last executing test programs: 1m58.747737159s ago: executing program 1 (id=9852): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000001f80)=""/4102, 0x1006) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m58.377450407s ago: executing program 1 (id=9854): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000100)='./bus\x00') rename(&(0x7f0000000500)='./bus\x00', &(0x7f0000000680)='./file0\x00') chdir(&(0x7f0000000140)='./bus\x00') 1m57.990656077s ago: executing program 1 (id=9856): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r0, &(0x7f0000000040)=""/34, 0x22) getdents64(r0, 0xffffffffffffffff, 0x43) 1m57.541271073s ago: executing program 1 (id=9861): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330") ptrace$getregset(0x4205, r5, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 1m57.130205941s ago: executing program 1 (id=9864): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m56.746763129s ago: executing program 1 (id=9866): mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000f80), 0x16, &(0x7f0000000000)={[{@nr_inodes}]}) acct(&(0x7f0000000040)='./cgroup\x00') 1m41.710849237s ago: executing program 32 (id=9866): mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000f80), 0x16, &(0x7f0000000000)={[{@nr_inodes}]}) acct(&(0x7f0000000040)='./cgroup\x00') 3.534428084s ago: executing program 2 (id=10750): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x500) pread64(r0, 0x0, 0xf5, 0x0) 3.170368572s ago: executing program 4 (id=10754): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3.113286357s ago: executing program 4 (id=10755): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) write$cgroup_devices(r1, 0x0, 0x0) 2.994807866s ago: executing program 4 (id=10756): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f00000000c0)=""/138) 2.380061658s ago: executing program 4 (id=10760): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, 0x0, 0x0) 2.161337011s ago: executing program 4 (id=10764): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) write$cgroup_devices(r1, 0x0, 0x0) 2.14147848s ago: executing program 2 (id=10765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20004000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x7, 0x8c, 0x0, 0x6, 0xd, 0x81, 0xb6, 0xa, 0xfc, 0x8, 0x44, 0x0, 0xee5, 0x0, 0x9a, 0x2, 0x80, 0xa7, '\x00', 0x3, 0x3}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55f, 0x19fffe, 0x4, 0xffffffffffffffff, 0x7, 0x9, 0xb, 0x4, 0x80, 0x300000000006, 0x794, 0xa, 0x40, 0xc976, 0x5], 0x8080000, 0x20200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.006363887s ago: executing program 4 (id=10766): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000302000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000abef32450d6986aeb4d7f1ab41b"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket(0x9, 0x2, 0x5) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x20000010) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x6c, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @fda={0x66646185, 0x6, 0x0, 0x37}}, &(0x7f0000000340)={0x0, 0x1c, 0x44}}, 0x40}], 0x7, 0x0, &(0x7f0000000180)="553fc696f4b1a1"}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b03, 0x0) 1.839968239s ago: executing program 2 (id=10768): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f00000000c0)=""/138) 1.569503838s ago: executing program 3 (id=10770): sendmmsg(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c840012", 0x5}], 0x1}}], 0x1, 0x11) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.286627564s ago: executing program 3 (id=10772): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 1.107461638s ago: executing program 3 (id=10774): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) write$cgroup_devices(r1, 0x0, 0x0) 891.98357ms ago: executing program 3 (id=10776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 777.364644ms ago: executing program 3 (id=10777): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000440)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x7172, 0xa8b, 0x0, 0x0, 0xfffffffe, 0x0}) 673.842203ms ago: executing program 0 (id=10778): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x86e, {0xffffffff, 0xbde, 0xb, 0x10000}}) 602.6503ms ago: executing program 3 (id=10779): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x885) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080), 0x4) 534.677723ms ago: executing program 0 (id=10780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 457.260414ms ago: executing program 0 (id=10781): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 314.646008ms ago: executing program 2 (id=10782): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 314.476773ms ago: executing program 0 (id=10783): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000500)={r0, 0x0, 0x3, 0x10001}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="f1ff00004ec6"}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) 236.828566ms ago: executing program 2 (id=10784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000a0601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 93.360159ms ago: executing program 2 (id=10785): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000002100)='veth0_to_bridge\x00', 0x10) sendto$inet(r0, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) 30.706535ms ago: executing program 0 (id=10786): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x5, 0x1000000, 0x0, 0x0, 0x5000003) 0s ago: executing program 0 (id=10787): unshare(0x22020600) unshare(0x26020480) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x100) kernel console output (not intermixed with test programs): s mode [ 908.113923][ T12] veth0_vlan: left promiscuous mode [ 908.240110][ T5835] Bluetooth: hci1: command tx timeout [ 908.918225][ T12] team0 (unregistering): Port device team_slave_1 removed [ 908.990933][ T12] team0 (unregistering): Port device team_slave_0 removed [ 909.172692][T23505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7515'. [ 909.778028][T23367] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 909.809996][T23367] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 909.853156][T23367] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 909.895358][T23367] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 909.970018][T23522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7523'. [ 910.226977][T23367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.304013][T23367] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.320357][ T5835] Bluetooth: hci1: command tx timeout [ 910.423087][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.430367][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.485270][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.492511][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.260222][T23367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.428980][T23367] veth0_vlan: entered promiscuous mode [ 911.483169][T23367] veth1_vlan: entered promiscuous mode [ 911.587801][T23367] veth0_macvtap: entered promiscuous mode [ 911.606583][T23367] veth1_macvtap: entered promiscuous mode [ 911.694148][T23367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 911.771304][T23367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 911.869319][ T149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.888821][ T149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.931170][ T149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.010823][ T149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.152818][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.180999][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.271578][ T4581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.297336][ T4581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.405389][T23587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7536'. [ 912.490405][T23591] IPv6: NLM_F_CREATE should be specified when creating new route [ 917.899874][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 917.912070][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 917.926553][T23699] overlay: Unknown parameter 'fscontext' [ 917.935599][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 917.948408][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 917.958190][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 918.550817][T23698] chnl_net:caif_netlink_parms(): no params data found [ 919.149344][T23717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7592'. [ 919.282226][T23698] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.300277][T23698] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.307741][T23698] bridge_slave_0: entered allmulticast mode [ 919.337206][T23698] bridge_slave_0: entered promiscuous mode [ 919.405089][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.458647][T23698] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.472524][T23698] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.488585][T23698] bridge_slave_1: entered allmulticast mode [ 919.501461][T23698] bridge_slave_1: entered promiscuous mode [ 919.638040][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.682638][T23698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.705170][T23698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.852706][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.887546][T23698] team0: Port device team_slave_0 added [ 919.917082][T23698] team0: Port device team_slave_1 added [ 920.002114][ T5144] Bluetooth: hci4: command tx timeout [ 920.014870][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.121200][T23698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.140774][T23698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.180424][T23698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.201271][T23698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.220277][T23698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.269676][T23698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.447187][T23698] hsr_slave_0: entered promiscuous mode [ 920.463131][T23698] hsr_slave_1: entered promiscuous mode [ 920.488612][T23698] debugfs: 'hsr0' already exists in 'hsr' [ 920.497809][T23698] Cannot create hsr debugfs directory [ 920.957769][ T12] bridge_slave_1: left allmulticast mode [ 920.964271][ T12] bridge_slave_1: left promiscuous mode [ 920.981057][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.004320][ T12] bridge_slave_0: left allmulticast mode [ 921.019407][ T12] bridge_slave_0: left promiscuous mode [ 921.025269][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.456644][T23744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7601'. [ 922.079140][ T5144] Bluetooth: hci4: command tx timeout [ 922.101325][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.175340][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.225237][ T12] bond0 (unregistering): Released all slaves [ 922.539481][T23774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7612'. [ 923.208049][ T12] hsr_slave_0: left promiscuous mode [ 923.219092][ T12] hsr_slave_1: left promiscuous mode [ 923.239981][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 923.269105][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.282276][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 923.299161][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 923.347446][ T12] veth1_macvtap: left promiscuous mode [ 923.360412][ T12] veth0_macvtap: left promiscuous mode [ 923.376655][ T12] veth1_vlan: left promiscuous mode [ 923.389780][ T12] veth0_vlan: left promiscuous mode [ 924.160566][ T5144] Bluetooth: hci4: command tx timeout [ 924.502097][ T12] team0 (unregistering): Port device team_slave_1 removed [ 924.602440][ T12] team0 (unregistering): Port device team_slave_0 removed [ 925.767742][T23698] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 925.845513][T23698] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 925.887491][T23698] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 925.986406][T23698] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 926.239115][ T5144] Bluetooth: hci4: command tx timeout [ 926.317262][T23698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.370502][T23698] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.385218][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.392483][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.489423][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.496654][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.191498][T23698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.336266][T23698] veth0_vlan: entered promiscuous mode [ 927.373438][T23698] veth1_vlan: entered promiscuous mode [ 927.467822][T23698] veth0_macvtap: entered promiscuous mode [ 927.530742][T23698] veth1_macvtap: entered promiscuous mode [ 927.619199][T23698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 927.670286][T23698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 927.718570][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.811032][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.832923][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.872596][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.186244][ T4581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.225126][ T4581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.320677][ T4581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.367359][ T4581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.347289][T23974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7671'. [ 931.609851][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.616390][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.537106][T24022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7689'. [ 932.700074][T24026] pim6reg1: entered promiscuous mode [ 932.705640][T24026] pim6reg1: entered allmulticast mode [ 932.742481][ T30] audit: type=1326 audit(1763072548.670:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24025 comm="syz.0.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38f6c9 code=0x7ffc0000 [ 932.775448][ T30] audit: type=1326 audit(1763072548.670:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24025 comm="syz.0.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7ff57c38f6c9 code=0x7ffc0000 [ 932.808298][ T30] audit: type=1326 audit(1763072548.670:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24025 comm="syz.0.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38f6c9 code=0x7ffc0000 [ 932.859217][ T30] audit: type=1326 audit(1763072548.670:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24025 comm="syz.0.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38f6c9 code=0x7ffc0000 [ 934.110912][T24054] pim6reg1: entered promiscuous mode [ 934.116283][T24054] pim6reg1: entered allmulticast mode [ 934.156761][ T30] audit: type=1326 audit(1763072550.080:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24053 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6798f6c9 code=0x7ffc0000 [ 934.209180][ T30] audit: type=1326 audit(1763072550.080:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24053 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6798f6c9 code=0x7ffc0000 [ 934.252945][ T30] audit: type=1326 audit(1763072550.080:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24053 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f7e6798f6c9 code=0x7ffc0000 [ 934.319355][ T30] audit: type=1326 audit(1763072550.080:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24053 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6798f6c9 code=0x7ffc0000 [ 934.411193][ T30] audit: type=1326 audit(1763072550.080:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24053 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6798f6c9 code=0x7ffc0000 [ 934.950035][T24075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7714'. [ 936.129736][T24098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7725'. [ 938.480658][T24132] pim6reg1: entered promiscuous mode [ 938.503219][T24132] pim6reg1: entered allmulticast mode [ 938.799186][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 941.276906][T24173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7753'. [ 