last executing test programs: 12m21.243515694s ago: executing program 1 (id=3582): openat$kvm(0xffffffffffffff9c, 0x0, 0x40400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 12m20.586883744s ago: executing program 1 (id=3583): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x2, 0x0) 12m20.310831084s ago: executing program 1 (id=3584): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) 12m20.040457928s ago: executing program 1 (id=3586): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 12m19.869300422s ago: executing program 2 (id=3587): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)="54d0", 0x2, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 12m19.783327095s ago: executing program 1 (id=3588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40025}, 0x0) 12m19.647940092s ago: executing program 2 (id=3590): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}}, 0x20044800) 12m19.378900945s ago: executing program 2 (id=3593): socket(0xa, 0x3, 0x3a) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003380)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfe52, @dev={0xfe, 0x80, '\x00', 0x14}, 0x80}, {0xa, 0x4e24, 0xa00, @remote, 0x4}, 0xffffffffffffffff, 0x4}}, 0x48) socket$igmp6(0xa, 0x3, 0x2) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r3, 0x4004480d, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) 12m19.034625773s ago: executing program 1 (id=3596): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) 12m18.356095476s ago: executing program 32 (id=3596): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) 12m17.97056917s ago: executing program 2 (id=3600): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 12m17.570379546s ago: executing program 2 (id=3603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="780000000001010400000000141a000002000000240001801400018008000100e000000108000200e0000001e2d758028005000100000000012400028014000180080001000000000008000200ac1a00010c000280050001000000000008000740000000011400108008000140000000000800024000000000000000"], 0x78}}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0x5000000, @local}}}, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x9c, r3, 0x801, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x69a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x64}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5bbe}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x40080d1) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) sendfile(r4, r5, 0x0, 0x8000002b) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000100)={[{0x10001, 0xfff8, 0x0, 0x3, 0x1, 0xc, 0xb, 0x5, 0xff, 0x4, 0x4, 0x16, 0x44e80295}, {0x3, 0xe, 0x3, 0x1, 0x4, 0x8, 0x9, 0x0, 0x7, 0x4, 0x1f, 0x2, 0xffffffff}, {0x9, 0x200, 0x4, 0xf7, 0x1, 0xe, 0x6, 0xa7, 0x4e, 0xb, 0x3, 0x9, 0x7}], 0x1}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x2, {0x8000, 0x1000, 0x4, 0x2}}) 12m14.892689715s ago: executing program 2 (id=3612): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 12m13.880356305s ago: executing program 33 (id=3612): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 8m25.355830941s ago: executing program 0 (id=4506): socket$l2tp(0x2, 0x2, 0x73) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x7, 0x0, 0xffffffff}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000340), 0xc78c, 0xa4000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000feffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000007000000bf09200000000000a5090100ffffff809500000000000000ad980000000000005e080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000400)={0x1, 0x8, 0x8, &(0x7f0000000380)={0x1a, "7988ea2232d7f22b16faf17b855a50f6c0c34cec98cfceab5d037001abab7f3f1f"}}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v2={0x2000000, [{0x4, 0x7}, {0x5, 0x2}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) socket$pppl2tp(0x18, 0x1, 0x1) fsopen(&(0x7f00000003c0)='befs\x00', 0x1) 8m22.435404176s ago: executing program 0 (id=4518): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x300, 0x0) pread64(r3, 0x0, 0x0, 0x3c) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r5, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) epoll_create1(0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x4, [0x0, 0x4, 0x2, 0x7, 0x0, 0x1, 0x1, 0x5, 0x8, 0x9, 0x1, 0x665, 0x4e, 0x200, 0x2f6, 0xfe01, 0x5, 0x9, 0x8, 0x643, 0x5, 0x1, 0x298b, 0x7, 0x7, 0x8000, 0x8, 0x639, 0x6, 0xfffd, 0x87b8, 0xb, 0x8, 0x2, 0xa, 0x2, 0x8001, 0x7c, 0xc, 0x4, 0x1, 0xb, 0x1ff, 0x0, 0x7, 0x8, 0x948, 0xc], 0x8b}}) syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) keyctl$read(0x20, r2, 0x0, 0x0) 8m20.004710196s ago: executing program 0 (id=4523): sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x303, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x0) 8m19.604710509s ago: executing program 0 (id=4524): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000022c0)=[{{&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0xf, 0x1}, 0x80, 0x0}}], 0x1, 0x24004000) recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x1}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) 8m18.45846684s ago: executing program 0 (id=4533): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x300, 0x0) pread64(r3, 0x0, 0x0, 0x3c) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) epoll_create1(0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x4, [0x0, 0x4, 0x2, 0x7, 0x0, 0x1, 0x1, 0x5, 0x8, 0x9, 0x1, 0x665, 0x4e, 0x200, 0x2f6, 0xfe01, 0x5, 0x9, 0x8, 0x643, 0x5, 0x1, 0x298b, 0x7, 0x7, 0x8000, 0x8, 0x639, 0x6, 0xfffd, 0x87b8, 0xb, 0x8, 0x2, 0xa, 0x2, 0x8001, 0x7c, 0xc, 0x4, 0x1, 0xb, 0x1ff, 0x0, 0x7, 0x8, 0x948, 0xc], 0x8b}}) syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) keyctl$read(0x20, r2, 0x0, 0x0) 8m16.352735938s ago: executing program 0 (id=4538): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x5, 0xdd) sendto$inet(r2, 0x0, 0x0, 0x10008095, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x1000}, 0x1c) recvmmsg(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x65942126f3d7b6a8, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x2c}, 0x1c) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 8m1.191541546s ago: executing program 34 (id=4538): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x5, 0xdd) sendto$inet(r2, 0x0, 0x0, 0x10008095, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x1000}, 0x1c) recvmmsg(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x65942126f3d7b6a8, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x2c}, 0x1c) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 5.473582846s ago: executing program 3 (id=7994): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000240)="f8", 0x1}]) sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="9b9c", 0x2}], 0x1, &(0x7f0000000280), 0x0, 0x2000c001}], 0x1, 0x4000040) 5.183097843s ago: executing program 3 (id=7996): socket$l2tp(0x2, 0x2, 0x73) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x7, 0x0, 0xffffffff}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000340), 0xc78c, 0xa4000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000feffffff00000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000007000000bf09200000000000a5090100ffffff809500000000000000ad980000000000005e080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000400)={0x1, 0x8, 0x8, &(0x7f0000000380)={0x1a, "7988ea2232d7f22b16faf17b855a50f6c0c34cec98cfceab5d037001abab7f3f1f"}}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v2={0x2000000, [{0x4, 0x7}, {0x5, 0x2}]}, 0x14, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) fsopen(&(0x7f00000003c0)='befs\x00', 0x1) 3.68516447s ago: executing program 3 (id=8013): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') lseek(r0, 0x3, 0x0) 3.542701304s ago: executing program 3 (id=8016): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x4b, 0x27, 0x7, {0xb, @sctp_ip4_spec={@local, @empty, 0x4e21, 0x4a20}, {0x0, @multicast, 0x56bd, 0xf8d, [0xfffffffc, 0x4]}, @esp_ip6_spec={@rand_addr=' \x01\x00', @loopback, 0x2, 0xe}, {0x0, @remote, 0x3, 0x3524, [0xffffffff, 0x4]}, 0x0, 0x2}}}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 00000000000'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 3.410421513s ago: executing program 3 (id=8020): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) get_mempolicy(0x0, 0x0, 0x20000001b64, &(0x7f0000ffe000/0x1000)=nil, 0x3) 2.541473022s ago: executing program 4 (id=8029): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a001400110076657468305f746f5f62726964676500080017004e224e24140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x48000) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14, 0xa, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4820}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00'], 0x5c}}, 0x0) 2.203294458s ago: executing program 4 (id=8032): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0xf63, @loopback={0xffffffffffff0000}, 0x1}, 0x1c) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="49a188da23ac", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x2, "31db040016dd6a8ba2cd6679f1118e4429e91e881b6ba54b613a37515d70d9f9", "8ceb4eed502f9170af73b015e3064dcb", {"38d623175da7603b8773074eff7604e0", "f786b437410aa8c8ab8f957da9ced2cc"}}}}}}}, 0x0) 1.958604504s ago: executing program 4 (id=8034): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@alg, 0x80, 0x0, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}, 0xbac00000}, {{&(0x7f00000006c0), 0x80, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/214, 0xd6}, {&(0x7f0000000840)=""/201, 0xc9}], 0x2}, 0x100}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000001a40)=""/207, 0xcf}], 0x1, &(0x7f0000001b40)=""/173, 0xad}, 0x7a}], 0x3, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.186895116s ago: executing program 6 (id=8041): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newrule={0x2c, 0x20, 0x102, 0x70bd27, 0x25dfdbfe, {0x2, 0x0, 0x80, 0x2d, 0x8, 0x0, 0x0, 0x8, 0x10003}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x8008}, @FRA_SRC={0x8, 0x2, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001300010029bd", @ANYRES32=r2, @ANYBLOB="000009319034000014001a"], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000044) 1.114594628s ago: executing program 5 (id=8042): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a001400110076657468305f746f5f62726964676500080017004e224e24140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x48000) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14, 0xa, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4820}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00'], 0x5c}}, 0x0) 1.072209308s ago: executing program 7 (id=8043): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x4b, 0x27, 0x7, {0xb, @sctp_ip4_spec={@local, @empty, 0x4e21, 0x4a20}, {0x0, @multicast, 0x56bd, 0xf8d, [0xfffffffc, 0x4]}, @esp_ip6_spec={@rand_addr=' \x01\x00', @loopback, 0x2, 0xe}, {0x0, @remote, 0x3, 0x3524, [0xffffffff, 0x4]}, 0x0, 0x2}}}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1.044602312s ago: executing program 6 (id=8044): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0xf63, @loopback={0xffffffffffff0000}, 0x1}, 0x1c) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="49a188da23ac", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x2, "31db040016dd6a8ba2cd6679f1118e4429e91e881b6ba54b613a37515d70d9f9", "8ceb4eed502f9170af73b015e3064dcb", {"38d623175da7603b8773074eff7604e0", "f786b437410aa8c8ab8f957da9ced2cc"}}}}}}}, 0x0) 918.442826ms ago: executing program 4 (id=8045): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000bc0)="fb350d66", 0x53fe0}], 0x1}}], 0x1, 0x0) 917.596261ms ago: executing program 7 (id=8046): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}, 0xc044) 802.662421ms ago: executing program 6 (id=8047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000200)={@empty, @empty, @void, {@generic={0x6002}}}, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) 802.002194ms ago: executing program 5 (id=8048): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 792.421165ms ago: executing program 4 (id=8049): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000180)="d2cf4071eedf8b7b757ad2e20539519ec6afbc267e1742fa0baeb3a05c4375108461", 0x22}, {&(0x7f0000002440)="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", 0x230}], 0x2}}], 0x1, 0x4000001) r1 = dup(r0) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) 748.771044ms ago: executing program 7 (id=8050): rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0xf}, 0x20, 0x20000000, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 619.540123ms ago: executing program 7 (id=8051): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='numa_maps\x00') r1 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x4800) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) 619.239881ms ago: executing program 4 (id=8052): socket$l2tp(0x2, 0x2, 0x73) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x7, 0x0, 0xffffffff}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000340), 0xc78c, 0xa4000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000feffffff0000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000007000000bf09200000000000a5090100ffffff809500000000000000ad980000000000005e080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000400)={0x1, 0x8, 0x8, &(0x7f0000000380)={0x1a, "7988ea2232d7f22b16faf17b855a50f6c0c34cec98cfceab5d037001abab7f3f1f"}}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v2={0x2000000, [{0x4, 0x7}, {0x5, 0x2}]}, 0x14, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) fsopen(&(0x7f00000003c0)='befs\x00', 0x1) 619.067915ms ago: executing program 6 (id=8053): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 618.76166ms ago: executing program 5 (id=8054): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newrule={0x2c, 0x20, 0x102, 0x70bd27, 0x25dfdbfe, {0x2, 0x0, 0x80, 0x2d, 0x8, 0x0, 0x0, 0x8, 0x10003}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x8008}, @FRA_SRC={0x8, 0x2, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001300010029bd7000ffdbdf", @ANYRES32=r2, @ANYBLOB="000009319034000014001a"], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000044) 442.880803ms ago: executing program 7 (id=8055): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@alg, 0x80, 0x0, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}, 0xbac00000}, {{&(0x7f00000006c0), 0x80, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/214, 0xd6}, {&(0x7f0000000840)=""/201, 0xc9}], 0x2}, 0x100}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000001a40)=""/207, 0xcf}], 0x1, &(0x7f0000001b40)=""/173, 0xad}, 0x7a}], 0x3, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 441.919239ms ago: executing program 6 (id=8056): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) socket(0x11, 0xa, 0x5) 343.598512ms ago: executing program 5 (id=8057): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x4b, 0x27, 0x7, {0xb, @sctp_ip4_spec={@local, @empty, 0x4e21, 0x4a20}, {0x0, @multicast, 0x56bd, 0xf8d, [0xfffffffc, 0x4]}, @esp_ip6_spec={@rand_addr=' \x01\x00', @loopback, 0x2, 0xe}, {0x0, @remote, 0x3, 0x3524, [0xffffffff, 0x4]}, 0x0, 0x2}}}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 170.398463ms ago: executing program 6 (id=8058): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a001400110076657468305f746f5f62726964676500080017004e224e24140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x48000) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14, 0xa, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4820}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00'], 0x5c}}, 0x0) 169.586987ms ago: executing program 5 (id=8059): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xf63, @loopback={0xffffffffffff0000}, 0x1}, 0x1c) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="49a188da23ac", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x2, "31db040016dd6a8ba2cd6679f1118e4429e91e881b6ba54b613a37515d70d9f9", "8ceb4eed502f9170af73b015e3064dcb", {"38d623175da7603b8773074eff7604e0", "f786b437410aa8c8ab8f957da9ced2cc"}}}}}}}, 0x0) 146.80211ms ago: executing program 3 (id=8060): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000004840)={0x6, 0x4, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0x0, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81ae4052e43ac61b7ad3300", [0x2, 0x7]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 103.332752ms ago: executing program 7 (id=8061): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3f) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x1008}) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000300)={0x9, 0x210000, 0x2, 0xfffffffd, 0x0, "837a0283049afcdec2cd00", 0x80000001, 0x400}) 0s ago: executing program 5 (id=8062): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r1, 0x0, &(0x7f00000001c0)="cd", 0x1, 0x3}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r1, 0x0, &(0x7f0000000300)='O', 0x1, 0xff}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x6, r1, 0x0, &(0x7f0000000000)="b7", 0x1, 0xffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x13}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000000480)='}', 0x1, 0x7ff}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000000340)="fe", 0x1, 0xd372}) kernel console output (not intermixed with test programs): led with error -71 [ 1154.127640][ T5830] usb 7-1: USB disconnect, device number 20 [ 1155.671632][T22474] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5453'. [ 1156.563691][T22497] pim6reg1: entered promiscuous mode [ 1156.575528][T22497] pim6reg1: entered allmulticast mode [ 1157.373415][T22517] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1157.421797][T22516] [U] J"—E:ÀÆ" [ 1157.683359][T22529] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5473'. [ 1157.962996][T22539] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5479'. [ 1158.301856][T22547] batadv_slave_0: entered promiscuous mode [ 1158.436327][T22546] batadv_slave_0: left promiscuous mode [ 1158.910880][T22555] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5486'. [ 1158.916087][T22557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5485'. [ 1159.383227][T22561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5488'. [ 1159.496587][T22565] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5490'. [ 1160.221557][T22594] netlink: 'syz.7.5502': attribute type 11 has an invalid length. [ 1160.229992][T22594] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5502'. [ 1160.335200][T22596] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5503'. [ 1161.215040][T22615] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1161.257722][T22613] [U] J"—E:ÀÆ" [ 1161.733262][T22632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5515'. [ 1162.349158][T22650] syzkaller0: entered promiscuous mode [ 1162.355007][T22650] syzkaller0: entered allmulticast mode [ 1162.517423][T22652] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1162.531300][T22651] [U] J"—E:ÀÆ" [ 1163.230729][T22666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5531'. [ 1163.306849][T22669] netlink: 'syz.3.5531': attribute type 10 has an invalid length. [ 1163.740339][T22682] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1163.911979][T18906] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1164.076573][T18906] usb 6-1: Using ep0 maxpacket: 8 [ 1164.102673][T18906] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1164.113363][T18906] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 1164.145461][T18906] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 96, changing to 7 [ 1164.176130][T18906] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1097, setting to 1024 [ 1164.206373][T18906] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1164.247131][T18906] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1164.256733][T18906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.263147][T22688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5539'. [ 1164.264770][T18906] usb 6-1: Product: syz [ 1164.326547][T18906] usb 6-1: Manufacturer: syz [ 1164.343541][T18906] usb 6-1: SerialNumber: syz [ 1164.375459][T22677] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1164.414340][T18906] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1164.453540][T18906] usbtest 6-1:1.0: Linux user mode ISO test driver [ 1164.482111][T18906] usbtest 6-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 1166.517657][ T9] usb 6-1: USB disconnect, device number 18 [ 1168.475697][T22775] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1168.573385][T22777] syzkaller0: entered promiscuous mode [ 1168.580500][T22777] syzkaller0: entered allmulticast mode [ 1168.841842][T22782] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5571'. [ 1168.938862][T22785] netlink: 'syz.6.5571': attribute type 10 has an invalid length. [ 1170.114700][T22819] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 1172.130471][T22860] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1172.576758][T22871] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5606'. [ 1172.607652][T22871] gretap0: entered promiscuous mode [ 1174.694787][T22923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5626'. [ 1175.562641][T22948] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1176.507034][T22961] sctp: [Deprecated]: syz.4.5642 (pid 22961) Use of int in max_burst socket option deprecated. [ 1176.507034][T22961] Use struct sctp_assoc_value instead [ 1176.593925][T22963] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1176.639404][T22962] [U] J"—E:ÀÆ" [ 1180.473420][T23077] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 1180.711073][T23085] sctp: [Deprecated]: syz.7.5692 (pid 23085) Use of int in max_burst socket option deprecated. [ 1180.711073][T23085] Use struct sctp_assoc_value instead [ 1180.919026][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5694'. [ 1183.471219][T23154] tipc: Enabling of bearer rejected, already enabled [ 1184.502052][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1184.509078][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.778809][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1184.797719][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1184.806991][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1184.818789][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1184.827269][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1185.212554][T16257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1185.272306][T16257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.304310][T23178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5732'. [ 1185.853239][T16257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1185.878296][T16257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.276872][T16257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1186.303891][T16257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.593240][T16257] bond0: (slave netdevsim0): Releasing backup interface [ 1186.632663][T16257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1186.710125][T16257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.896066][ T51] Bluetooth: hci1: command tx timeout [ 1187.491246][T16257] bridge_slave_1: left allmulticast mode [ 1187.512124][T16257] bridge_slave_1: left promiscuous mode [ 1187.545274][T16257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.584531][T16257] bridge_slave_0: left allmulticast mode [ 1187.616058][T16257] bridge_slave_0: left promiscuous mode [ 1187.627121][T16257] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.128505][T23236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5754'. [ 1188.982420][ T51] Bluetooth: hci1: command tx timeout [ 1189.503328][T16257] dvmrp0 (unregistering): left allmulticast mode [ 1190.103658][T16257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1190.118000][T16257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1190.137466][T16257] bond0 (unregistering): (slave team0): Releasing backup interface [ 1190.154607][T16257] bond0 (unregistering): Released all slaves [ 1190.222033][T23268] syzkaller0: entered promiscuous mode [ 1190.235151][T23268] syzkaller0: entered allmulticast mode [ 1190.264159][T16257] tipc: Disabling bearer [ 1190.279196][T16257] tipc: Left network mode [ 1190.340639][T23169] chnl_net:caif_netlink_parms(): no params data found [ 1190.615962][T23290] fuse: Bad value for 'fd' [ 1191.056091][ T51] Bluetooth: hci1: command tx timeout [ 1191.950199][T23169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.973606][T23169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.996754][T23169] bridge_slave_0: entered allmulticast mode [ 1192.014565][T23169] bridge_slave_0: entered promiscuous mode [ 1192.099500][T23332] syzkaller0: entered promiscuous mode [ 1192.105569][T23332] syzkaller0: entered allmulticast mode [ 1192.161365][T23169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.184289][T23169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.213701][T23169] bridge_slave_1: entered allmulticast mode [ 1192.362793][T23340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5780'. [ 1192.727542][T23169] bridge_slave_1: entered promiscuous mode [ 1193.136258][ T51] Bluetooth: hci1: command tx timeout [ 1193.345083][T23169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.488364][T23169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.743707][T23169] team0: Port device team_slave_0 added [ 1193.817916][T16257] hsr_slave_0: left promiscuous mode [ 1193.833334][T16257] hsr_slave_1: left promiscuous mode [ 1193.851075][T16257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1193.886113][T16257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1193.910813][T16257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1193.927257][T16257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.012536][T16257] veth1_macvtap: left promiscuous mode [ 1194.026073][T16257] veth0_macvtap: left promiscuous mode [ 1194.031856][T16257] veth1_vlan: left promiscuous mode [ 1194.056218][T16257] veth0_vlan: left promiscuous mode [ 1196.270658][T16257] team0 (unregistering): Port device team_slave_1 removed [ 1196.432641][T16257] team0 (unregistering): Port device team_slave_0 removed [ 1196.558411][T23412] netlink: 'syz.6.5815': attribute type 72 has an invalid length. [ 1196.566752][T23412] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5815'. [ 1197.319729][T23169] team0: Port device team_slave_1 added [ 1197.511965][T23169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.546525][T23169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.625211][T23169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.674701][T23169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.701287][T23169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.737685][T23169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1198.091192][T23169] hsr_slave_0: entered promiscuous mode [ 1198.121492][T23169] hsr_slave_1: entered promiscuous mode [ 1198.152257][T23169] debugfs: 'hsr0' already exists in 'hsr' [ 1198.181654][T23169] Cannot create hsr debugfs directory [ 1198.264411][T23441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1198.335202][T23452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5829'. [ 1201.238710][T23520] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5850'. [ 1201.472185][T23169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1201.554477][T23169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1201.744445][T23169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1201.837921][T23169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1201.852529][T23532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5853'. [ 1202.331607][T23169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.464639][T23169] 8021q: adding VLAN 0 to HW filter on device team0 [ 1202.521053][T16257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.528386][T16257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1202.585826][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.593079][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.038962][T23169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1203.387904][T23169] veth0_vlan: entered promiscuous mode [ 1203.424231][T23169] veth1_vlan: entered promiscuous mode [ 1203.593750][T23169] veth0_macvtap: entered promiscuous mode [ 1203.640000][T23169] veth1_macvtap: entered promiscuous mode [ 1203.643625][T23595] sctp: [Deprecated]: syz.5.5874 (pid 23595) Use of int in max_burst socket option deprecated. [ 1203.643625][T23595] Use struct sctp_assoc_value instead [ 1203.745291][T23169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1203.795702][T23169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1203.882096][T16257] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.895137][T16257] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.950816][T16257] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.981852][T16257] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.243805][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.278369][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1204.382539][ T3557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.422462][ T3557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1204.796588][T23626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1204.960615][T23632] kvm: kvm [23627]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 1204.985059][T23632] kvm: kvm [23627]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 1205.006453][T23632] kvm: kvm [23627]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 1207.256010][ T5830] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1207.436006][ T5830] usb 7-1: Using ep0 maxpacket: 32 [ 1207.460882][ T5830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1207.492351][ T5830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1207.528810][ T5830] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1207.543994][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.574670][ T5830] usb 7-1: config 0 descriptor?? [ 1208.017713][ T5830] ft260 0003:0403:6030.0034: unknown main item tag 0x7 [ 1208.207049][ T5830] ft260 0003:0403:6030.0034: failed to retrieve chip version [ 1208.215655][ T5830] ft260 0003:0403:6030.0034: probe with driver ft260 failed with error -32 [ 1208.438291][T23770] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5928'. [ 1208.458037][T23770] gretap0: entered promiscuous mode [ 1208.489881][T23773] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5928'. [ 1208.520778][T23773] 0ªî{X¹¦: renamed from gretap0 [ 1208.539642][T23773] 0ªî{X¹¦: left promiscuous mode [ 1208.553788][T23773] 0ªî{X¹¦: entered allmulticast mode [ 1208.583375][T23773] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1208.811792][T23784] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5932'. [ 1208.905760][T23781] netlink: 'syz.4.5932': attribute type 10 has an invalid length. [ 1210.553089][ T5906] usb 7-1: USB disconnect, device number 21 [ 1210.761907][T23820] syzkaller0: entered promiscuous mode [ 1210.793846][T23820] syzkaller0: entered allmulticast mode [ 1212.358684][T23883] sctp: [Deprecated]: syz.4.5972 (pid 23883) Use of int in max_burst socket option deprecated. [ 1212.358684][T23883] Use struct sctp_assoc_value instead [ 1214.596823][T23946] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5995'. [ 1214.723528][T23947] netlink: 'syz.6.5995': attribute type 10 has an invalid length. [ 1215.369459][T23961] batadv_slave_0: entered promiscuous mode [ 1215.391576][T23961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1215.675007][T23961] batadv_slave_0 (unregistering): left promiscuous mode [ 1215.684302][T23961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.944702][T24025] kvm: kvm [24024]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 1219.250861][T24037] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=772014104 (1544028208 ns) > initial count (336 ns). Using initial count to start timer. [ 1220.059093][T18906] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1220.553603][T18906] usb 5-1: Using ep0 maxpacket: 8 [ 1220.571315][T18906] usb 5-1: config 1 has an invalid descriptor of length 22, skipping remainder of the config [ 1220.622525][T18906] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 10304, setting to 1024 [ 1220.655040][T24076] fuse: Bad value for 'fd' [ 1220.684641][T18906] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1220.967232][T18906] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1221.049254][T18906] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1221.099081][T18906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.244209][T18906] usb 5-1: Product: syz [ 1221.264544][T18906] usb 5-1: Manufacturer: syz [ 1221.274739][T18906] usb 5-1: SerialNumber: syz [ 1221.323082][T24063] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1221.334064][T18906] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1221.387400][T18906] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 1221.393807][T18906] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 1222.325650][T24089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6045'. [ 1222.381250][T24092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6045'. [ 1222.446862][T24089] macvtap0: refused to change device tx_queue_len [ 1222.466904][T24092] macvtap0: refused to change device tx_queue_len [ 1222.715473][T24101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6049'. [ 1223.192566][ T5830] usb 5-1: USB disconnect, device number 48 [ 1224.334764][T24153] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6069'. [ 1224.418369][T24150] netlink: 'syz.6.6069': attribute type 10 has an invalid length. [ 1224.765866][ T31] audit: type=1326 audit(1754082361.921:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24164 comm="syz.7.6074" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 1224.876441][ T5906] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1225.086890][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 1225.106467][ T5906] usb 4-1: config 1 has an invalid descriptor of length 