.069764][T32293] veth1_vlan: left promiscuous mode [ 1793.095078][ T32] plantronics 0003:047F:FFFF.00A4: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1793.269590][T26072] usb 10-1: USB disconnect, device number 11 [ 1794.202853][T32293] team0 (unregistering): Port device team_slave_1 removed [ 1794.242683][T32293] team0 (unregistering): Port device team_slave_0 removed [ 1794.504763][ T456] syzkaller1: entered promiscuous mode [ 1794.504788][ T456] syzkaller1: entered allmulticast mode [ 1794.900354][ T490] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1795.129204][ T5267] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1795.503542][T32489] Bluetooth: hci1: unknown advertising packet type: 0x65 [ 1795.503581][T32489] Bluetooth: hci1: Dropping invalid advertising data [ 1795.503594][T32489] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1796.312594][ T517] netlink: 52 bytes leftover after parsing attributes in process `syz.7.27495'. [ 1796.312614][ T517] netlink: 64 bytes leftover after parsing attributes in process `syz.7.27495'. [ 1798.122417][ T517] netlink: 52 bytes leftover after parsing attributes in process `syz.7.27495'. [ 1798.529676][ T5267] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1799.947674][ T5267] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1800.524111][T26131] psmouse serio8: Failed to reset mouse on : -5 [ 1800.879906][ T5267] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1802.961492][ T300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1803.011175][ T300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1803.355039][ T300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1803.408862][ T300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1803.410973][ T300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1803.486550][ T300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1803.515755][ T300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1803.699031][ T300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1804.089646][T26131] misc userio: Buffer overflowed, userio client isn't keeping up [ 1804.182870][ T300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1804.294289][ T300] 8021q: adding VLAN 0 to HW filter on device team0 [ 1804.345726][T31161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.346006][T31161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1804.416626][ T3852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.416804][ T3852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.522882][T26131] input: PS/2 Generic Mouse as /devices/serio8/input/input159 [ 1805.698938][ T300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1806.032997][T26131] psmouse serio8: Failed to enable mouse on [ 1806.059112][ T786] Invalid argument reading file caps for ./file0 [ 1806.337661][ T300] veth0_vlan: entered promiscuous mode [ 1806.509497][ T300] veth1_vlan: entered promiscuous mode [ 1806.746940][ T300] veth0_macvtap: entered promiscuous mode [ 1806.780178][ T300] veth1_macvtap: entered promiscuous mode [ 1806.800687][ T809] syz_tun: tun_net_xmit 42 [ 1807.050260][ T300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1807.195913][ T300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1807.222985][T12385] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1807.224384][T12385] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1807.246511][T25905] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1807.257217][T25905] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1807.271786][ T5612] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1807.506178][ T5612] usb 10-1: Using ep0 maxpacket: 8 [ 1807.552601][ T5612] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1807.573960][ T5612] usb 10-1: config 117 has an invalid interface number: 163 but max is 0 [ 1807.573994][ T5612] usb 10-1: config 117 has no interface number 0 [ 1807.574026][ T5612] usb 10-1: config 117 interface 163 has no altsetting 0 [ 1807.580249][ T5612] usb 10-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 1807.580278][ T5612] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.580297][ T5612] usb 10-1: Product: syz [ 1807.580312][ T5612] usb 10-1: Manufacturer: syz [ 1807.580326][ T5612] usb 10-1: SerialNumber: syz [ 1807.872973][ C0] syz_tun: tun_net_xmit 42 [ 1808.749234][T21960] usb 10-1: USB disconnect, device number 12 [ 1808.781067][T21960] f81534a_ctrl 10-1:117.163: failed to enable ports: -19 [ 1808.911944][ C0] syz_tun: tun_net_xmit 42 [ 1809.744373][T31161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1809.744396][T31161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1810.574975][T25905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1810.574995][T25905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1810.953470][ T880] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1810.971900][ T742] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1811.153461][ T742] usb 10-1: Using ep0 maxpacket: 8 [ 1811.156061][ T742] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1811.156095][ T742] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1811.156121][ T742] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1811.156145][ T742] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1811.156188][ T742] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1811.156212][ T742] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.462643][ T742] usb 10-1: usb_control_msg returned -32 [ 1811.462693][ T742] usbtmc 10-1:16.0: can't read capabilities [ 1812.250421][ T875] usb 10-1: usbtmc_ioctl_clear_out_halt returned -32 [ 1812.256657][ T5742] usb 10-1: USB disconnect, device number 13 [ 1815.509897][T21960] IPVS: starting estimator thread 0... [ 1815.570600][ T1029] Invalid argument reading file caps for ./file0 [ 1815.592344][ T1024] IPVS: using max 12 ests per chain, 28800 per kthread [ 1815.925283][ T1042] syzkaller1: entered promiscuous mode [ 1815.925309][ T1042] syzkaller1: entered allmulticast mode [ 1816.091956][T26072] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1816.238661][ T1051] comedi comedi0: comedi_parport: I/O port conflict (0x100,3) [ 1816.251543][T26072] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1816.251578][T26072] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1816.275326][T26072] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1816.275360][T26072] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1816.275374][T26072] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.313481][T26072] usb 10-1: config 0 descriptor?? [ 1816.875557][T26072] plantronics 0003:047F:FFFF.00A5: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1816.995214][T21960] usb 10-1: USB disconnect, device number 14 [ 1817.901878][ T9829] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 1818.082265][ T9829] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1818.087617][ T9829] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1818.087655][ T9829] usb 10-1: can't read configurations, error -71 [ 1818.169271][ T1107] Invalid argument reading file caps for ./file0 [ 1818.233593][ T1110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27630'. [ 1818.696416][ T1121] netlink: 32 bytes leftover after parsing attributes in process `syz.9.27635'. [ 1818.771894][T26072] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1818.971845][T26072] usb 3-1: Using ep0 maxpacket: 8 [ 1818.975756][T26072] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1818.975785][T26072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.975805][T26072] usb 3-1: Product: syz [ 1818.975818][T26072] usb 3-1: Manufacturer: syz [ 1818.975825][T26072] usb 3-1: SerialNumber: syz [ 1819.024386][T26072] usb 3-1: config 0 descriptor?? [ 1819.046236][T26072] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1819.472209][ T5612] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1819.638948][ T5612] usb 10-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1819.638968][ T5612] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.638979][ T5612] usb 10-1: Product: syz [ 1819.638986][ T5612] usb 10-1: Manufacturer: syz [ 1819.639033][ T5612] usb 10-1: SerialNumber: syz [ 1819.681478][ T5612] usb 10-1: config 0 descriptor?? [ 1820.076580][ T9829] usb 3-1: USB disconnect, device number 103 [ 1820.291525][ T38] audit: type=1326 audit(2000000709.901:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1153 comm="syz.7.27644" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86b9face59 code=0x0 [ 1820.555213][ T5612] usb 10-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 1820.555243][ T5612] f81604 10-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1820.555278][ T5612] f81604 10-1:0.0: probe with driver f81604 failed with error -71 [ 1820.588159][ T5612] usb 10-1: USB disconnect, device number 17 [ 1821.183629][ T9829] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1821.333025][ T9829] usb 3-1: Using ep0 maxpacket: 16 [ 1821.337178][ T9829] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1821.337205][ T9829] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1821.337225][ T9829] usb 3-1: config 1 has no interface number 1 [ 1821.337270][ T9829] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1821.337283][ T9829] usb 3-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1821.337297][ T9829] usb 3-1: too many endpoints for config 1 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1821.337320][ T9829] usb 3-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1821.337334][ T9829] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1821.337343][ T9829] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1821.339656][ T9829] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1821.339684][ T9829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.339699][ T9829] usb 3-1: Product: syz [ 1821.339706][ T9829] usb 3-1: Manufacturer: syz [ 1821.339714][ T9829] usb 3-1: SerialNumber: syz [ 1821.375023][ T1168] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1821.474574][ T1180] kvm: apic: phys broadcast and lowest prio [ 1821.599409][ T9829] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 1822.008955][ T9829] aqc111 3-1:1.0: probe with driver aqc111 failed with error -22 [ 1822.214054][ T9829] usb 3-1: USB disconnect, device number 104 [ 1822.660535][ T1212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1823.062048][ T1224] netlink: 24 bytes leftover after parsing attributes in process `syz.9.27670'. [ 1823.294774][ T1228] block nbd9: NBD_DISCONNECT [ 1823.851843][ T742] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1824.064351][ T742] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1824.064378][ T742] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1824.064390][ T742] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1824.064415][ T742] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1824.064427][ T742] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.068529][ T742] usb 10-1: config 0 descriptor?? [ 1824.506913][ T742] plantronics 0003:047F:FFFF.00A6: unknown main item tag 0x0 [ 1824.506950][ T742] plantronics 0003:047F:FFFF.00A6: unknown main item tag 0x0 [ 1824.506976][ T742] plantronics 0003:047F:FFFF.00A6: unknown main item tag 0x0 [ 1824.507121][ T742] plantronics 0003:047F:FFFF.00A6: unknown main item tag 0x0 [ 1824.507147][ T742] plantronics 0003:047F:FFFF.00A6: unknown main item tag 0x0 [ 1824.508875][ T742] plantronics 0003:047F:FFFF.00A6: unknown main item tag 0x0 [ 1824.508905][ T742] plantronics 0003:047F:FFFF.00A6: unknown main item tag 0x0 [ 1824.508930][ T742] plantronics 0003:047F:FFFF.00A6: unknown main item tag 0x0 [ 1824.508954][ T742] plantronics 0003:047F:FFFF.00A6: unknown main item tag 0x0 [ 1824.508980][ T742] plantronics 0003:047F:FFFF.00A6: unknown main item tag 0x0 [ 1824.560669][ T742] plantronics 0003:047F:FFFF.00A6: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1824.772014][ T742] usb 10-1: USB disconnect, device number 18 [ 1825.011796][T21960] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1825.174955][T21960] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1825.175012][T21960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1825.175051][T21960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1825.175073][T21960] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1825.175097][T21960] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1825.175109][T21960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.180067][T21960] usb 3-1: config 0 descriptor?? [ 1825.642673][T21960] plantronics 0003:047F:FFFF.00A7: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1825.984200][ T742] usb 3-1: USB disconnect, device number 105 [ 1826.322110][ T1293] syz_tun: entered allmulticast mode [ 1826.322658][ T1293] syz_tun: left allmulticast mode [ 1826.543551][ T1304] loop5: detected capacity change from 0 to 7 [ 1826.698512][ T1304] Dev loop5: unable to read RDB block 7 [ 1826.698542][ T1304] loop5: AHDI p1 p2 p3 [ 1826.698569][ T1304] loop5: partition table partially beyond EOD, truncated [ 1826.699312][ T1304] loop5: p1 start 1601398130 is beyond EOD, truncated [ 1826.699338][ T1304] loop5: p2 start 1702059890 is beyond EOD, truncated [ 1826.796345][ T1311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27703'. [ 1827.050271][ T1313] input: syz1 as /devices/virtual/input/input160 [ 1828.138817][ T1372] netlink: 762 bytes leftover after parsing attributes in process `syz.7.27716'. [ 1828.499806][ T1387] netlink: 'syz.2.27722': attribute type 4 has an invalid length. [ 1828.552293][ T1388] netlink: 'syz.2.27722': attribute type 4 has an invalid length. [ 1828.901835][T26131] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1829.052767][T26131] usb 10-1: Using ep0 maxpacket: 32 [ 1829.055119][T26131] usb 10-1: config 0 has no interfaces? [ 1829.059283][T26131] usb 10-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 1829.059312][T26131] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.059332][T26131] usb 10-1: Product: syz [ 1829.059346][T26131] usb 10-1: Manufacturer: syz [ 1829.059360][T26131] usb 10-1: SerialNumber: syz [ 1829.081502][T26131] usb 10-1: config 0 descriptor?? [ 1829.545264][ T1392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1829.557285][ T1392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1829.567150][ T5742] usb 10-1: USB disconnect, device number 19 [ 1830.201803][T26131] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1830.355284][T26131] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1830.355316][T26131] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1830.355353][T26131] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1830.355365][T26131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.600056][T26131] usb 3-1: usb_control_msg returned -32 [ 1830.600112][T26131] usbtmc 3-1:16.0: can't read capabilities [ 1830.960350][ T1438] input: syz0 as /devices/virtual/input/input161 [ 1832.988767][T21960] usb 3-1: USB disconnect, device number 106 [ 1833.388068][ T1487] pimreg: entered allmulticast mode [ 1833.413640][ T1487] pimreg: left allmulticast mode [ 1833.809275][ T1502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1833.990055][ T1507] netlink: 16 bytes leftover after parsing attributes in process `syz.9.27777'. [ 1834.595537][T32489] Bluetooth: hci1: command 0x0c1a tx timeout [ 1834.595851][T26131] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1834.595870][T26131] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1835.431877][ T10] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1835.584125][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.584181][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1835.584205][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.588890][ T10] usb 3-1: config 0 descriptor?? [ 1835.606795][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1835.998640][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1835.999301][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1836.173569][ T3289] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1836.207797][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 1836.208311][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 1836.208747][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 1836.209089][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 1836.209402][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 1836.209756][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 1836.210069][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 1836.210451][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 1836.210888][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 1836.211516][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 1836.212127][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 1836.212826][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 1836.213347][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 1836.237938][ T10] pwc: Registered as video103. [ 1836.297939][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input162 [ 1836.339692][ T3289] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 1836.339761][ T3289] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1836.339788][ T3289] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1836.339810][ T3289] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1836.339851][ T3289] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1836.339875][ T3289] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.340192][ T10] usb 3-1: USB disconnect, device number 107 [ 1836.505963][ T3289] usb 10-1: config 0 descriptor?? [ 1836.930694][ T3289] hid_parser_main: 20 callbacks suppressed [ 1836.930719][ T3289] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 1836.930759][ T3289] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 1836.930787][ T3289] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 1836.930813][ T3289] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 1836.930840][ T3289] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 1836.930864][ T3289] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 1836.930890][ T3289] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 1836.930916][ T3289] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 1836.930942][ T3289] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 1836.930969][ T3289] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 1836.964975][ T3289] plantronics 0003:047F:FFFF.00A8: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1837.199144][ T3289] usb 10-1: USB disconnect, device number 20 [ 1837.597340][ T1593] binder: 1592:1593 ioctl c0306201 0 returned -14 [ 1838.387317][ T1620] netlink: 44 bytes leftover after parsing attributes in process `syz.2.27823'. [ 1838.387345][ T1620] netlink: 'syz.2.27823': attribute type 6 has an invalid length. [ 1838.387357][ T1620] netlink: 'syz.2.27823': attribute type 5 has an invalid length. [ 1838.387369][ T1620] netlink: 'syz.2.27823': attribute type 4 has an invalid length. [ 1838.915653][T26131] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1838.915678][T26131] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1838.931872][ T3289] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 1839.114917][ T3289] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1839.114944][ T3289] usb 3-1: config 0 has no interface number 0 [ 1839.114987][ T3289] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1839.115013][ T3289] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1839.115055][ T3289] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1839.115078][ T3289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.139406][ T3289] usb 3-1: config 0 descriptor?? [ 1839.140407][ T1626] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1839.324566][ T3289] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1839.404897][T21960] usb 3-1: USB disconnect, device number 108 [ 1840.253122][ T1657] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1840.481462][ T1669] syz_tun: tun_net_xmit 42 [ 1840.668808][ T1677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1841.472290][ C1] syz_tun: tun_net_xmit 42 [ 1841.991931][ T5742] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1842.144051][ T5742] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1842.144079][ T5742] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1842.144103][ T5742] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1842.144145][ T5742] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1842.144159][ T5742] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1842.145778][ T5742] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1842.145805][ T5742] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1842.145825][ T5742] usb 10-1: Product: syz [ 1842.145839][ T5742] usb 10-1: Manufacturer: syz [ 1842.231925][ T5742] cdc_wdm 10-1:1.0: skipping garbage [ 1842.231945][ T5742] cdc_wdm 10-1:1.0: skipping garbage [ 1842.233888][ T5742] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1842.233907][ T5742] cdc_wdm 10-1:1.0: Unknown control protocol [ 1842.431754][T26131] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1842.431784][T26131] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1842.442172][ C1] ------------[ cut here ]------------ [ 1842.442198][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 1842.442231][ C1] WARNING: kernel/workqueue.c:2298 at __queue_work+0xd87/0x1090, CPU#1: ktimers/1/30 [ 1842.442277][ C1] Modules linked in: [ 1842.442301][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1842.442323][ C1] Tainted: [L]=SOFTLOCKUP [ 1842.442330][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1842.442341][ C1] RIP: 0010:__queue_work+0xda4/0x1090 [ 1842.442366][ C1] Code: 81 c7 68 01 00 00 4c 8d 35 29 d4 23 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 16 a8 a2 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef [ 1842.442383][ C1] RSP: 0018:ffffc90000a4f998 EFLAGS: 00010046 [ 1842.442401][ C1] RAX: 1ffff1100bc43153 RBX: 0000000000000008 RCX: ffff88801e2d9f00 [ 1842.442416][ C1] RDX: ffff88805afeb168 RSI: ffffffff8a29f260 RDI: ffffffff8fb17a00 [ 1842.442431][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1842.442444][ C1] R10: dffffc0000000000 R11: ffffffff818dacb0 R12: dffffc0000000000 [ 1842.442458][ C1] R13: ffff88805e218a80 R14: ffffffff8fb17a00 R15: ffff88805afeb168 [ 1842.442472][ C1] FS: 0000000000000000(0000) GS:ffff888125d8b000(0000) knlGS:0000000000000000 [ 1842.442484][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1842.442494][ C1] CR2: 00007fd5b15aa540 CR3: 000000003cb38000 CR4: 00000000003526f0 [ 1842.442508][ C1] Call Trace: [ 1842.442516][ C1] [ 1842.442527][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1842.442553][ C1] call_timer_fn+0x192/0x5e0 [ 1842.442575][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1842.442600][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1842.442623][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1842.442656][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1842.442675][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1842.442701][ C1] __run_timer_base+0x764/0x9f0 [ 1842.442739][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1842.442759][ C1] ? rt_spin_lock+0x1e0/0x400 [ 1842.442787][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 