941.418770][T24178] pim6reg1: entered promiscuous mode [ 941.433834][T24178] pim6reg1: entered allmulticast mode [ 942.800176][T24198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7764'. [ 943.227693][T24207] pim6reg1: entered promiscuous mode [ 943.233186][T24207] pim6reg1: entered allmulticast mode [ 943.362191][T24209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7769'. [ 944.738888][T24237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7780'. [ 946.278232][T24272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7798'. [ 946.287313][T24272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7798'. [ 947.386401][T24301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7811'. [ 947.797718][T24313] netlink: 'syz.3.7818': attribute type 11 has an invalid length. [ 948.714005][T24328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7825'. [ 948.909739][T24330] pim6reg1: entered promiscuous mode [ 948.915232][T24330] pim6reg1: entered allmulticast mode [ 949.625878][T24356] pim6reg1: entered promiscuous mode [ 949.642950][T24356] pim6reg1: entered allmulticast mode [ 950.575187][T24387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7854'. [ 951.504298][T24411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7865'. [ 951.692904][T24415] pim6reg1: entered promiscuous mode [ 951.698582][T24415] pim6reg1: entered allmulticast mode [ 958.323190][T24526] pim6reg1: entered promiscuous mode [ 958.328912][T24526] pim6reg1: entered allmulticast mode [ 958.979558][T24535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7922'. [ 959.995304][T24557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7932'. [ 963.109098][ T5847] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 963.301757][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 963.329082][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 963.359060][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 963.368928][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 963.399446][ T5847] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 963.412239][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.431279][ T5847] usb 4-1: config 0 descriptor?? [ 963.851092][ T5847] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 963.865914][ T5847] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 963.883736][ T5847] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 963.900874][ T5847] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 963.920697][ T5847] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 963.934464][ T5847] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 963.951089][ T5847] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 963.969123][ T5847] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 963.984566][ T5847] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 964.010084][ T5847] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 964.053780][ T5847] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 964.167175][ T5847] usb 4-1: USB disconnect, device number 9 [ 964.224249][T24642] fido_id[24642]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 965.276068][T24675] fuse: Bad value for 'user_id' [ 965.281554][T24675] fuse: Bad value for 'user_id' [ 967.334842][T24705] fuse: Bad value for 'user_id' [ 967.340366][T24705] fuse: Bad value for 'user_id' [ 967.625790][ T30] audit: type=1326 audit(1763072583.550:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24714 comm="syz.1.8006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f135af8f6c9 code=0x0 [ 967.848716][T24719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8009'. [ 971.014658][T24752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8025'. [ 974.965832][T24818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8056'. [ 975.722387][T24832] x_tables: unsorted underflow at hook 2 [ 976.785394][T24867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8076'. [ 978.860509][T24913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8099'. [ 981.198766][T24968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8126'. [ 983.229594][T25019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8148'. [ 987.030990][ T30] audit: type=1326 audit(1763072602.950:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25064 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38f6c9 code=0x7ffc0000 [ 987.109311][ T30] audit: type=1326 audit(1763072602.960:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25064 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38f6c9 code=0x7ffc0000 [ 987.175161][ T30] audit: type=1326 audit(1763072602.960:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25064 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38f6c9 code=0x7ffc0000 [ 987.219132][ T30] audit: type=1326 audit(1763072602.960:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25064 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38f6c9 code=0x7ffc0000 [ 987.242246][ T30] audit: type=1326 audit(1763072602.950:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25064 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38f6c9 code=0x7ffc0000 [ 987.275044][ T30] audit: type=1326 audit(1763072602.960:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25064 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff57c38f6c9 code=0x7ffc0000 [ 987.306076][ T30] audit: type=1326 audit(1763072602.960:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25064 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38f6c9 code=0x7ffc0000 [ 987.349278][ T30] audit: type=1326 audit(1763072602.960:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25064 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38f6c9 code=0x7ffc0000 [ 987.411849][ T30] audit: type=1326 audit(1763072602.960:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25064 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38f6c9 code=0x7ffc0000 [ 987.499360][ T30] audit: type=1326 audit(1763072602.960:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25064 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff57c38f6c9 code=0x7ffc0000 [ 990.029067][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 991.214093][T25124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8197'. [ 992.494592][T25140] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8206'. [ 993.049752][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.056148][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.279696][T25157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8214'. [ 993.987375][T25165] veth0: entered promiscuous mode [ 994.019527][T25164] veth0: left promiscuous mode [ 997.317987][T25221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8247'. [ 997.861272][T25246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8257'. [ 1000.463750][T25333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8298'. [ 1002.764095][T25372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8316'. [ 1003.517857][T25393] IPv6: Can't replace route, no match found [ 1004.135171][T25411] bridge0: port 3(gretap0) entered blocking state [ 1004.149446][T25411] bridge0: port 3(gretap0) entered disabled state [ 1004.165193][T25411] gretap0: entered allmulticast mode [ 1004.192124][T25411] gretap0: entered promiscuous mode [ 1004.225003][T25411] bridge0: port 3(gretap0) entered blocking state [ 1004.232361][T25411] bridge0: port 3(gretap0) entered forwarding state [ 1004.321450][T25415] overlayfs: failed to resolve './file0': -2 [ 1004.989512][T25443] netlink: 140 bytes leftover after parsing attributes in process `syz.1.8350'. [ 1005.037596][T25445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8352'. [ 1005.263589][T25460] overlayfs: statfs failed on './file0' [ 1005.527811][T25473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8365'. [ 1007.899794][T25568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8410'. [ 1010.265930][T25624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8435'. [ 1011.192879][T25646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8445'. [ 1011.209942][T25642] mmap: syz.0.8443 (25642) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1011.456725][T25653] overlayfs: failed to resolve './file1': -2 [ 1011.934200][T25664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8455'. [ 1012.390067][T25682] overlayfs: failed to resolve './file1': -2 [ 1013.471850][T25720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8479'. [ 1015.856220][T25801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8515'. [ 1015.889183][T25801] ip_vti0: entered promiscuous mode [ 1015.894487][T25801] ip_vti0: entered allmulticast mode [ 1018.468795][T25837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8533'. [ 1019.357836][T25859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8543'. [ 1020.489503][T25883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8554'. [ 1023.805792][T25942] binder: 25941:25942 ioctl c018620c 0 returned -14 [ 1023.971891][T25946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8581'. [ 1025.839125][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 1030.981754][T26064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8634'. [ 1031.069493][ T793] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1031.229143][ T793] usb 3-1: Using ep0 maxpacket: 32 [ 1031.250884][ T793] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 1031.269052][ T793] usb 3-1: config 0 has no interface number 0 [ 1031.275239][ T793] usb 3-1: config 0 interface 217 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1031.296857][ T793] usb 3-1: New USB device found, idVendor=1532, idProduct=d2a2, bcdDevice=f7.ed [ 1031.306669][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.320003][ T793] usb 3-1: Product: syz [ 1031.324232][ T793] usb 3-1: Manufacturer: syz [ 1031.328866][ T793] usb 3-1: SerialNumber: syz [ 1031.355209][ T793] usb 3-1: config 0 descriptor?? [ 1031.619585][ T793] usb 3-1: USB disconnect, device number 6 [ 1032.059079][T23915] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1032.078706][T26110] 9pnet_fd: Insufficient options for proto=fd [ 1032.210973][T23915] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 1032.239382][T23915] usb 1-1: config 0 has no interface number 0 [ 1032.249517][T23915] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1032.279223][T23915] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1032.332152][T23915] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1032.345893][T23915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.367743][T23915] usb 1-1: Product: syz [ 1032.375144][T23915] usb 1-1: Manufacturer: syz [ 1032.389074][T23915] usb 1-1: SerialNumber: syz [ 1032.411655][T23915] usb 1-1: config 0 descriptor?? [ 1032.438567][T26095] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1032.451625][T23915] plusb 1-1:0.231: probe with driver plusb failed with error -22 [ 1032.658497][T17337] usb 1-1: USB disconnect, device number 4 [ 1038.679613][T26262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8720'. [ 1041.062176][T26294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8740'. [ 1041.199248][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 1041.784950][T26318] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1041.824909][T26321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8751'. [ 1042.649349][T26345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8761'. [ 1042.863906][T26352] binder: Bad value for 'stats' [ 1044.177682][T26368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8773'. [ 1045.521603][T26394] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1046.359656][T26409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8782'. [ 1047.523111][T26427] binder: Bad value for 'stats' [ 1048.726285][T26450] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8808'. [ 1051.953332][T26487] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8825'. [ 1052.775848][ T5144] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 1052.784933][ T5144] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 1052.901366][T26498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8831'. [ 1053.894597][T26515] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1054.486702][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.494137][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.609234][ T793] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1055.789062][ T793] usb 4-1: Using ep0 maxpacket: 32 [ 1055.800748][ T793] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.824497][ T793] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1055.839048][ T793] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1055.854470][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.886872][ T793] usb 4-1: config 0 descriptor?? [ 1056.329043][ T793] magicmouse 0003:05AC:0265.0006: hidraw0: USB HID v0.07 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 1056.518260][ T5914] usb 4-1: USB disconnect, device number 10 [ 1056.800950][ T5144] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1056.812292][ T5144] Bluetooth: hci1: Injecting HCI hardware error event [ 1056.821400][ T5144] Bluetooth: hci1: hardware error 0x00 [ 1058.268860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1058.371262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1058.473503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 1058.575983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1058.576777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 1058.678456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1058.679360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 1058.741714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1059.551018][ T5144] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1060.010640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1062.263409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1064.099722][T26631] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 1064.110098][T26631] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 1064.119622][T26631] kvm: requested 165104 ns i8254 timer period limited to 200000 ns [ 1064.127883][T26631] kvm: requested 90514 ns i8254 timer period limited to 200000 ns [ 1064.136733][T26631] kvm: requested 120685 ns i8254 timer period limited to 200000 ns [ 1064.150818][T26631] kvm: requested 119847 ns i8254 timer period limited to 200000 ns [ 1064.212235][T26631] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 1064.220910][T26631] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 1064.233425][T26631] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1067.049077][ T793] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1067.219673][ T793] usb 3-1: Using ep0 maxpacket: 8 [ 1067.230194][ T793] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1067.249758][ T793] usb 3-1: config 0 has no interface number 0 [ 1067.266894][ T793] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1067.789065][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.797286][ T793] usb 3-1: Product: syz [ 1067.809562][ T793] usb 3-1: Manufacturer: syz [ 1067.815892][ T793] usb 3-1: SerialNumber: syz [ 1067.840141][ T793] usb 3-1: config 0 descriptor?? [ 1068.069025][ T793] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1068.230876][ T793] uvcvideo 3-1:0.31: No valid video chain found. [ 1068.274084][ T793] usb 3-1: USB disconnect, device number 7 [ 1069.099043][ T5847] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1069.281000][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.292318][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.304766][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1069.319138][ T5847] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1069.328349][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.357496][ T5847] usb 4-1: config 0 descriptor?? [ 1069.775814][ T5847] hid_parser_main: 5 callbacks suppressed [ 1069.775840][ T5847] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1069.796082][ T5847] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1069.803949][ T5847] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1069.818229][ T5847] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1069.829044][ T5847] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1069.861996][ T5847] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1069.879041][ T5847] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1069.896912][ T5847] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1069.927322][ T5847] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1069.949039][ T5847] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1069.989563][ T5847] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1070.052603][ T793] usb 4-1: USB disconnect, device number 11 [ 1070.177960][T26762] fido_id[26762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1073.636076][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1073.645492][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1073.655381][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1073.665931][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1073.689247][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1074.142408][T26797] chnl_net:caif_netlink_parms(): no params data found [ 1074.605197][T26797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.624559][T26797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.655312][T26797] bridge_slave_0: entered allmulticast mode [ 1074.679206][T26797] bridge_slave_0: entered promiscuous mode [ 1074.691857][T26797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.709181][T26797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.716609][T26797] bridge_slave_1: entered allmulticast mode [ 1074.753459][T26797] bridge_slave_1: entered promiscuous mode [ 1074.912621][T26797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1074.951233][T26797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.070962][T26797] team0: Port device team_slave_0 added [ 1075.093025][T26797] team0: Port device team_slave_1 added [ 1075.234202][T26797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.254274][T26797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.324948][T26797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.359849][T26797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.387257][T26797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.440713][T26797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.674730][T26797] hsr_slave_0: entered promiscuous mode [ 1075.682691][T26797] hsr_slave_1: entered promiscuous mode [ 1075.755273][T26840] binder: Bad value for 'stats' [ 1075.799431][ T5144] Bluetooth: hci0: command tx timeout [ 1076.845347][T26854] input: syz1 as /devices/virtual/input/input11 [ 1076.896501][T26797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.035172][T26797] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.177141][T26797] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.226747][T26860] binder: Bad value for 'stats' [ 1077.308321][T26797] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.557671][T26864] Bluetooth: MGMT ver 1.23 [ 1077.647621][T26797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1077.675956][T26797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1077.714928][T26797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1077.781061][T26797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1077.839095][ T5144] Bluetooth: hci0: command tx timeout [ 1077.986484][T26797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.038541][T26797] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.072022][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.079283][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.108390][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.115648][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.687626][T26797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.820010][T26797] veth0_vlan: entered promiscuous mode [ 1078.852533][T26797] veth1_vlan: entered promiscuous mode [ 1078.929764][T23915] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1078.955874][T26797] veth0_macvtap: entered promiscuous mode [ 1078.975816][T26797] veth1_macvtap: entered promiscuous mode [ 1079.035227][T26797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.072405][T26797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.109705][T23915] usb 3-1: Using ep0 maxpacket: 8 [ 1079.124818][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.130709][T23915] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1079.145586][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.155959][T23915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.173979][T23915] usb 3-1: config 0 has no interface number 0 [ 1079.185860][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.198200][T23915] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1079.207763][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.227907][T23915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.232224][T26894] binder: Bad value for 'stats' [ 1079.249145][T23915] usb 3-1: Product: syz [ 1079.253399][T23915] usb 3-1: Manufacturer: syz [ 1079.258020][T23915] usb 3-1: SerialNumber: syz [ 1079.327419][T23915] usb 3-1: config 0 descriptor?? [ 1079.348665][T23915] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 1079.401599][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.419585][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.471927][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.480635][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.544462][ T43] usb 3-1: USB disconnect, device number 8 [ 1081.420637][ T5144] Bluetooth: hci0: command tx timeout [ 1083.322887][T26945] binder: Bad value for 'stats' [ 1083.439617][ T5144] Bluetooth: hci0: command tx timeout [ 1083.659111][T23915] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1083.839679][T23915] usb 1-1: Using ep0 maxpacket: 16 [ 1083.850971][T23915] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 1083.874514][T23915] usb 1-1: config 0 has no interface number 0 [ 1083.876263][T26961] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9016'. [ 1083.889101][T23915] usb 1-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 1083.899459][T26961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9016'. [ 1083.909023][T23915] usb 1-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1083.934769][T23915] usb 1-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1083.947090][T23915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.966809][T23915] usb 1-1: Product: syz [ 1083.976959][T23915] usb 1-1: Manufacturer: syz [ 1083.989023][T23915] usb 1-1: SerialNumber: syz [ 1084.002797][T23915] usb 1-1: config 0 descriptor?? [ 1084.018560][T26948] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1084.267689][T26970] binder: Bad value for 'stats' [ 1086.198154][ T5144] Bluetooth: hci0: command tx timeout [ 1086.759353][T23915] usb 1-1: USB disconnect, device number 5 [ 1088.076478][T27006] binder: Bad value for 'stats' [ 1089.893107][T27022] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9040'. [ 1089.959248][T27022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9040'. [ 1090.765576][T27030] binder: Bad value for 'stats' [ 1090.989617][T27035] netlink: 'syz.0.9045': attribute type 2 has an invalid length. [ 1091.064964][T27035] netlink: 'syz.0.9045': attribute type 1 has an invalid length. [ 1091.360646][T27042] binder: BINDER_SET_CONTEXT_MGR already set [ 1091.366720][T27042] binder: 27041:27042 ioctl 4018620d 200000000340 returned -16 [ 1091.463928][T27046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9050'. [ 1091.479095][T27046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9050'. [ 1091.488096][T27046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9050'. [ 1092.370498][T23915] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1092.541045][T23915] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 1092.558541][T23915] usb 2-1: config 0 has no interface number 0 [ 1092.589762][T23915] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1092.612447][T23915] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1092.634208][T23915] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1092.654855][T23915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.665190][T23915] usb 