23, skipping remainder of the config [ 1225.158798][ T5906] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 576 [ 1225.226125][ T5906] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1225.286293][T24183] sctp: [Deprecated]: syz.5.6080 (pid 24183) Use of int in max_burst socket option deprecated. [ 1225.286293][T24183] Use struct sctp_assoc_value instead [ 1225.382842][ T5906] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1225.406276][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.449311][ T5906] usb 4-1: Product: syz [ 1225.467842][ T5906] usb 4-1: Manufacturer: syz [ 1225.506010][ T5906] usb 4-1: SerialNumber: syz [ 1225.579014][T24187] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1225.596617][T24165] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1225.618168][ T5906] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1225.685980][ T5906] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 1225.699503][ T5906] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 1226.708067][T24216] tipc: Enabled bearer , priority 0 [ 1226.741577][T24216] syzkaller0: entered promiscuous mode [ 1226.764237][T24216] syzkaller0: entered allmulticast mode [ 1226.869806][T24215] tipc: Resetting bearer [ 1227.006931][T24215] tipc: Disabling bearer [ 1227.734563][T24240] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6105'. [ 1228.097737][T24249] sctp: [Deprecated]: syz.5.6110 (pid 24249) Use of int in max_burst socket option deprecated. [ 1228.097737][T24249] Use struct sctp_assoc_value instead [ 1228.141029][ T5830] usb 4-1: USB disconnect, device number 32 [ 1230.116657][ T5906] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1230.278344][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 1230.290475][ T5906] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1230.300973][ T5906] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 1230.400294][ T5906] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 96, changing to 7 [ 1230.451238][ T5906] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1097, setting to 1024 [ 1230.522895][ T5906] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1230.597110][ T5906] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1230.615342][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.624209][ T5906] usb 5-1: Product: syz [ 1230.662960][ T5906] usb 5-1: Manufacturer: syz [ 1230.678266][ T5906] usb 5-1: SerialNumber: syz [ 1230.717404][T24298] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1230.728525][ T5906] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1230.773258][ T5906] usbtest 5-1:1.0: Linux user mode ISO test driver [ 1230.782498][ T5906] usbtest 5-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 1232.340824][T24307] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1232.541814][T24332] support for the xor transformation has been removed. [ 1232.753047][T24337] program syz.6.6138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1233.611444][T20087] usb 5-1: USB disconnect, device number 49 [ 1233.891849][T24358] sctp: [Deprecated]: syz.4.6145 (pid 24358) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1233.891849][T24358] Use struct sctp_sack_info instead [ 1234.585767][ T5934] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1234.746110][ T5934] usb 7-1: Using ep0 maxpacket: 32 [ 1234.774403][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.795735][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.829523][ T5934] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1234.866928][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.162265][ T5934] usb 7-1: config 0 descriptor?? [ 1235.689328][ T5934] ft260 0003:0403:6030.0035: unknown main item tag 0x7 [ 1235.855588][ T5934] ft260 0003:0403:6030.0035: failed to retrieve chip version [ 1235.916722][ T5934] ft260 0003:0403:6030.0035: probe with driver ft260 failed with error -5 [ 1236.506249][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1236.666133][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1236.943839][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1237.007083][ T9] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1237.104953][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1237.203927][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1237.239813][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.301504][ T9] usb 8-1: Product: syz [ 1237.326265][ T9] usb 8-1: Manufacturer: syz [ 1237.546104][ T9] usb 8-1: SerialNumber: syz [ 1237.592412][T24395] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1237.710158][ T9] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 1237.725210][ T9] usbtest 8-1:1.0: couldn't get endpoints, -22 [ 1237.738849][ T9] usbtest 8-1:1.0: probe with driver usbtest failed with error -22 [ 1238.218418][ T5934] usb 7-1: USB disconnect, device number 22 [ 1239.447708][ T5906] usb 8-1: USB disconnect, device number 9 [ 1240.195993][ T43] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1240.356380][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 1240.368625][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.403331][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.424099][ T43] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1240.440841][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.481691][ T43] usb 7-1: config 0 descriptor?? [ 1240.912839][ T43] ft260 0003:0403:6030.0036: unknown main item tag 0x7 [ 1241.178905][ T43] ft260 0003:0403:6030.0036: failed to retrieve chip version [ 1241.194633][ T43] ft260 0003:0403:6030.0036: probe with driver ft260 failed with error -5 [ 1242.665724][T24501] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1243.260950][T24522] kvm: kvm [24521]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 1243.295324][T24522] kvm: kvm [24521]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 1243.310638][T24522] kvm: kvm [24521]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 1243.583637][ T5906] usb 7-1: USB disconnect, device number 23 [ 1243.765623][T24541] sctp: [Deprecated]: syz.3.6210 (pid 24541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1243.765623][T24541] Use struct sctp_sack_info instead [ 1245.662727][T24580] tipc: Enabled bearer , priority 0 [ 1245.690406][T24580] syzkaller0: entered promiscuous mode [ 1245.696909][T24580] syzkaller0: entered allmulticast mode [ 1245.727503][T24580] tipc: Resetting bearer [ 1245.794722][T24579] tipc: Resetting bearer [ 1245.825585][T24579] tipc: Disabling bearer [ 1245.982918][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1245.990353][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1247.265701][T24624] netlink: 'syz.6.6243': attribute type 10 has an invalid length. [ 1247.580389][T24639] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6248'. [ 1247.580467][T24632] tipc: Enabled bearer , priority 0 [ 1247.656894][T24641] syzkaller0: entered promiscuous mode [ 1247.663139][T24641] syzkaller0: entered allmulticast mode [ 1248.189270][T24631] tipc: Resetting bearer [ 1248.240219][T24631] tipc: Disabling bearer [ 1248.628430][T24656] sctp: [Deprecated]: syz.6.6254 (pid 24656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1248.628430][T24656] Use struct sctp_sack_info instead [ 1249.458185][T24674] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6262'. [ 1249.473273][T24679] netlink: 'syz.4.6261': attribute type 10 has an invalid length. [ 1249.660263][T24682] tipc: Enabled bearer , priority 0 [ 1249.690703][T24682] syzkaller0: entered promiscuous mode [ 1249.697965][T24682] syzkaller0: entered allmulticast mode [ 1249.720342][T24682] tipc: Resetting bearer [ 1249.752397][T24681] tipc: Resetting bearer [ 1249.811161][T24681] tipc: Disabling bearer [ 1250.668632][T24705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6272'. [ 1252.549006][T24741] tipc: Enabled bearer , priority 0 [ 1252.568226][T24741] syzkaller0: entered promiscuous mode [ 1252.574357][T24741] syzkaller0: entered allmulticast mode [ 1252.603548][T24741] tipc: Resetting bearer [ 1252.628921][T24740] tipc: Resetting bearer [ 1252.878208][T24740] tipc: Disabling bearer [ 1253.610322][T24756] sctp: [Deprecated]: syz.3.6289 (pid 24756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1253.610322][T24756] Use struct sctp_sack_info instead [ 1255.232641][T24783] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6297'. [ 1255.426209][T24788] netlink: 'syz.3.6299': attribute type 10 has an invalid length. [ 1255.838578][T24788] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1256.273500][T24795] sctp: [Deprecated]: syz.3.6301 (pid 24795) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1256.273500][T24795] Use struct sctp_sack_info instead [ 1257.321386][T24828] netlink: 'syz.6.6312': attribute type 10 has an invalid length. [ 1257.583517][T24834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6315'. [ 1257.760679][T24843] sctp: [Deprecated]: syz.7.6316 (pid 24843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1257.760679][T24843] Use struct sctp_sack_info instead [ 1258.488845][T24852] tipc: Enabled bearer , priority 0 [ 1258.537487][T24852] syzkaller0: entered promiscuous mode [ 1258.543031][T24852] syzkaller0: entered allmulticast mode [ 1258.661183][T24852] tipc: Resetting bearer [ 1258.701071][T24851] tipc: Resetting bearer [ 1258.795796][T24864] netlink: 'syz.7.6328': attribute type 10 has an invalid length. [ 1258.797332][T24851] tipc: Disabling bearer [ 1258.840646][T24864] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 1259.677619][T24887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6329'. [ 1260.323525][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6335'. [ 1260.655182][T24897] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6338'. [ 1261.214151][T24904] netlink: 'syz.5.6341': attribute type 10 has an invalid length. [ 1261.246280][ T5830] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1261.426127][ T5830] usb 7-1: Using ep0 maxpacket: 32 [ 1261.449552][ T5830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.495544][ T5830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.532182][ T5830] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1261.565372][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.602222][ T5830] usb 7-1: config 0 descriptor?? [ 1262.056242][ T5830] ft260 0003:0403:6030.0037: unknown main item tag 0x7 [ 1262.609208][ T5830] ft260 0003:0403:6030.0037: failed to retrieve chip version [ 1262.649638][ T5830] ft260 0003:0403:6030.0037: probe with driver ft260 failed with error -5 [ 1263.003130][T24927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6350'. [ 1264.013091][ T5830] usb 7-1: USB disconnect, device number 24 [ 1264.361556][T24953] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6357'. [ 1264.626011][ T31] audit: type=1326 audit(1754082401.741:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24956 comm="syz.3.6359" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f63539 code=0x0 [ 1265.018600][T24965] netlink: 'syz.4.6361': attribute type 10 has an invalid length. [ 1265.604980][T24979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6367'. [ 1265.996577][ T5830] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1266.013644][T24995] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6371'. [ 1266.366165][ T5830] usb 4-1: Using ep0 maxpacket: 32 [ 1266.495429][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.513865][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.615159][ T5830] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1266.659078][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.717616][ T5830] usb 4-1: config 0 descriptor?? [ 1267.161861][ T5830] ft260 0003:0403:6030.0038: unknown main item tag 0x7 [ 1267.358580][ T5830] ft260 0003:0403:6030.0038: failed to retrieve chip version [ 1267.400211][ T5830] ft260 0003:0403:6030.0038: probe with driver ft260 failed with error -5 [ 1267.428782][T25016] tipc: Enabled bearer , priority 0 [ 1267.472935][T25016] syzkaller0: entered promiscuous mode [ 1267.514873][T25016] syzkaller0: entered allmulticast mode [ 1267.682402][T25024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6382'. [ 1267.803598][T25021] tipc: Resetting bearer [ 1267.843387][T25015] tipc: Resetting bearer [ 1267.951159][T25015] tipc: Disabling bearer [ 1268.309877][T25040] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6388'. [ 1268.933644][ T43] usb 4-1: USB disconnect, device number 33 [ 1270.526959][T25083] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6402'. [ 1270.936606][T25088] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1271.206091][ T43] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1271.463098][T25097] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6406'. [ 1271.502805][T25100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6408'. [ 1271.526194][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1271.540536][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1271.556029][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1271.597756][ T43] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1271.619864][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.660659][T25101] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1271.677182][T25101] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1271.693596][ T43] usb 6-1: config 0 descriptor?? [ 1271.772976][T12179] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.829345][T25104] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6409'. [ 1271.858774][T25106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6410'. [ 1271.984664][T12179] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.165688][ T43] ft260 0003:0403:6030.0039: unknown main item tag 0x7 [ 1272.213465][T12179] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.361518][ T43] ft260 0003:0403:6030.0039: failed to retrieve chip version [ 1272.836197][ T43] ft260 0003:0403:6030.0039: probe with driver ft260 failed with error -5 [ 1272.838976][T12179] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.387753][T12179] bridge_slave_1: left allmulticast mode [ 1273.393561][T12179] bridge_slave_1: left promiscuous mode [ 1273.446784][T12179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.518319][T12179] bridge_slave_0: left allmulticast mode [ 1273.555076][T12179] bridge_slave_0: left promiscuous mode [ 1273.561871][T12179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.600288][T25137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6420'. [ 1273.949037][T25148] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6422'. [ 1274.698745][T25151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6425'. [ 1274.953040][ T5830] usb 6-1: USB disconnect, device number 19 [ 1276.171827][T25184] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6435'. [ 1276.704609][T25195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6440'. [ 1277.562080][T25198] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6441'. [ 1278.169127][T12179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1278.225710][T12179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1278.262915][T12179] bond0 (unregistering): Released all slaves [ 1278.700806][T25215] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1278.908810][T25227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6451'. [ 1278.978591][T25228] netlink: 'syz.3.6451': attribute type 10 has an invalid length. [ 1279.053010][T25226] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6450'. [ 1279.380295][T12179] hsr_slave_0: left promiscuous mode [ 1279.544801][T12179] hsr_slave_1: left promiscuous mode [ 1279.584927][T12179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1279.629952][T12179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.690556][T12179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1279.724698][T12179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1279.865734][T12179] veth1_macvtap: left promiscuous mode [ 1279.897347][T12179] veth0_macvtap: left promiscuous mode [ 1279.930334][T12179] veth1_vlan: left promiscuous mode [ 1279.969025][T12179] veth0_vlan: left promiscuous mode [ 1280.353811][T25267] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6462'. [ 1280.798599][T25284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6466'. [ 1280.912656][T25281] netlink: 'syz.3.6466': attribute type 10 has an invalid length. [ 1281.600903][T12179] team0 (unregistering): Port device team_slave_1 removed [ 1281.665666][T12179] team0 (unregistering): Port device team_slave_0 removed [ 1282.756404][T25274] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6464'. [ 1283.368918][T25333] syz.5.6481 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1284.440929][T25361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6488'. [ 1284.965275][T25372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6491'. [ 1285.032841][T25377] netlink: 'syz.3.6491': attribute type 10 has an invalid length. [ 