1842.442823][ C1] run_timer_softirq+0xb7/0x170 [ 1842.442846][ C1] handle_softirqs+0x1de/0x6d0 [ 1842.442881][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1842.442924][ C1] run_ktimerd+0x69/0x100 [ 1842.442958][ C1] smpboot_thread_fn+0x541/0xa50 [ 1842.443000][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1842.443036][ C1] kthread+0x388/0x470 [ 1842.443055][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1842.443081][ C1] ? __pfx_kthread+0x10/0x10 [ 1842.443104][ C1] ret_from_fork+0x514/0xb70 [ 1842.443130][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1842.443158][ C1] ? __switch_to+0xc79/0x1410 [ 1842.443181][ C1] ? __pfx_kthread+0x10/0x10 [ 1842.443203][ C1] ret_from_fork_asm+0x1a/0x30 [ 1842.443244][ C1] [ 1842.443259][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1842.443280][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1842.443303][ C1] Tainted: [L]=SOFTLOCKUP [ 1842.443310][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1842.443319][ C1] Call Trace: [ 1842.443326][ C1] [ 1842.443332][ C1] vpanic+0x56c/0xa60 [ 1842.443357][ C1] ? __pfx__printk+0x10/0x10 [ 1842.443375][ C1] ? __pfx_vpanic+0x10/0x10 [ 1842.443397][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1842.443418][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1842.443446][ C1] panic+0xc5/0xd0 [ 1842.443469][ C1] ? __pfx_panic+0x10/0x10 [ 1842.443503][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1842.443533][ C1] __warn+0x315/0x4c0 [ 1842.443555][ C1] ? __queue_work+0xd87/0x1090 [ 1842.443581][ C1] ? __queue_work+0xd87/0x1090 [ 1842.443607][ C1] __report_bug+0x339/0x540 [ 1842.443625][ C1] ? call_timer_fn+0x192/0x5e0 [ 1842.443646][ C1] ? __run_timer_base+0x764/0x9f0 [ 1842.443664][ C1] ? run_timer_softirq+0xb7/0x170 [ 1842.443690][ C1] ? __queue_work+0xd87/0x1090 [ 1842.443717][ C1] ? __pfx___report_bug+0x10/0x10 [ 1842.443735][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1842.443766][ C1] ? look_up_lock_class+0x57/0x110 [ 1842.443786][ C1] ? register_lock_class+0x31/0x2e0 [ 1842.443817][ C1] report_bug_entry+0x19a/0x290 [ 1842.443837][ C1] ? __queue_work+0xda4/0x1090 [ 1842.443861][ C1] ? __queue_work+0xda9/0x1090 [ 1842.443886][ C1] handle_bug+0xce/0x200 [ 1842.443908][ C1] exc_invalid_op+0x1a/0x50 [ 1842.443930][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1842.443949][ C1] RIP: 0010:__queue_work+0xda4/0x1090 [ 1842.443975][ C1] Code: 81 c7 68 01 00 00 4c 8d 35 29 d4 23 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 16 a8 a2 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef [ 1842.443992][ C1] RSP: 0018:ffffc90000a4f998 EFLAGS: 00010046 [ 1842.444008][ C1] RAX: 1ffff1100bc43153 RBX: 0000000000000008 RCX: ffff88801e2d9f00 [ 1842.444022][ C1] RDX: ffff88805afeb168 RSI: ffffffff8a29f260 RDI: ffffffff8fb17a00 [ 1842.444037][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1842.444049][ C1] R10: dffffc0000000000 R11: ffffffff818dacb0 R12: dffffc0000000000 [ 1842.444063][ C1] R13: ffff88805e218a80 R14: ffffffff8fb17a00 R15: ffff88805afeb168 [ 1842.444081][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1842.444111][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1842.444140][ C1] ? __queue_work+0xd53/0x1090 [ 1842.444170][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1842.444196][ C1] call_timer_fn+0x192/0x5e0 [ 1842.444218][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1842.444239][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1842.444259][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1842.444295][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1842.444311][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1842.444337][ C1] __run_timer_base+0x764/0x9f0 [ 1842.444368][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1842.444389][ C1] ? rt_spin_lock+0x1e0/0x400 [ 1842.444417][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 1842.444453][ C1] run_timer_softirq+0xb7/0x170 [ 1842.444476][ C1] handle_softirqs+0x1de/0x6d0 [ 1842.444510][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1842.444537][ C1] run_ktimerd+0x69/0x100 [ 1842.444556][ C1] smpboot_thread_fn+0x541/0xa50 [ 1842.444585][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1842.444621][ C1] kthread+0x388/0x470 [ 1842.444642][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1842.444667][ C1] ? __pfx_kthread+0x10/0x10 [ 1842.444689][ C1] ret_from_fork+0x514/0xb70 [ 1842.444713][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1842.444734][ C1] ? __switch_to+0xc79/0x1410 [ 1842.444754][ C1] ? __pfx_kthread+0x10/0x10 [ 1842.444775][ C1] ret_from_fork_asm+0x1a/0x30 [ 1842.444812][ C1] [ 1842.445074][ C1] Kernel Offset: disabled