2-1: Product: syz [ 1092.680490][T23915] usb 2-1: Manufacturer: syz [ 1092.685199][T23915] usb 2-1: SerialNumber: syz [ 1092.712994][T23915] usb 2-1: config 0 descriptor?? [ 1092.723456][T27054] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1092.756208][T23915] plusb 2-1:0.231: probe with driver plusb failed with error -22 [ 1092.981451][T23915] usb 2-1: USB disconnect, device number 5 [ 1093.069964][T27064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9059'. [ 1093.113027][T27064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9059'. [ 1093.153594][T27064] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9059'. [ 1093.292978][T27069] binder: Bad value for 'stats' [ 1093.847830][T27086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9069'. [ 1093.879202][T27086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9069'. [ 1093.955230][T27089] binder: Bad value for 'stats' [ 1094.024379][T27091] warning: `syz.0.9071' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1094.380253][T27100] overlayfs: failed to resolve './file0': -2 [ 1095.659333][T26895] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1095.820945][T26895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.842804][T26895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.879119][T26895] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1095.912610][T26895] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1095.932897][T26895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.960814][T26895] usb 1-1: config 0 descriptor?? [ 1096.228798][T27113] __nla_validate_parse: 1 callbacks suppressed [ 1096.228823][T27113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9081'. [ 1096.245494][T27113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9081'. [ 1096.402482][T26895] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1096.548528][T27120] binder: Bad value for 'stats' [ 1097.217240][T23915] usb 1-1: USB disconnect, device number 6 [ 1099.633811][T27145] binder: Bad value for 'stats' [ 1100.257380][T27163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9091'. [ 1100.279597][T27163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9091'. [ 1100.367239][T27168] binder: Bad value for 'stats' [ 1103.961511][ T5847] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1104.129153][ T5847] usb 3-1: Using ep0 maxpacket: 16 [ 1104.136124][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.167684][ T5847] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1104.208478][ T5847] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1104.238978][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.267380][ T5847] usb 3-1: config 0 descriptor?? [ 1104.302152][ T5847] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1104.502581][T26895] usb 3-1: USB disconnect, device number 9 [ 1104.613809][T27199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9114'. [ 1104.623455][T27199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9114'. [ 1107.129598][T27224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9126'. [ 1107.468145][T27236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9130'. [ 1108.289560][ T793] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1108.418554][T27247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9136'. [ 1108.463288][ T793] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1108.473038][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.521977][ T793] usb 1-1: config 0 descriptor?? [ 1108.759294][T27257] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9133'. [ 1108.768326][T27257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9133'. [ 1108.824700][T27257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9133'. [ 1108.933946][ T793] usb 1-1: Cannot set MAC address [ 1108.948239][ T793] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1108.992925][ T793] usb 1-1: USB disconnect, device number 7 [ 1109.065154][T27267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9144'. [ 1109.941310][T27273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9146'. [ 1112.011110][T27300] netlink: 'syz.0.9158': attribute type 1 has an invalid length. [ 1113.507405][T27336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9174'. [ 1114.139339][T27361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9185'. [ 1115.441540][T27391] binder: Bad value for 'stats' [ 1117.247268][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.259636][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.428765][T27423] binder: Bad value for 'stats' [ 1121.854373][T27451] binder: Bad value for 'stats' [ 1122.470219][T27465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9223'. [ 1122.619050][ T793] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1122.789046][ T793] usb 2-1: Using ep0 maxpacket: 16 [ 1122.811056][ T793] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 1122.819571][ T793] usb 2-1: config 0 has no interface number 0 [ 1122.829897][ T793] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 1122.849634][ T793] usb 2-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1122.864468][ T793] usb 2-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1122.866970][T27478] binder: Bad value for 'stats' [ 1122.874821][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.890284][ T793] usb 2-1: Product: syz [ 1122.894911][ T793] usb 2-1: Manufacturer: syz [ 1122.899791][ T793] usb 2-1: SerialNumber: syz [ 1122.907921][ T793] usb 2-1: config 0 descriptor?? [ 1122.919913][T27462] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1123.979222][T27481] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1125.339532][T27492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9233'. [ 1125.683160][T27507] overlayfs: missing 'lowerdir' [ 1125.779421][ T5914] usb 2-1: USB disconnect, device number 6 [ 1127.251418][T27521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9244'. [ 1128.119152][ T43] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1128.172769][T27548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9255'. [ 1128.282429][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1128.300917][ T43] usb 1-1: not running at top speed; connect to a high speed hub [ 1128.319748][ T43] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1128.342410][ T43] usb 1-1: string descriptor 0 read error: -22 [ 1128.348764][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1128.399008][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.713732][T27529] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1128.973038][ T43] cdc_ncm 1-1:1.0: bind() failure [ 1129.031343][ T43] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1129.081039][ T43] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1129.109145][ T43] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 1129.122301][ T43] usb 1-1: USB disconnect, device number 8 [ 1131.614908][T27583] netlink: 'syz.3.9268': attribute type 11 has an invalid length. [ 1131.871356][T27586] binder: Bad value for 'stats' [ 1133.885975][ T5144] Bluetooth: hci0: link tx timeout [ 1133.893285][ T5144] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1133.903074][ T5144] Bluetooth: hci0: link tx timeout [ 1133.908288][ T5144] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1134.120181][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1134.120200][ T30] audit: type=1326 audit(2000000015.670:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27613 comm="syz.1.9281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135af8f6c9 code=0x7ffc0000 [ 1134.185290][ T30] audit: type=1326 audit(2000000015.670:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27613 comm="syz.1.9281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135af8f6c9 code=0x7ffc0000 [ 1134.209280][ T30] audit: type=1326 audit(2000000015.760:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27613 comm="syz.1.9281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f135af8f6c9 code=0x7ffc0000 [ 1134.240434][ T30] audit: type=1326 audit(2000000015.760:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27613 