1285.689338][T13415] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1285.708192][T13415] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1285.737903][T13415] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1285.751964][T13415] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1285.761276][T13415] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1285.967699][T18646] syz_tun (unregistering): left allmulticast mode [ 1286.029253][T18646] syz_tun (unregistering): left promiscuous mode [ 1286.372870][T25397] fuse: Bad value for 'fd' [ 1286.765072][T12179] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.237730][T12179] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.554391][T12179] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.824299][T25426] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6496'. [ 1287.864827][ T51] Bluetooth: hci2: command tx timeout [ 1288.154941][T12179] bond0: (slave netdevsim0): Releasing backup interface [ 1288.218125][T12179] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.343468][T25426] tipc: Enabling of bearer rejected, already enabled [ 1289.105296][T25387] chnl_net:caif_netlink_parms(): no params data found [ 1289.170936][T12179] bridge_slave_1: left allmulticast mode [ 1289.225960][T12179] bridge_slave_1: left promiscuous mode [ 1289.252215][T12179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.286642][T12179] bridge_slave_0: left allmulticast mode [ 1289.301392][T12179] bridge_slave_0: left promiscuous mode [ 1289.329496][T12179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.616277][T20087] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1289.864168][T20087] usb 6-1: Using ep0 maxpacket: 8 [ 1289.923579][T20087] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1289.938892][ T51] Bluetooth: hci2: command tx timeout [ 1289.964554][T20087] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x21, changing to 0x1 [ 1290.003995][T20087] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 67, changing to 7 [ 1290.066595][T20087] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 58417, setting to 1024 [ 1290.090441][T20087] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1290.169112][T20087] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1290.185942][T20087] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.197732][T20087] usb 6-1: Product: syz [ 1290.201956][T20087] usb 6-1: Manufacturer: syz [ 1290.215931][T20087] usb 6-1: SerialNumber: syz [ 1290.251918][T25449] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1290.284874][T20087] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1290.317149][T20087] usbtest 6-1:1.0: Linux user mode ISO test driver [ 1290.350738][T20087] usbtest 6-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 1290.404671][T25465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6514'. [ 1290.722206][T12179] dvmrp0 (unregistering): left allmulticast mode [ 1291.566195][T12179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1291.644262][T12179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1291.680014][T12179] bond0 (unregistering): Released all slaves [ 1291.998985][T12179] tipc: Disabling bearer [ 1292.006870][T12179] tipc: Left network mode [ 1292.017575][ T51] Bluetooth: hci2: command tx timeout [ 1292.209694][T18906] usb 6-1: USB disconnect, device number 20 [ 1292.544531][T25387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.606142][T25387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.626587][T25387] bridge_slave_0: entered allmulticast mode [ 1292.666547][T25387] bridge_slave_0: entered promiscuous mode [ 1292.674965][T25492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6522'. [ 1292.696482][T25387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.705282][T25387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.756290][T25387] bridge_slave_1: entered allmulticast mode [ 1292.774708][T25387] bridge_slave_1: entered promiscuous mode [ 1293.111869][T25387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.184372][T25387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.640051][T25387] team0: Port device team_slave_0 added [ 1293.694696][T25387] team0: Port device team_slave_1 added [ 1294.104052][ T51] Bluetooth: hci2: command tx timeout [ 1294.119916][T25515] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6523'. [ 1294.314486][T25387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.396109][T25387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.501842][T25387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.580631][T25515] tipc: Enabling of bearer rejected, already enabled [ 1294.667079][T25387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.726879][T25387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.817803][T25387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.562789][T12179] hsr_slave_0: left promiscuous mode [ 1295.572551][T12179] hsr_slave_1: left promiscuous mode [ 1295.579967][T12179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1295.596719][T12179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1295.604920][T12179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1295.614481][T12179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1295.942594][T12179] veth1_macvtap: left promiscuous mode [ 1295.948541][T12179] veth0_macvtap: left promiscuous mode [ 1295.954376][T12179] veth1_vlan: left promiscuous mode [ 1295.972407][T12179] veth0_vlan: left promiscuous mode [ 1297.715114][T25560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6537'. [ 1299.267870][T12179] team0 (unregistering): Port device team_slave_1 removed [ 1299.581296][T25584] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6543'. [ 1299.667146][T12179] team0 (unregistering): Port device team_slave_0 removed [ 1300.876802][ T5964] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1301.036114][ T5964] usb 6-1: Using ep0 maxpacket: 8 [ 1301.045732][ T5964] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1301.055760][ T5964] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1301.072305][ T5964] usb 6-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 1301.093633][ T5964] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1301.128274][ T5964] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1301.138152][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.157921][ T5964] usb 6-1: Product: syz [ 1301.162169][ T5964] usb 6-1: Manufacturer: syz [ 1301.182797][ T5964] usb 6-1: SerialNumber: syz [ 1301.200662][T25595] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1301.292946][ T5964] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1301.313426][ T5964] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 1301.323619][ T5964] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 1301.512907][T25387] hsr_slave_0: entered promiscuous mode [ 1301.587542][T25387] hsr_slave_1: entered promiscuous mode [ 1301.619802][T25387] debugfs: 'hsr0' already exists in 'hsr' [ 1301.635830][T25387] Cannot create hsr debugfs directory [ 1303.516060][T20087] usb 6-1: USB disconnect, device number 21 [ 1303.862439][T25649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6559'. [ 1304.762128][T25387] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1304.843310][T25387] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1304.963586][T25387] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1305.037880][T25387] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1305.536349][T25387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.701505][T25387] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.797044][T12179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.804361][T12179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.812479][ T5964] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1305.838394][T12179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.845586][T12179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1305.986322][ T5964] usb 6-1: Using ep0 maxpacket: 8 [ 1306.014420][ T5964] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1306.040412][ T5964] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 1306.085975][ T5964] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 96, changing to 7 [ 1306.109313][T25387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.137088][ T5964] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 59260, setting to 1024 [ 1306.184188][ T5964] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1306.263817][ T5964] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1306.322545][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.343040][ T5964] usb 6-1: Product: syz [ 1306.422514][ T5964] usb 6-1: Manufacturer: syz [ 1306.430093][ T5964] usb 6-1: SerialNumber: syz [ 1306.435935][T25387] veth0_vlan: entered promiscuous mode [ 1306.464769][T25684] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1306.491693][ T5964] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1306.525150][T25387] veth1_vlan: entered promiscuous mode [ 1306.537114][ T5964] usbtest 6-1:1.0: Linux user mode ISO test driver [ 1306.558805][T25707] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6570'. [ 1306.585377][ T5964] usbtest 6-1:1.0: high-speed {control bulk-in iso-in} tests (+alt) [ 1306.821136][T25387] veth0_macvtap: entered promiscuous mode [ 1306.941788][T25387] veth1_macvtap: entered promiscuous mode [ 1307.131494][T25387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1307.237556][T25387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1307.334311][ T30] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.401536][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1307.408896][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.442996][ T30] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.469758][ T30] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.521657][ T30] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.035484][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.084521][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.244104][T16257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.286069][T16257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.405330][T18906] usb 6-1: USB disconnect, device number 22 [ 1308.997376][T25751] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6580'. [ 1309.462248][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1310.493544][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1310.506952][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1310.517862][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1310.526144][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1310.533845][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1311.273688][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.610928][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.909807][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.136203][ T59] bond0: (slave netdevsim0): Releasing backup interface [ 1312.163676][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.577049][ T51] Bluetooth: hci0: command tx timeout [ 1313.327789][T25792] chnl_net:caif_netlink_parms(): no params data found [ 1313.348133][ T59] bridge_slave_1: left allmulticast mode [ 1313.354133][ T59] bridge_slave_1: left promiscuous mode [ 1313.361436][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.384517][ T59] bridge_slave_0: left allmulticast mode [ 1313.400706][ T59] bridge_slave_0: left promiscuous mode [ 1313.410924][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.080088][T25846] kvm: kvm [25844]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 1314.092862][T25846] kvm: kvm [25844]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 1314.108603][T25846] kvm: kvm [25844]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 1314.138088][T25846] kvm_intel: kvm [25844]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 1314.244586][ T59] dvmrp0 (unregistering): left allmulticast mode [ 1314.666471][ T51] Bluetooth: hci0: command tx timeout [ 1314.951942][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1314.975680][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1315.031232][ T59] bond0 (unregistering): Released all slaves [ 1315.466497][ T59] bond1 (unregistering): (slave batadv1): Releasing active interface [ 1315.478080][ T59] bond1 (unregistering): Released all slaves [ 1315.819355][ T59] tipc: Disabling bearer [ 1315.858213][ T59] tipc: Left network mode [ 1316.452862][T25792] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.491161][T25792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.517783][T25792] bridge_slave_0: entered allmulticast mode [ 1316.570502][T25792] bridge_slave_0: entered promiscuous mode [ 1316.590055][T25792] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.604410][T25792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.666399][T25792] bridge_slave_1: entered allmulticast mode [ 1316.674516][T25792] bridge_slave_1: entered promiscuous mode [ 1316.737057][ T51] Bluetooth: hci0: command tx timeout [ 1317.270084][T25792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1317.348997][T25792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.731176][T25792] team0: Port device team_slave_0 added [ 1318.298466][T25937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6625'. [ 1318.322852][T25792] team0: Port device team_slave_1 added [ 1318.651177][T25792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.695534][T25792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1318.816059][ T51] Bluetooth: hci0: command tx timeout [ 1318.830905][T25792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.878625][ T59] hsr_slave_0: left promiscuous mode [ 1318.902733][ T59] hsr_slave_1: left promiscuous mode [ 1318.920342][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1318.935964][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.945295][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1318.967369][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1319.059779][ T5934] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1319.077331][ T59] veth1_macvtap: left promiscuous mode [ 1319.083367][ T59] veth0_macvtap: left promiscuous mode [ 1319.091729][ T59] veth1_vlan: left promiscuous mode [ 1319.097495][ T59] veth0_vlan: left promiscuous mode [ 1319.219999][ T5934] usb 8-1: Using ep0 maxpacket: 8 [ 1319.233974][ T5934] usb 8-1: config 1 has an invalid descriptor of length 23, skipping remainder of the config [ 1319.248067][ T5934] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 576 [ 1319.345283][ T5934] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1319.371014][ T5934] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1319.404265][ T5934] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.435276][ T5934] usb 8-1: Product: syz [ 1319.461060][ T5934] usb 8-1: Manufacturer: syz [ 1319.474541][ T5934] usb 8-1: SerialNumber: syz [ 1319.514214][T25958] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1319.558904][ T5934] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 1319.570182][ T59] pimreg3 (unregistering): left allmulticast mode [ 1319.605605][ T5934] usbtest 8-1:1.0: couldn't get endpoints, -22 [ 1319.681905][ T5934] usbtest 8-1:1.0: probe with driver usbtest failed with error -22 [ 1320.779773][T25983] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6639'. [ 1320.797242][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1320.858779][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1321.501487][T25792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1321.508859][T25792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1321.535789][T25792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1321.750245][T20087] usb 8-1: USB disconnect, device number 10 [ 1321.777816][T25792] hsr_slave_0: entered promiscuous mode [ 1321.794918][T25792] hsr_slave_1: entered promiscuous mode [ 1321.812578][T25792] debugfs: 'hsr0' already exists in 'hsr' [ 1321.824574][T25792] Cannot create hsr debugfs directory [ 1323.006377][ T59] IPVS: stop unused estimator thread 0... [ 1323.376885][T26025] netlink: 33 bytes leftover after parsing attributes in process `syz.7.6651'. [ 1324.246111][T20087] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1324.447345][T20087] usb 4-1: Using ep0 maxpacket: 8 [ 1324.493189][T20087] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1324.558641][T20087] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 42761, setting to 1024 [ 1324.600457][T26054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6662'. [ 1324.607486][T20087] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1324.649011][T20087] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1324.675940][T20087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.692718][T20087] usb 4-1: Product: syz [ 1324.708928][T20087] usb 4-1: Manufacturer: syz [ 1324.713588][T20087] usb 4-1: SerialNumber: syz [ 1324.779096][T26042] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1324.787532][T26042] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1324.801823][T20087] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1324.829206][T20087] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 1324.865699][T25792] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1324.893663][T20087] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 1324.932662][T25792] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1324.984947][T25792] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1325.105241][T25792] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1325.949010][T25792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1326.024944][T25792] 8021q: adding VLAN 0 to HW filter on device team0 [ 1326.233563][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.240745][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1326.451765][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.459090][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.110391][T25792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1327.304850][T25792] veth0_vlan: entered promiscuous mode [ 1327.366474][ T43] usb 4-1: USB disconnect, device number 34 [ 1327.422831][T26113] vlan2: entered allmulticast mode [ 1327.447424][T26113] bond0: entered allmulticast mode [ 1327.473263][T26113] bond_slave_0: entered allmulticast mode [ 1327.489434][T26113] bond_slave_1: entered allmulticast mode [ 1327.517715][T26113] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1327.583631][T25792] veth1_vlan: entered promiscuous mode [ 1327.773137][T25792] veth0_macvtap: entered promiscuous mode [ 1327.834828][T25792] veth1_macvtap: entered promiscuous mode [ 1327.938937][T25792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1328.002044][T25792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1328.072598][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.118422][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.178435][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.268122][T12179] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.507617][T16322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1328.536885][T16322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1328.661168][T25248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1328.686809][T25248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.842852][T26193] raw_sendmsg: syz.5.6694 forgot to set AF_INET. Fix it! [ 1331.989557][T26232] netlink: 33 bytes leftover after parsing attributes in process `syz.3.6707'. [ 1333.694626][T26271] netlink: 'syz.6.6715': attribute type 21 has an invalid length. [ 1334.847009][T26316] netlink: 'syz.7.6730': attribute type 21 has an invalid length. [ 1338.346776][T26406] netlink: 'syz.3.6753': attribute type 21 has an invalid length. [ 1339.547435][T26437] netlink: 'syz.3.6764': attribute type 21 has an invalid length. [ 1341.917308][T26488] netlink: 'syz.3.6778': attribute type 21 has an invalid length. [ 1342.220245][T26497] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6782'. [ 1342.240043][T26498] netlink: 'syz.3.6784': attribute type 3 has an invalid length. [ 1342.473963][T26508] netlink: 33 bytes leftover after parsing attributes in process `syz.3.6787'. [ 1342.512112][T14066] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1342.676121][T14066] usb 7-1: Using ep0 maxpacket: 32 [ 1342.691931][T14066] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.730183][T14066] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.781550][T14066] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1342.807373][T14066] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.827558][T14066] usb 7-1: config 0 descriptor?? [ 1342.920003][T26529] netlink: 'syz.5.6798': attribute type 3 has an invalid length. [ 1343.289589][T14066] ft260 0003:0403:6030.003A: unknown main item tag 0x7 [ 1343.615716][T14066] ft260 0003:0403:6030.003A: chip code: 6424 8183 [ 1343.868922][T14066] ft260 0003:0403:6030.003A: failed to retrieve system status [ 1343.883622][T14066] ft260 0003:0403:6030.003A: probe with driver ft260 failed with error -5 [ 1344.480349][T26577] loop7: detected capacity change from 0 to 8 [ 1345.127463][T26577] Dev loop7: unable to read RDB block 8 [ 1345.147565][T26577] loop7: unable to read partition table [ 1345.180154][T26577] loop7: partition table beyond EOD, truncated [ 1345.186995][T26577] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CÿjmámÛÀ¿Ã½?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1345.250768][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 1345.260711][ C0] buffer_io_error: 8 callbacks suppressed [ 1345.260723][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1345.849631][ T5934] usb 7-1: USB disconnect, device number 25 [ 1346.134274][T26613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6825'. [ 1347.516446][ T5934] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1347.686834][ T5934] usb 6-1: Using ep0 maxpacket: 32 [ 1347.694577][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.718825][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1347.820573][ T5934] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1347.875920][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.916497][ T5934] usb 6-1: config 0 descriptor?? [ 1348.085169][T26660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6842'. [ 1348.384240][ T5934] ft260 0003:0403:6030.003B: unknown main item tag 0x7 [ 1348.516969][T26668] netlink: 'syz.3.6846': attribute type 21 has an invalid length. [ 1348.524861][T26668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6846'. [ 1348.575382][ T5934] ft260 0003:0403:6030.003B: chip code: 6424 8183 [ 1348.779080][ T5934] ft260 0003:0403:6030.003B: failed to retrieve system status [ 1348.793057][ T5934] ft260 0003:0403:6030.003B: probe with driver ft260 failed with error -5 [ 1349.065716][T26689] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6856'. [ 1349.232158][T26697] netlink: 'syz.4.6859': attribute type 21 has an invalid length. [ 1349.241874][T26697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6859'. [ 1349.992960][T26730] trusted_key: syz.6.6866 sent an empty control message without MSG_MORE. [ 1350.004142][T26731] netlink: 'syz.3.6867': attribute type 16 has an invalid length. [ 1350.012873][T26731] netlink: 'syz.3.6867': attribute type 17 has an invalid length. [ 1350.084432][T26731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1350.573310][T26728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.688803][T26728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.773082][ T5964] usb 6-1: USB disconnect, device number 23 [ 1351.122943][T26745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6870'. [ 1351.316818][T26748] netlink: 'syz.5.6871': attribute type 21 has an invalid length. [ 1351.355315][T26748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6871'. [ 1352.154633][T26782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6883'. [ 1352.191260][ T5964] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1352.399447][ T5964] usb 7-1: Using ep0 maxpacket: 32 [ 1352.466283][ T5964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.916008][ T5964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1352.927091][ T5964] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1352.941705][ T5964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.953133][ T5964] usb 7-1: config 0 descriptor?? [ 1353.490143][ T5964] ft260 0003:0403:6030.003C: unknown main item tag 0x7 [ 1353.678613][ T5964] ft260 0003:0403:6030.003C: chip code: 6424 8183 [ 1353.881536][ T5964] ft260 0003:0403:6030.003C: failed to retrieve system status [ 1353.893650][ T5964] ft260 0003:0403:6030.003C: probe with driver ft260 failed with error -5 [ 1354.790590][T26839] netlink: 33 bytes leftover after parsing attributes in process `syz.5.6894'. [ 1355.007763][T26850] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6895'. [ 1355.254862][T26853] netlink: 184 bytes leftover after parsing attributes in process `syz.5.6898'. [ 1355.282563][T26853] netlink: 184 bytes leftover after parsing attributes in process `syz.5.6898'. [ 1355.303289][T26853] netlink: 184 bytes leftover after parsing attributes in process `syz.5.6898'. [ 1355.832746][T14066] usb 7-1: USB disconnect, device number 26 [ 1356.337076][T26879] netlink: 33 bytes leftover after parsing attributes in process `syz.7.6906'. [ 1356.879970][T26893] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6911'. [ 1357.566089][ T43] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1357.578485][T26922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6915'. [ 1357.686461][T26926] netlink: 33 bytes leftover after parsing attributes in process `syz.4.6919'. [ 1357.769182][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 1357.787414][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1357.813922][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1357.826183][ T43] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1357.837448][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.852066][ T43] usb 7-1: config 0 descriptor?? [ 1358.289700][ T43] ft260 0003:0403:6030.003D: unknown main item tag 0x7 [ 1358.486308][ T43] ft260 0003:0403:6030.003D: chip code: 6424 8183 [ 1358.688258][ T43] ft260 0003:0403:6030.003D: failed to retrieve system status [ 1358.706488][ T43] ft260 0003:0403:6030.003D: probe with driver ft260 failed with error -5 [ 1360.768616][ T5964] usb 7-1: USB disconnect, device number 27 [ 1361.679179][T27025] netlink: 33 bytes leftover after parsing attributes in process `syz.4.6948'. [ 1362.033354][T27033] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6951'. [ 1362.226554][ T5964] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1362.386564][ T5964] usb 6-1: Using ep0 maxpacket: 32 [ 1362.394213][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1362.406058][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.436909][ T5964] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1362.457226][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.490290][ T5964] usb 6-1: config 0 descriptor?? [ 1362.924473][ T5964] ft260 0003:0403:6030.003E: unknown main item tag 0x7 [ 1363.118122][ T5964] ft260 0003:0403:6030.003E: chip code: 6424 8183 [ 1363.322678][ T5964] ft260 0003:0403:6030.003E: failed to retrieve system status [ 1363.338615][ T5964] ft260 0003:0403:6030.003E: probe with driver ft260 failed with error -5 [ 1363.382191][T27061] netlink: 33 bytes leftover after parsing attributes in process `syz.7.6963'. [ 1364.651025][T27089] netlink: 33 bytes leftover after parsing attributes in process `syz.6.6974'. [ 1364.742283][T27091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1365.333195][ T5934] usb 6-1: USB disconnect, device number 24 [ 1366.886102][ T43] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1367.036022][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 1367.044955][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1367.057983][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1367.069396][ T43] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1367.087466][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.107200][ T43] usb 7-1: config 0 descriptor?? [ 1367.551831][ T43] ft260 0003:0403:6030.003F: unknown main item tag 0x7 [ 1367.821491][ T43] ft260 0003:0403:6030.003F: chip code: 6424 8183 [ 1368.023781][ T43] ft260 0003:0403:6030.003F: failed to retrieve system status [ 1368.076758][ T43] ft260 0003:0403:6030.003F: probe with driver ft260 failed with error -5 [ 1368.302878][T27204] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7018'. [ 1368.821098][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1368.827712][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.922290][T27230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7030'. [ 1369.004612][T27230] netlink: 'syz.5.7030': attribute type 3 has an invalid length. [ 1370.105089][ T43] usb 7-1: USB disconnect, device number 28 [ 1370.933302][T27271] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7041'. [ 1372.596237][T27301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7055'. [ 1372.921670][T27311] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1373.312391][T27318] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7060'. [ 1373.587537][T13415] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1373.603367][T13415] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1373.614102][T13415] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1373.624757][T13415] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1373.634314][T13415] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1374.183134][T27323] chnl_net:caif_netlink_parms(): no params data found [ 1374.415345][T27323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.448005][T27323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.470161][T27323] bridge_slave_0: entered allmulticast mode [ 1374.488738][T27323] bridge_slave_0: entered promiscuous mode [ 1374.510191][T27323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.524338][T27323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.541328][T27323] bridge_slave_1: entered allmulticast mode [ 1374.560397][T27323] bridge_slave_1: entered promiscuous mode [ 1374.784332][T27323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1374.835775][T27323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1374.983642][T27323] team0: Port device team_slave_0 added [ 1375.002637][T27323] team0: Port device team_slave_1 added [ 1375.134426][T27323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.142009][T27323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1375.168575][T27323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1375.200581][T27323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.215730][T27323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1375.248691][T27375] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7080'. [ 1375.263731][T27323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1375.381101][T27323] hsr_slave_0: entered promiscuous mode [ 1375.393708][T27323] hsr_slave_1: entered promiscuous mode [ 1375.404618][T27323] debugfs: 'hsr0' already exists in 'hsr' [ 1375.414762][T27323] Cannot create hsr debugfs directory [ 1375.644613][T27323] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.697293][T13415] Bluetooth: hci3: command tx timeout [ 1375.733824][T27323] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.812456][T27323] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.930279][T27323] bond0: (slave netdevsim0): Releasing backup interface [ 1375.990112][T27323] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.425468][T27323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1376.467901][T27323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1376.532361][T27323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1376.606657][T27323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1376.645564][T27401] netlink: 33 bytes leftover after parsing attributes in process `syz.6.7093'. [ 1376.819142][T27415] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7095'. [ 1377.024881][T27323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1377.071476][T27323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1377.104490][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.111727][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1377.161575][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.168902][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1377.204158][T27422] sctp: [Deprecated]: syz.6.7098 (pid 27422) Use of int in max_burst socket option deprecated. [ 1377.204158][T27422] Use struct sctp_assoc_value instead [ 1377.318719][T27323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1377.441902][T27323] veth0_vlan: entered promiscuous mode [ 1377.482101][T27323] veth1_vlan: entered promiscuous mode [ 1377.552601][T27323] veth0_macvtap: entered promiscuous mode [ 1377.622934][T27323] veth1_macvtap: entered promiscuous mode [ 1377.758438][T27323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1377.776842][T13415] Bluetooth: hci3: command tx timeout [ 1377.795270][T27323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1377.815619][T16257] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.865357][T16322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.905633][T16322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.960633][T16322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.182710][T27443] netlink: 33 bytes leftover after parsing attributes in process `syz.7.7106'. [ 1378.354059][T16257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.401609][T16257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.480183][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.522233][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.604332][T27480] netlink: 33 bytes leftover after parsing attributes in process `syz.6.7119'. [ 1379.946345][T13415] Bluetooth: hci3: command tx timeout [ 1380.552795][T27498] sctp: [Deprecated]: syz.6.7127 (pid 27498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1380.552795][T27498] Use struct sctp_sack_info instead [ 1381.022332][T27512] netlink: 33 bytes leftover after parsing attributes in process `syz.6.7132'. [ 