comm="syz.1.9281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135af8f6c9 code=0x7ffc0000 [ 1134.314444][ T30] audit: type=1326 audit(2000000015.760:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27613 comm="syz.1.9281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135af8f6c9 code=0x7ffc0000 [ 1134.369304][ T30] audit: type=1326 audit(2000000015.760:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27613 comm="syz.1.9281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f135af8f6c9 code=0x7ffc0000 [ 1134.410526][ T30] audit: type=1326 audit(2000000015.760:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27613 comm="syz.1.9281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135af8f6c9 code=0x7ffc0000 [ 1134.438004][ T30] audit: type=1326 audit(2000000015.760:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27613 comm="syz.1.9281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135af8f6c9 code=0x7ffc0000 [ 1134.539099][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1134.710911][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1134.721191][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1134.906329][ T43] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1134.928981][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.937102][ T43] usb 4-1: Product: syz [ 1134.942588][ T43] usb 4-1: Manufacturer: syz [ 1134.947233][ T43] usb 4-1: SerialNumber: syz [ 1134.959763][ T43] usb 4-1: config 0 descriptor?? [ 1134.965508][T27616] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1134.976165][T27616] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1135.272427][T27616] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1135.299266][T27616] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1135.477792][T27631] overlayfs: missing 'lowerdir' [ 1135.541738][ T43] Error reading MAC address [ 1135.579415][ T43] usb 4-1: USB disconnect, device number 12 [ 1135.929593][ T5144] Bluetooth: hci0: command 0x0406 tx timeout [ 1137.182481][T27646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9291'. [ 1139.251209][ T5144] Bluetooth: hci0: command 0x0406 tx timeout [ 1139.381172][T27659] overlayfs: missing 'lowerdir' [ 1142.910169][T27684] overlayfs: missing 'workdir' [ 1143.969028][ T793] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1144.159035][ T793] usb 2-1: Using ep0 maxpacket: 32 [ 1144.176958][ T793] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1144.197427][ T793] usb 2-1: config 0 has no interface number 0 [ 1144.219456][ T793] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1144.262532][ T793] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1144.282980][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.311536][ T793] usb 2-1: Product: syz [ 1144.315897][ T793] usb 2-1: Manufacturer: syz [ 1144.348985][ T793] usb 2-1: SerialNumber: syz [ 1144.370181][ T793] usb 2-1: config 0 descriptor?? [ 1144.415822][ T793] smsc75xx v1.0.0 [ 1144.961669][T27718] overlayfs: missing 'workdir' [ 1145.629182][ T793] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1145.670956][ T793] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1145.701516][ T793] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1145.729006][ T793] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1145.759004][ T793] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1145.787377][ T793] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1145.819827][ T793] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1145.846421][ T793] usb 2-1: USB disconnect, device number 7 [ 1145.980757][ T30] audit: type=1326 audit(2000000027.520:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27731 comm="syz.0.9323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38f6c9 code=0x7ffc0000 [ 1146.060787][ T30] audit: type=1326 audit(2000000027.520:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27731 comm="syz.0.9323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38f6c9 code=0x7ffc0000 [ 1146.131198][ T30] audit: type=1326 audit(2000000027.570:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27731 comm="syz.0.9323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7ff57c38f6c9 code=0x7ffc0000 [ 1146.182654][ T30] audit: type=1326 audit(2000000027.570:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27731 comm="syz.0.9323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38f6c9 code=0x7ffc0000 [ 1146.241761][T27736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9325'. [ 1146.315606][T27740] overlayfs: missing 'workdir' [ 1146.474397][T27746] overlayfs: failed to resolve './file0': -2 [ 1146.872885][T27759] overlayfs: overlapping lowerdir path [ 1147.327878][T27769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9339'. [ 1147.469431][T27774] overlayfs: failed to resolve './file0': -2 [ 1147.989596][ T793] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1148.120673][T27796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9350'. [ 1148.170894][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.188994][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.210437][ T793] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1148.239126][ T793] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1148.258706][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.280202][ T793] usb 2-1: config 0 descriptor?? [ 1148.300225][T27800] overlayfs: failed to resolve './file0': -2 [ 1148.710623][ T793] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1148.909436][T23915] usb 2-1: USB disconnect, device number 8 [ 1149.275977][T27829] overlayfs: failed to resolve './file1': -2 [ 1150.263131][T27855] binder: Bad value for 'stats' [ 1150.271958][T27853] overlayfs: failed to resolve './file1': -2 [ 1150.712025][T27879] binder: Bad value for 'stats' [ 1150.795147][T27884] overlayfs: failed to resolve './file1': -2 [ 1150.930837][ T793] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1151.091186][ T793] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.107591][ T793] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1151.126723][ T793] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1151.137481][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.169774][ T793] usb 3-1: config 0 descriptor?? [ 1151.194112][ T793] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1152.352989][T27923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9398'. [ 1153.759653][ T793] usb 3-1: USB disconnect, device number 10 [ 1156.537735][T27994] binder: Bad value for 'stats' [ 1157.572202][T28017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9436'. [ 1158.639049][ T794] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1158.801228][ T794] usb 4-1: config 0 has no interfaces? [ 1158.807016][ T794] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1158.828509][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.850445][ T794] usb 4-1: config 0 descriptor?? [ 1159.081858][T28031] binder: BINDER_SET_CONTEXT_MGR already set [ 1159.087966][T28031] binder: 28030:28031 ioctl 4018620d 200000004a80 returned -16 [ 1161.139046][T28070] binder: Bad value for 'stats' [ 1161.413486][ T5847] usb 4-1: USB disconnect, device number 13 [ 1162.225659][T28096] binder: Bad value for 'stats' [ 1163.405544][T28127] binder: Bad value for 'stats' [ 1163.578277][T28138] binder_alloc: 28137: binder_alloc_buf size 4294971448 failed, no address space [ 1163.590587][T28138] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1164.021160][T28159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9493'. [ 1164.362621][T28177] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 1164.382375][T28177] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 1164.438330][T28177] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 1164.839060][ T5847] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1164.991001][ T5847] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1165.011431][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.034176][ T5847] usb 3-1: config 0 descriptor?? [ 1165.155701][T28215] binder: Bad value for 'stats' [ 