1381.102670][T27513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.110570][T27513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.235775][T27513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1381.270095][T27513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1381.691622][T16257] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.727767][ T30] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.747962][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.794879][ T59] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.018249][T13415] Bluetooth: hci3: command tx timeout [ 1384.223285][T27584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7160'. [ 1385.346103][ T5934] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1385.515991][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 1385.528417][T27614] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7173'. [ 1385.535115][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.593702][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1385.630752][ T5934] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1385.673377][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.727209][ T5934] usb 5-1: config 0 descriptor?? [ 1386.177687][ T5934] ft260 0003:0403:6030.0040: unknown main item tag 0x7 [ 1386.368035][ T5934] ft260 0003:0403:6030.0040: chip code: 6424 8183 [ 1386.409164][T27639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7184'. [ 1386.568759][ T5934] ft260 0003:0403:6030.0040: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 1386.721916][T27649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.729856][T27649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.769524][ T5934] ft260 0003:0403:6030.0040: failed to retrieve status: -32, no wakeup [ 1386.782638][ T5934] ft260 0003:0403:6030.0040: failed to retrieve status: -32 [ 1386.889382][T27649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1386.924259][T27649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1387.266590][T12179] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.285911][T12179] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.299999][T12179] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.330136][T12179] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.606805][T27667] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7197'. [ 1387.862391][T27681] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7203'. [ 1388.247550][ T5934] ft260 0003:0403:6030.0040: failed to reset I2C controller: -71 [ 1388.627867][ T5934] usb 5-1: USB disconnect, device number 50 [ 1388.720539][T27693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7206'. [ 1388.827364][T27693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7206'. [ 1390.683606][T27738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.691435][T27738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.063456][T27738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1391.113039][T27738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1391.448922][ T59] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.510084][ T59] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.152369][ T30] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.183306][ T30] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.323915][T27806] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7243'. [ 1396.093648][T27843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7259'. [ 1397.690276][T27877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7272'. [ 1399.467934][T27911] netlink: 'syz.7.7293': attribute type 1 has an invalid length. [ 1399.539535][T27911] bond1: (slave gretap1): making interface the new active one [ 1399.747214][T27911] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1399.774412][T27919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7284'. [ 1401.320351][T27944] bridge_slave_1: left allmulticast mode [ 1401.333432][T27944] bridge_slave_1: left promiscuous mode [ 1401.339669][T27944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.410984][T27944] bridge_slave_0: left allmulticast mode [ 1401.436217][T27944] bridge_slave_0: left promiscuous mode [ 1401.453037][T27944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.471503][T27948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7297'. [ 1401.540577][T27955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7299'. [ 1403.419525][T27988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7310'. [ 1403.437202][T27989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7309'. [ 1403.635666][T27992] pimreg: tun_chr_ioctl cmd 2148553947 [ 1403.664006][T27992] pimreg: tun_chr_ioctl cmd 1074025680 [ 1403.857653][T28006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7318'. [ 1404.645474][ T59] bridge_slave_1: left allmulticast mode [ 1404.674245][ T59] bridge_slave_1: left promiscuous mode [ 1404.684069][T28026] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7324'. [ 1404.698794][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.751119][T28028] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7326'. [ 1404.787053][T28028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7326'. [ 1404.850951][ T59] bridge_slave_0: left allmulticast mode [ 1404.894602][ T59] bridge_slave_0: left promiscuous mode [ 1404.948074][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.728936][T28065] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7341'. [ 1405.779983][T28065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7341'. [ 1405.979087][ T59] dvmrp0 (unregistering): left allmulticast mode [ 1406.748940][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1406.797701][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1406.868173][ T59] bond0 (unregistering): Released all slaves [ 1407.111198][T28098] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7354'. [ 1407.274636][T28098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7354'. [ 1407.366253][ T59] tipc: Disabling bearer [ 1407.386428][ T59] tipc: Left network mode [ 1408.264337][T28134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7368'. [ 1408.285140][T28134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7368'. [ 1408.312248][T28134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7368'. [ 1409.026321][ T5964] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1409.236152][ T5964] usb 6-1: Using ep0 maxpacket: 8 [ 1409.381798][ T5964] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1409.392777][ T5964] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1409.413695][ T5964] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1409.453007][ T5964] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1409.525602][T28161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7378'. [ 1409.595990][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.630684][ T5964] usb 6-1: Product: syz [ 1409.634988][ T5964] usb 6-1: Manufacturer: syz [ 1409.656486][ T5964] usb 6-1: SerialNumber: syz [ 1409.671005][ T59] hsr_slave_0: left promiscuous mode [ 1409.742404][T28145] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1409.756609][ T59] hsr_slave_1: left promiscuous mode [ 1410.197455][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1410.330818][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.351461][ T5964] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1410.400728][ T5964] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 1410.415002][ T5964] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 1410.621724][ T59] batadv0: left promiscuous mode [ 1410.636697][ T59] veth1_macvtap: left promiscuous mode [ 1410.666563][ T59] veth0_macvtap: left promiscuous mode [ 1410.672274][ T59] veth1_vlan: left promiscuous mode [ 1410.701605][ T59] veth0_vlan: left promiscuous mode [ 1411.003435][T28175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7382'. [ 1411.024864][T28175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7382'. [ 1411.044851][T28175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7382'. [ 1411.506453][T28177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7383'. [ 1411.788392][ T5964] usb 6-1: USB disconnect, device number 25 [ 1411.940041][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1413.038763][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1413.198370][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1413.520928][T28214] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7396'. [ 1414.194688][ T5964] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1414.441937][ T5964] usb 8-1: Using ep0 maxpacket: 8 [ 1414.512800][ T5964] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1414.523775][ T5964] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1414.550031][ T5964] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1414.619740][ T5964] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1414.650714][ T5964] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.710385][ T5964] usb 8-1: Product: syz [ 1414.731568][ T5964] usb 8-1: Manufacturer: syz [ 1414.743876][ T5964] usb 8-1: SerialNumber: syz [ 1414.842546][T28221] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1414.861871][ T5964] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 1414.872287][ T5964] usbtest 8-1:1.0: couldn't get endpoints, -22 [ 1414.880789][ T5964] usbtest 8-1:1.0: probe with driver usbtest failed with error -22 [ 1415.158238][T28230] sctp: [Deprecated]: syz.6.7402 (pid 28230) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1415.158238][T28230] Use struct sctp_sack_info instead [ 1416.087567][ T31] audit: type=1326 audit(1754082553.241:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28241 comm="syz.5.7407" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f66539 code=0x0 [ 1416.504474][T28251] kvm_intel: kvm [28250]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x7 [ 1416.623283][ T59] IPVS: stop unused estimator thread 0... [ 1417.078130][ T5964] usb 8-1: USB disconnect, device number 11 [ 1418.797403][ T5933] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1419.095959][ T5933] usb 6-1: Using ep0 maxpacket: 8 [ 1419.137246][ T5933] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1419.715868][ T5933] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1419.779412][ T5933] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1419.845135][ T5933] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1419.856045][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.896989][ T5933] usb 6-1: Product: syz [ 1419.905959][ T5933] usb 6-1: Manufacturer: syz [ 1419.922723][ T5933] usb 6-1: SerialNumber: syz [ 1419.968076][T28302] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1419.980685][ T5933] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1420.020259][ T5933] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 1420.058454][ T5933] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 1420.359648][T28328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7437'. [ 1421.689237][ T5964] usb 6-1: USB disconnect, device number 26 [ 1421.923219][T28367] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 1423.105964][ T31] audit: type=1326 audit(1754082560.261:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.6.7451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1423.149536][ T31] audit: type=1326 audit(1754082560.261:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.6.7451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1423.204884][T28383] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7453'. [ 1423.228722][ T31] audit: type=1326 audit(1754082560.261:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.6.7451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1423.257258][ T31] audit: type=1326 audit(1754082560.261:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.6.7451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1423.295076][ T31] audit: type=1326 audit(1754082560.261:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.6.7451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1423.318200][ T31] audit: type=1326 audit(1754082560.261:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.6.7451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1423.342354][ T31] audit: type=1326 audit(1754082560.261:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.6.7451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1423.365977][ T31] audit: type=1326 audit(1754082560.261:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.6.7451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1423.390781][ T31] audit: type=1326 audit(1754082560.261:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.6.7451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=106 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1423.431779][ T31] audit: type=1326 audit(1754082560.261:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.6.7451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1424.516201][ T5933] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1424.764248][ T5933] usb 7-1: Using ep0 maxpacket: 8 [ 1425.051051][ T5933] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1425.103649][ T5933] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1425.171098][ T5933] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1425.260127][ T5933] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1425.274283][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.428210][ T5933] usb 7-1: Product: syz [ 1425.432440][ T5933] usb 7-1: Manufacturer: syz [ 1425.471199][ T5933] usb 7-1: SerialNumber: syz [ 1425.613437][T28394] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1425.641448][ T5933] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1425.673256][ T5933] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 1425.748005][ T5933] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 1427.543282][ T5933] usb 7-1: USB disconnect, device number 29 [ 1427.702819][T28423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7468'. [ 1428.276790][T28440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7477'. [ 1429.316033][ T5933] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1429.505934][ T5933] usb 7-1: Using ep0 maxpacket: 8 [ 1429.513845][ T5933] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1429.554898][ T5933] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1429.612407][ T5933] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1429.669711][ T5933] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1429.685942][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.738903][ T5933] usb 7-1: Product: syz [ 1429.755237][ T5933] usb 7-1: Manufacturer: syz [ 1429.765357][ T5933] usb 7-1: SerialNumber: syz [ 1429.910150][T28462] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1429.920700][ T5933] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1429.945281][ T5933] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 1429.971313][ T5933] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 1430.262106][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1430.286114][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1432.239590][ T5964] usb 7-1: USB disconnect, device number 30 [ 1434.297480][ T5933] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1434.490130][ T5933] usb 6-1: Using ep0 maxpacket: 8 [ 1435.066644][ T5933] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1435.081471][ T5933] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1435.098369][ T5933] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1435.179659][ T5933] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1435.190017][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.200768][ T5933] usb 6-1: Product: syz [ 1435.204958][ T5933] usb 6-1: Manufacturer: syz [ 1435.241924][ T5933] usb 6-1: SerialNumber: syz [ 1435.294831][T28558] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1435.309076][ T5933] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1435.337047][ T5933] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 1435.364189][ T5933] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 1436.141959][T28575] sctp: [Deprecated]: syz.4.7521 (pid 28575) Use of int in max_burst socket option. [ 1436.141959][T28575] Use struct sctp_assoc_value instead [ 1436.966264][ T5964] usb 6-1: USB disconnect, device number 27 [ 1437.499092][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1444.737639][T28761] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7595'. [ 1445.972979][T28793] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7608'. [ 1447.243707][T28823] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7619'. [ 1447.602774][T28835] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1448.328196][T28859] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7632'. [ 1449.934824][T27617] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1450.096359][T27617] usb 8-1: Using ep0 maxpacket: 32 [ 1450.104400][T27617] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1450.119623][T27617] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1450.169084][T27617] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1450.194503][T27617] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.232983][T27617] usb 8-1: config 0 descriptor?? [ 1450.679671][T27617] ft260 0003:0403:6030.0041: unknown main item tag 0x7 [ 1450.865361][T27617] ft260 0003:0403:6030.0041: chip code: 6424 8183 [ 1451.073237][T27617] ft260 0003:0403:6030.0041: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 1451.274089][T27617] ft260 0003:0403:6030.0041: failed to retrieve status: -32, no wakeup [ 1451.945979][T27617] usb 8-1: reset high-speed USB device number 12 using dummy_hcd [ 1453.319854][T28942] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7663'. [ 1453.343542][ T5933] usb 8-1: USB disconnect, device number 12 [ 1454.184837][ T5964] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1454.349442][ T5964] usb 5-1: Using ep0 maxpacket: 32 [ 1454.359939][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1454.461066][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1454.484530][ T5964] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1454.514676][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.540811][ T5964] usb 5-1: config 0 descriptor?? [ 1454.996903][T28977] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7676'. [ 1454.998765][ T5964] ft260 0003:0403:6030.0042: unknown main item tag 0x7 [ 1455.191098][ T5964] ft260 0003:0403:6030.0042: chip code: 6424 8183 [ 1455.388238][ T5964] ft260 0003:0403:6030.0042: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 1455.589028][ T5964] ft260 0003:0403:6030.0042: failed to retrieve status: -32, no wakeup [ 1456.171387][T29013] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3095185786 (6190371572 ns) > initial count (5484635560 ns). Using initial count to start timer. [ 1456.257192][ T5964] usb 5-1: reset high-speed USB device number 51 using dummy_hcd [ 1456.592566][T29032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7698'. [ 1456.604821][T29032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7698'. [ 1456.645964][T29032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7698'. [ 1456.778010][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 1456.778067][ T31] audit: type=1326 audit(1754082593.941:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.7702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1456.824073][ T31] audit: type=1326 audit(1754082593.941:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.7702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1456.873841][ T31] audit: type=1326 audit(1754082593.971:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.7702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1456.953002][ T31] audit: type=1326 audit(1754082593.971:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.7702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1456.986010][ T31] audit: type=1326 audit(1754082593.971:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.7702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1457.035584][ T31] audit: type=1326 audit(1754082593.971:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.7702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1457.070862][ T31] audit: type=1326 audit(1754082593.971:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.7702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1457.106111][ T31] audit: type=1326 audit(1754082593.971:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.7702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1457.193189][ T31] audit: type=1326 audit(1754082593.971:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.7702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1457.228008][ T31] audit: type=1326 audit(1754082593.971:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.3.7702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1457.298472][T29060] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1457.610143][T29067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7712'. [ 1457.648692][T29067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7712'. [ 1457.670251][T20087] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1457.707961][T14066] usb 5-1: USB disconnect, device number 51 [ 1458.205935][T20087] usb 8-1: device descriptor read/64, error -71 [ 1458.456372][T20087] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1458.614197][T20087] usb 8-1: device descriptor read/64, error -71 [ 1458.647893][ T5933] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1458.788212][T20087] usb usb8-port1: attempt power cycle [ 1458.826039][ T5933] usb 4-1: Using ep0 maxpacket: 32 [ 1458.833767][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.862501][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.908156][ T5933] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1458.935545][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.965713][ T5933] usb 4-1: config 0 descriptor?? [ 1459.146229][T20087] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1459.216599][T20087] usb 8-1: device descriptor read/8, error -71 [ 1459.395099][ T5933] ft260 0003:0403:6030.0043: unknown main item tag 0x7 [ 1459.476078][T20087] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1459.517451][T20087] usb 8-1: device descriptor read/8, error -71 [ 1459.615605][ T5933] ft260 0003:0403:6030.0043: chip code: 6424 8183 [ 1459.635208][T20087] usb usb8-port1: unable to enumerate USB device [ 1459.823539][ T5933] ft260 0003:0403:6030.0043: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1460.035268][ T5933] ft260 0003:0403:6030.0043: failed to retrieve status: -32, no wakeup [ 1460.519328][T29127] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7737'. [ 1460.567694][T29127] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7737'. [ 1460.727440][ T5933] usb 4-1: reset high-speed USB device number 35 using dummy_hcd [ 1461.426073][T27617] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1461.490220][T29160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7750'. [ 1461.514582][T29160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7750'. [ 1461.576056][T27617] usb 5-1: device descriptor read/64, error -71 [ 1461.847454][T27617] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1461.996089][T27617] usb 5-1: device descriptor read/64, error -71 [ 1462.106176][T27617] usb usb5-port1: attempt power cycle [ 1462.227837][ T5934] usb 4-1: USB disconnect, device number 35 [ 1462.349358][T29173] trusted_key: encrypted_key: insufficient parameters specified [ 1462.456090][T27617] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1462.504308][T27617] usb 5-1: device descriptor read/8, error -71 [ 1462.764634][T29188] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7762'. [ 1462.816516][T29188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7762'. [ 1462.835964][T27617] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1462.879066][T27617] usb 5-1: device descriptor read/8, error -71 [ 1462.996247][T27617] usb usb5-port1: unable to enumerate USB device [ 1463.015899][T14066] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1463.165924][T14066] usb 4-1: Using ep0 maxpacket: 32 [ 1463.188551][T14066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1463.230222][T14066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1463.286219][T14066] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1463.297727][T14066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.344936][T14066] usb 4-1: config 0 descriptor?? [ 1463.773738][T14066] ft260 0003:0403:6030.0044: unknown main item tag 0x7 [ 1463.975018][T14066] ft260 0003:0403:6030.0044: chip code: 6424 8183 [ 1464.127253][T29214] trusted_key: encrypted_key: insufficient parameters specified [ 1464.251186][T14066] ft260 0003:0403:6030.0044: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1464.452144][T14066] ft260 0003:0403:6030.0044: failed to retrieve status: -32, no wakeup [ 1464.496008][T29218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7774'. [ 1464.546039][T29218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7774'. [ 1465.106091][T14066] usb 4-1: reset high-speed USB device number 36 using dummy_hcd [ 1466.210700][T29251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7787'. [ 1466.657790][T20087] usb 4-1: USB disconnect, device number 36 [ 1467.141692][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1467.157996][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1467.167904][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1467.182149][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1467.195498][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1467.427235][T14066] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1467.666131][T14066] usb 4-1: Using ep0 maxpacket: 32 [ 1467.677756][T14066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1467.715654][T14066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.736598][T14066] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1467.761179][T16322] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.778580][T14066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.812147][T14066] usb 4-1: config 0 descriptor?? [ 1467.958001][T16322] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.254414][T16322] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.329560][T14066] ft260 0003:0403:6030.0045: unknown main item tag 0x7 [ 1468.350334][T16322] bond0: (slave netdevsim0): Releasing backup interface [ 1468.360377][T16322] netdevsim netdevsim7 netdevsim0 (unregistering): left allmulticast mode [ 1468.379236][T16322] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.513358][T14066] ft260 0003:0403:6030.0045: chip code: 6424 8183 [ 1468.699883][T29280] chnl_net:caif_netlink_parms(): no params data found [ 1468.716043][T14066] ft260 0003:0403:6030.0045: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1468.771783][T29312] team0: Device ip6gretap1 is up. Set it down before adding it as a team port [ 1468.843200][T29316] netlink: 'syz.6.7812': attribute type 4 has an invalid length. [ 1468.916129][T14066] ft260 0003:0403:6030.0045: failed to retrieve status: -32, no wakeup [ 1469.305975][T13415] Bluetooth: hci4: command tx timeout [ 1469.543552][T29334] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7817'. [ 1469.588700][T14066] usb 4-1: reset high-speed USB device number 37 using dummy_hcd [ 1469.634248][T29280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.642968][T29280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.650973][T29280] bridge_slave_0: entered allmulticast mode [ 1469.673548][T29280] bridge_slave_0: entered promiscuous mode [ 1469.817540][T16322] bridge_slave_1: left allmulticast mode [ 1469.823316][T16322] bridge_slave_1: left promiscuous mode [ 1469.830481][T16322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.869525][T16322] bridge_slave_0: left allmulticast mode [ 1469.887723][T16322] bridge_slave_0: left promiscuous mode [ 1469.902041][T16322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.396434][T16322] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1470.522655][T29347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7823'. [ 1470.754272][T16322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1470.764194][T16322] bond_slave_0: left allmulticast mode [ 1470.772816][T16322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1470.782077][T16322] bond_slave_1: left allmulticast mode [ 1470.792635][T16322] bond0 (unregistering): Released all slaves [ 1470.813753][T16322] bond1 (unregistering): Released all slaves [ 1470.831221][T29280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.842549][T29280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.850758][T29280] bridge_slave_1: entered allmulticast mode [ 1470.882173][T29280] bridge_slave_1: entered promiscuous mode [ 1471.006879][ T5964] usb 4-1: USB disconnect, device number 37 [ 1471.033159][T16322] tipc: Disabling bearer [ 1471.056751][T16322] tipc: Left network mode [ 1471.192578][T29280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1471.219547][T29280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.376232][T13415] Bluetooth: hci4: command tx timeout [ 1471.516279][ T5933] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1471.529611][T29280] team0: Port device team_slave_0 added [ 1471.578673][T29280] team0: Port device team_slave_1 added [ 1471.689351][ T5933] usb 6-1: Using ep0 maxpacket: 32 [ 1471.722315][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1471.749171][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1471.763345][ T5933] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1471.772900][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.799011][ T5933] usb 6-1: config 0 descriptor?? [ 1471.953963][T29280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1471.992940][T29280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.092004][T29280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1472.145169][T29280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1472.167148][T29280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.218479][ T5933] ft260 0003:0403:6030.0046: unknown main item tag 0x7 [ 1472.250163][T29280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1472.761632][ T5933] ft260 0003:0403:6030.0046: chip code: 6424 8183 [ 1472.778667][ T5933] ft260 0003:0403:6030.0046: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 1472.986258][ T5933] ft260 0003:0403:6030.0046: failed to retrieve status: -32, no wakeup [ 1473.149769][T16322] hsr_slave_0: left promiscuous mode [ 1473.169681][T16322] hsr_slave_1: left promiscuous mode [ 1473.196045][T16322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1473.232830][T16322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.275973][T16322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1473.295269][T16322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1473.362801][T16322] veth1_macvtap: left promiscuous mode [ 1473.369198][T16322] veth0_macvtap: left promiscuous mode [ 1473.374933][T16322] veth1_vlan: left promiscuous mode [ 1473.390163][T16322] veth0_vlan: left promiscuous mode [ 1473.456311][T13415] Bluetooth: hci4: command tx timeout [ 1473.517909][ T5933] usb 6-1: reset high-speed USB device number 28 using dummy_hcd [ 1474.511202][T16322] team0 (unregistering): Port device team_slave_1 removed [ 1474.587938][T16322] team0 (unregistering): Port device team_slave_0 removed [ 1475.040544][T27617] usb 6-1: USB disconnect, device number 28 [ 1475.405194][T29280] hsr_slave_0: entered promiscuous mode [ 1475.413575][T29280] hsr_slave_1: entered promiscuous mode [ 1475.420294][T29280] debugfs: 'hsr0' already exists in 'hsr' [ 1475.426980][T29280] Cannot create hsr debugfs directory [ 1475.546566][T13415] Bluetooth: hci4: command tx timeout [ 1475.584756][ T5964] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1475.798154][ T5964] usb 6-1: Using ep0 maxpacket: 32 [ 1475.831543][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1475.859217][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1475.888718][ T5964] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1475.925444][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.990603][ T5964] usb 6-1: config 0 descriptor?? [ 1476.977904][ T5964] ft260 0003:0403:6030.0047: unknown main item tag 0x7 [ 1477.057325][ T5964] ft260 0003:0403:6030.0047: chip code: 6424 8183 [ 1477.139033][ T5964] ft260 0003:0403:6030.0047: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 1477.339669][ T5964] ft260 0003:0403:6030.0047: failed to retrieve status: -32, no wakeup [ 1478.189334][T29280] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1478.225175][T29280] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1478.232305][ T5964] usb 6-1: reset high-speed USB device number 29 using dummy_hcd [ 1478.248248][T29280] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1478.265981][T29280] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1478.761156][T29280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1478.892462][T29280] 8021q: adding VLAN 0 to HW filter on device team0 [ 1478.910245][T29543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7886'. [ 1478.964317][T16257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.971560][T16257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1479.002380][T16257] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.009662][T16257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1479.330335][T29280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1479.417683][T14066] usb 6-1: USB disconnect, device number 29 [ 1479.519199][T29280] veth0_vlan: entered promiscuous mode [ 1479.575536][T29280] veth1_vlan: entered promiscuous mode [ 1479.667688][T29280] veth0_macvtap: entered promiscuous mode [ 1479.687314][T29280] veth1_macvtap: entered promiscuous mode [ 1479.791487][T29280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1479.807121][T14066] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1479.922256][T29280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1479.966203][T14066] usb 6-1: Using ep0 maxpacket: 32 [ 1479.980112][T14066] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.001542][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.014489][T14066] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1480.041080][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.062404][T14066] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1480.089574][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.101171][T14066] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.122846][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.145871][T14066] usb 6-1: config 0 descriptor?? [ 1480.419027][T16257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.460085][T16257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.604793][T14066] ft260 0003:0403:6030.0048: unknown main item tag 0x7 [ 1480.641161][T16322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.697484][T16322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.804172][T14066] ft260 0003:0403:6030.0048: chip code: 6424 8183 [ 1481.004974][T14066] ft260 0003:0403:6030.0048: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 1481.206284][T14066] ft260 0003:0403:6030.0048: failed to retrieve status: -32, no wakeup [ 1481.776347][T14066] usb 6-1: reset high-speed USB device number 30 using dummy_hcd [ 1483.539756][ T5964] usb 6-1: USB disconnect, device number 30 [ 1483.896600][T27617] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1483.955961][ T5933] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1484.062414][T29704] batadv_slave_1: entered promiscuous mode [ 1484.075892][T27617] usb 5-1: Using ep0 maxpacket: 8 [ 1484.084120][T27617] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.108638][T29704] lo: entered promiscuous mode [ 1484.114226][T27617] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1484.127866][ T5933] usb 7-1: Using ep0 maxpacket: 32 [ 1484.137835][T29703] lo: left promiscuous mode [ 1484.148665][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1484.152593][T29703] batadv_slave_1: left promiscuous mode [ 1484.172434][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1484.193716][ T5933] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1484.206923][T27617] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1484.216364][T27617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.224403][T27617] usb 5-1: Product: syz [ 1484.240003][T27617] usb 5-1: Manufacturer: syz [ 1484.244706][T27617] usb 5-1: SerialNumber: syz [ 1484.254156][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.284609][T27617] usb 5-1: bad CDC descriptors [ 1484.292736][T27617] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 1484.300102][ T5933] usb 7-1: config 0 descriptor?? [ 1484.330883][T27617] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 1484.760326][ T5933] ft260 0003:0403:6030.0049: unknown main item tag 0x7 [ 1484.959147][ T5933] ft260 0003:0403:6030.0049: chip code: 6424 8183 [ 1485.160025][ T5933] ft260 0003:0403:6030.0049: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 1485.372892][ T5933] ft260 0003:0403:6030.0049: failed to retrieve status: -32, no wakeup [ 1486.006385][ T5933] usb 7-1: reset high-speed USB device number 31 using dummy_hcd [ 1486.842427][T29756] batadv_slave_1: entered promiscuous mode [ 1486.844563][T29755] batadv_slave_1: left promiscuous mode [ 1486.871873][T27617] usb 5-1: USB disconnect, device number 56 [ 1487.778085][ T5934] usb 7-1: USB disconnect, device number 31 [ 1487.895965][ T5964] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1488.076222][ T5964] usb 5-1: Using ep0 maxpacket: 8 [ 1488.109062][ T5964] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.131425][ T5964] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1488.325268][ T5964] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1488.436923][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.528153][ T5964] usb 5-1: Product: syz [ 1488.553880][ T5964] usb 5-1: Manufacturer: syz [ 1488.587526][ T5964] usb 5-1: SerialNumber: syz [ 1488.727574][ T5964] usb 5-1: bad CDC descriptors [ 1488.754680][ T5964] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 1488.794204][ T5964] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 1490.679290][ T43] usb 5-1: USB disconnect, device number 57 [ 1491.173144][T29848] kvm: apic: phys broadcast and lowest prio [ 1491.702754][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1491.709622][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1493.668266][T29926] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8014'. [ 1493.696162][T29928] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8015'. [ 1494.658716][T29966] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8028'. [ 1494.903102][T29969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8029'. [ 1496.120180][T29996] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8041'. [ 1496.240586][T30000] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8042'. [ 1496.745180][T30022] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8054'. [ 1497.179244][T30036] loop7: detected capacity change from 0 to 7 [ 1497.231528][T30040] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8058'. [ 1497.254167][T30036] [ 1497.256584][T30036] ====================================================== [ 1497.263670][T30036] WARNING: possible circular locking dependency detected [ 1497.270855][T30036] 6.16.0-syzkaller-10499-g89748acdf226 #0 Not tainted [ 1497.277721][T30036] ------------------------------------------------------ [ 1497.284790][T30036] syz.3.8060/30036 is trying to acquire lock: [ 1497.290869][T30036] ffff88801b2ffa20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 1497.301293][T30036] [ 1497.301293][T30036] but task is already holding lock: [ 1497.308661][T30036] ffff888142bae2c8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x17f2/0x1d00 [ 1497.318547][T30036] [ 1497.318547][T30036] which lock already depends on the new lock. [ 1497.318547][T30036] [ 1497.328957][T30036] [ 1497.328957][T30036] the existing dependency chain (in reverse order) is: [ 1497.337970][T30036] [ 1497.337970][T30036] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 1497.346659][T30036] lock_acquire+0x120/0x360 [ 1497.351726][T30036] blk_alloc_queue+0x538/0x620 [ 1497.357143][T30036] __blk_mq_alloc_disk+0x15c/0x340 [ 1497.362789][T30036] loop_add+0x411/0xad0 [ 1497.367496][T30036] loop_init+0xd9/0x170 [ 1497.372226][T30036] do_one_initcall+0x233/0x820 [ 1497.377548][T30036] do_initcall_level+0x104/0x190 [ 1497.383037][T30036] do_initcalls+0x59/0xa0 [ 1497.387906][T30036] kernel_init_freeable+0x334/0x4a0 [ 1497.393639][T30036] kernel_init+0x1d/0x1d0 [ 1497.398526][T30036] ret_from_fork+0x3f9/0x770 [ 1497.403665][T30036] ret_from_fork_asm+0x1a/0x30 [ 1497.408969][T30036] [ 1497.408969][T30036] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1497.416195][T30036] lock_acquire+0x120/0x360 [ 1497.421231][T30036] fs_reclaim_acquire+0x72/0x100 [ 1497.426740][T30036] kmem_cache_alloc_noprof+0x44/0x3c0 [ 1497.432636][T30036] __kernfs_iattrs+0xd9/0x320 [ 1497.437844][T30036] kernfs_iop_setattr+0xea/0x3f0 [ 1497.443316][T30036] notify_change+0xb33/0xe40 [ 1497.448476][T30036] do_truncate+0x1a4/0x220 [ 1497.453442][T30036] path_openat+0x306c/0x3830 [ 1497.458567][T30036] do_filp_open+0x1fa/0x410 [ 1497.463596][T30036] do_sys_openat2+0x121/0x1c0 [ 1497.468977][T30036] __x64_sys_openat+0x138/0x170 [ 1497.474355][T30036] do_syscall_64+0xfa/0x3b0 [ 1497.479402][T30036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.485841][T30036] [ 1497.485841][T30036] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1497.494383][T30036] validate_chain+0xb9b/0x2140 [ 1497.499736][T30036] __lock_acquire+0xab9/0xd20 [ 1497.505057][T30036] lock_acquire+0x120/0x360 [ 1497.510105][T30036] down_read+0x46/0x2e0 [ 1497.514798][T30036] kernfs_iop_getattr+0x9e/0x450 [ 1497.520279][T30036] vfs_getattr_nosec+0x2de/0x430 [ 1497.525758][T30036] loop_assign_backing_file+0x222/0x400 [ 1497.531932][T30036] lo_ioctl+0x1860/0x1d00 [ 1497.536793][T30036] lo_compat_ioctl+0x298/0x330 [ 1497.542093][T30036] compat_blkdev_ioctl+0x5ce/0x780 [ 1497.547736][T30036] __ia32_compat_sys_ioctl+0x543/0x840 [ 1497.553736][T30036] __do_fast_syscall_32+0xb6/0x2b0 [ 1497.559379][T30036] do_fast_syscall_32+0x34/0x80 [ 1497.564754][T30036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1497.571609][T30036] [ 1497.571609][T30036] other info that might help us debug this: [ 1497.571609][T30036] [ 1497.581838][T30036] Chain exists of: [ 1497.581838][T30036] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 1497.581838][T30036] [ 1497.596505][T30036] Possible unsafe locking scenario: [ 1497.596505][T30036] [ 1497.603972][T30036] CPU0 CPU1 [ 1497.609352][T30036] ---- ---- [ 1497.614740][T30036] lock(&q->q_usage_counter(io)#24); [ 1497.620281][T30036] lock(fs_reclaim); [ 1497.626802][T30036] lock(&q->q_usage_counter(io)#24); [ 1497.634704][T30036] rlock(&root->kernfs_iattr_rwsem); [ 1497.640193][T30036] [ 1497.640193][T30036] *** DEADLOCK *** [ 1497.640193][T30036] [ 1497.648353][T30036] 3 locks held by syz.3.8060/30036: [ 1497.653649][T30036] #0: ffff888142f4e400 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0xfbf/0x1d00 [ 1497.662830][T30036] #1: ffff888142bae2c8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x17f2/0x1d00 [ 1497.673563][T30036] #2: ffff888142bae300 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: lo_ioctl+0x17f2/0x1d00 [ 1497.684077][T30036] [ 1497.684077][T30036] stack backtrace: [ 1497.690011][T30036] CPU: 0 UID: 0 PID: 30036 Comm: syz.3.8060 Not tainted 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(full) [ 1497.690040][T30036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1497.690059][T30036] Call Trace: [ 1497.690080][T30036] [ 1497.690093][T30036] dump_stack_lvl+0x189/0x250 [ 1497.690126][T30036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1497.690145][T30036] ? __pfx__printk+0x10/0x10 [ 1497.690173][T30036] print_circular_bug+0x2ee/0x310 [ 1497.690193][T30036] check_noncircular+0x134/0x160 [ 1497.690222][T30036] validate_chain+0xb9b/0x2140 [ 1497.690254][T30036] ? tomoyo_path_perm+0x1e3/0x4b0 [ 1497.690292][T30036] __lock_acquire+0xab9/0xd20 [ 1497.690317][T30036] ? kernfs_iop_getattr+0x9e/0x450 [ 1497.690343][T30036] lock_acquire+0x120/0x360 [ 1497.690365][T30036] ? kernfs_iop_getattr+0x9e/0x450 [ 1497.690395][T30036] down_read+0x46/0x2e0 [ 1497.690415][T30036] ? kernfs_iop_getattr+0x9e/0x450 [ 1497.690440][T30036] kernfs_iop_getattr+0x9e/0x450 [ 1497.690467][T30036] vfs_getattr_nosec+0x2de/0x430 [ 1497.690494][T30036] loop_assign_backing_file+0x222/0x400 [ 1497.690520][T30036] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 1497.690541][T30036] ? schedule+0x91/0x360 [ 1497.690570][T30036] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 1497.690607][T30036] lo_ioctl+0x1860/0x1d00 [ 1497.690632][T30036] ? __pfx_lo_ioctl+0x10/0x10 [ 1497.690654][T30036] ? __lock_acquire+0xab9/0xd20 [ 1497.690679][T30036] ? __lock_acquire+0xab9/0xd20 [ 1497.690707][T30036] ? __lock_acquire+0xab9/0xd20 [ 1497.690730][T30036] ? __lock_acquire+0xab9/0xd20 [ 1497.690757][T30036] ? __lock_acquire+0xab9/0xd20 [ 1497.690787][T30036] ? __lock_acquire+0xab9/0xd20 [ 1497.690813][T30036] ? __lock_acquire+0xab9/0xd20 [ 1497.690841][T30036] ? __lock_acquire+0xab9/0xd20 [ 1497.690867][T30036] ? __lock_acquire+0xab9/0xd20 [ 1497.690896][T30036] ? is_bpf_text_address+0x26/0x2b0 [ 1497.690934][T30036] ? is_bpf_text_address+0x292/0x2b0 [ 1497.690955][T30036] ? is_bpf_text_address+0x26/0x2b0 [ 1497.690978][T30036] ? kernel_text_address+0xa5/0xe0 [ 1497.691009][T30036] ? __kernel_text_address+0xd/0x40 [ 1497.691034][T30036] ? unwind_get_return_address+0x4d/0x90 [ 1497.691060][T30036] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1497.691088][T30036] ? arch_stack_walk+0xfc/0x150 [ 1497.691111][T30036] ? stack_trace_save+0x9c/0xe0 [ 1497.691129][T30036] ? stack_depot_save_flags+0x40/0x900 [ 1497.691168][T30036] ? kasan_save_track+0x4f/0x80 [ 1497.691189][T30036] ? kasan_save_track+0x3e/0x80 [ 1497.691206][T30036] ? kasan_save_free_info+0x46/0x50 [ 1497.691231][T30036] ? __kasan_slab_free+0x62/0x70 [ 1497.691254][T30036] ? kfree+0x18e/0x440 [ 1497.691271][T30036] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1497.691291][T30036] ? security_file_ioctl_compat+0xcb/0x2d0 [ 1497.691307][T30036] ? __ia32_compat_sys_ioctl+0x128/0x840 [ 1497.691325][T30036] ? __do_fast_syscall_32+0xb6/0x2b0 [ 1497.691342][T30036] ? do_fast_syscall_32+0x34/0x80 [ 1497.691358][T30036] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1497.691387][T30036] ? __asan_memset+0x22/0x50 [ 1497.691402][T30036] ? blk_get_meta_cap+0x140/0x710 [ 1497.691573][T30036] lo_compat_ioctl+0x298/0x330 [ 1497.691654][T30036] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 1497.691726][T30036] ? kasan_quarantine_put+0xdd/0x220 [ 1497.691792][T30036] ? blkdev_common_ioctl+0xff7/0x2550 [ 1497.691853][T30036] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1497.691888][T30036] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1497.691928][T30036] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1497.692072][T30036] ? do_vfs_ioctl+0xbe8/0x1430 [ 1497.692191][T30036] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1497.692269][T30036] ? __lock_acquire+0xab9/0xd20 [ 1497.692360][T30036] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 1497.692412][T30036] compat_blkdev_ioctl+0x5ce/0x780 [ 1497.692429][T30036] ? __fget_files+0x2a/0x420 [ 1497.692452][T30036] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1497.692469][T30036] ? __fget_files+0x2a/0x420 [ 1497.692492][T30036] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1497.692524][T30036] __ia32_compat_sys_ioctl+0x543/0x840 [ 1497.692544][T30036] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1497.692565][T30036] ? __se_sys_futex_time32+0x360/0x3e0 [ 1497.692628][T30036] ? lockdep_hardirqs_on+0x9c/0x150 [ 1497.692765][T30036] __do_fast_syscall_32+0xb6/0x2b0 [ 1497.692802][T30036] do_fast_syscall_32+0x34/0x80 [ 1497.692819][T30036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1497.692840][T30036] RIP: 0023:0xf7f63539 [ 1497.692921][T30036] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1497.692963][T30036] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1497.692983][T30036] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c06 [ 1497.692996][T30036] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1497.693008][T30036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1497.693021][T30036] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1497.693031][T30036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1497.693048][T30036] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1498.401334][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1498.456779][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1498.466018][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1498.485627][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1498.494870][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1498.525838][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1498.535052][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1498.547160][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1498.556461][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1498.586008][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1498.595305][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1498.895981][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1499.398801][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.433066][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.491076][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.551377][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.662753][ T13] bridge_slave_1: left allmulticast mode [ 1499.671236][ T13] bridge_slave_1: left promiscuous mode [ 1499.677188][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.685723][ T13] bridge_slave_0: left allmulticast mode [ 1499.693589][ T13] bridge_slave_0: left promiscuous mode [ 1499.699390][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.798974][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1499.810700][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1499.820770][ T13] bond0 (unregistering): Released all slaves [ 1500.045626][ T13] hsr_slave_0: left promiscuous mode [ 1500.052249][ T13] hsr_slave_1: left promiscuous mode [ 1500.058907][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1500.068220][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1500.077065][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1500.084488][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1500.099610][ T13] veth1_macvtap: left promiscuous mode [ 1500.105197][ T13] veth0_macvtap: left promiscuous mode [ 1500.112908][ T13] veth1_vlan: left promiscuous mode [ 1500.118680][ T13] veth0_vlan: left promiscuous mode [ 1500.301781][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1500.329965][ T13] team0 (unregistering): Port device team_slave_0 removed