1165.456343][ T5847] usb 3-1: Cannot set MAC address [ 1165.470551][ T5847] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1165.499346][ T5847] usb 3-1: USB disconnect, device number 11 [ 1166.342854][ T5903] Bluetooth: hci5: Frame reassembly failed (-84) [ 1166.735054][T28261] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1166.943187][T28271] netlink: 774 bytes leftover after parsing attributes in process `syz.3.9539'. [ 1166.953623][T28271] netlink: 'syz.3.9539': attribute type 1 has an invalid length. [ 1167.005814][T28273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9540'. [ 1167.353922][T28293] netlink: 'syz.3.9549': attribute type 1 has an invalid length. [ 1167.423769][T28295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9550'. [ 1167.605999][T28303] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9554'. [ 1167.620764][T28303] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9554'. [ 1167.631385][T28303] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9554'. [ 1167.759885][T28253] Bluetooth: hci3: command 0x1003 tx timeout [ 1167.767779][ T5835] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1168.032166][T28324] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9561'. [ 1168.064605][T28324] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9561'. [ 1168.081913][T28324] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9561'. [ 1168.339247][T28337] binder: Bad value for 'stats' [ 1168.399644][ T5144] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1168.599608][T28348] tap0: tun_chr_ioctl cmd 1074025681 [ 1168.812764][T28364] netlink: 'syz.0.9578': attribute type 29 has an invalid length. [ 1168.849428][T28364] netlink: 'syz.0.9578': attribute type 29 has an invalid length. [ 1169.458357][T28392] overlayfs: missing 'lowerdir' [ 1169.607222][T28396] binder: Bad value for 'stats' [ 1169.738389][T28403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9596'. [ 1170.264012][T28416] overlayfs: missing 'lowerdir' [ 1170.572465][T28423] binder: Bad value for 'stats' [ 1170.903246][T28436] overlayfs: missing 'lowerdir' [ 1171.022829][T28440] binder: Bad value for 'stats' [ 1171.229704][T28450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9618'. [ 1171.379572][T28454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9620'. [ 1172.472251][T28488] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9634'. [ 1172.489704][T28488] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9634'. [ 1172.509714][T28488] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9634'. [ 1172.710580][T28499] netlink: 'syz.2.9639': attribute type 2 has an invalid length. [ 1172.736221][T28502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9640'. [ 1172.754830][T28502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9640'. [ 1172.965882][T28518] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9648'. [ 1173.065758][T28523] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9649'. [ 1173.103490][T28523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1173.327472][T28533] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 1173.897845][T28547] binder: Bad value for 'stats' [ 1175.207693][T28567] binder: Bad value for 'stats' [ 1176.423237][T28593] binder: Bad value for 'stats' [ 1176.867671][T28617] binder: Bad value for 'stats' [ 1177.372594][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.379050][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.568666][T28638] binder: Bad value for 'stats' [ 1178.099541][T28665] binder: Bad value for 'stats' [ 1178.709893][T28694] kvm: pic: single mode not supported [ 1178.710042][T28694] kvm: pic: level sensitive irq not supported [ 1178.717345][T28694] kvm: pic: non byte read [ 1178.732962][T28694] kvm: pic: non byte read [ 1178.737664][T28694] kvm: pic: single mode not supported [ 1178.737686][T28694] kvm: pic: level sensitive irq not supported [ 1178.744032][T28694] kvm: pic: non byte read [ 1178.755091][T28694] kvm: pic: single mode not supported [ 1178.755170][T28694] kvm: pic: non byte read [ 1178.766089][T28694] kvm: pic: single mode not supported [ 1178.766165][T28694] kvm: pic: non byte read [ 1178.787174][T28694] kvm: pic: non byte read [ 1178.796028][T28694] kvm: pic: non byte read [ 1178.809653][T28694] kvm: pic: non byte read [ 1178.814593][T28694] kvm: pic: non byte read [ 1182.974953][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1182.985975][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1182.995473][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1183.003997][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1183.014335][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1183.952162][T28794] chnl_net:caif_netlink_parms(): no params data found [ 1184.500761][T28794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.508005][T28794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.539277][T28794] bridge_slave_0: entered allmulticast mode [ 1184.571397][T28794] bridge_slave_0: entered promiscuous mode [ 1184.996437][ T5903] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.040333][ T5835] Bluetooth: hci3: command tx timeout [ 1185.047789][T28794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.067103][T28794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.079190][T28794] bridge_slave_1: entered allmulticast mode [ 1185.092973][T28794] bridge_slave_1: entered promiscuous mode [ 1185.391245][ T5903] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.565615][ T5903] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.621276][T28794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1185.651279][T28794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.803771][ T5903] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.850406][T28794] team0: Port device team_slave_0 added [ 1185.875046][T28794] team0: Port device team_slave_1 added [ 1186.052674][T28794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.079282][T28794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1186.139051][T28794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.183231][T28794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.195518][T28794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1186.268974][T28794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.531488][T28794] hsr_slave_0: entered promiscuous mode [ 1186.549332][T28794] hsr_slave_1: entered promiscuous mode [ 1186.556010][T28794] debugfs: 'hsr0' already exists in 'hsr' [ 1186.568610][T28794] Cannot create hsr debugfs directory [ 1186.933696][ T5903] bridge_slave_1: left allmulticast mode [ 1186.949370][ T5903] bridge_slave_1: left promiscuous mode [ 1186.955407][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.048363][ T5903] bridge_slave_0: left allmulticast mode [ 1187.054541][ T5903] bridge_slave_0: left promiscuous mode [ 1187.060522][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.065738][T28892] sctp: [Deprecated]: syz.2.9803 (pid 28892) Use of int in max_burst socket option. [ 1187.065738][T28892] Use struct sctp_assoc_value instead [ 1187.119761][ T5835] Bluetooth: hci3: command tx timeout [ 1187.776295][ T5903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1187.833448][ T5903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1187.871097][ T5903] bond0 (unregistering): Released all slaves [ 1188.886980][T28947] overlayfs: failed to resolve './bus': -2 [ 1189.049543][ T5903] hsr_slave_0: left promiscuous mode [ 1189.072660][ T5903] hsr_slave_1: left promiscuous mode [ 1189.093115][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1189.127689][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1189.173388][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1189.192486][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.214640][ T5835] Bluetooth: hci3: command tx timeout [ 1189.337311][ T5903] veth1_macvtap: left promiscuous mode [ 1189.352252][ T5903] veth0_macvtap: left promiscuous mode [ 1189.368490][ T5903] veth1_vlan: left promiscuous mode [ 1189.391445][T28964] EXT4-fs (loop1): unable to read superblock [ 1189.391481][ T5903] veth0_vlan: left promiscuous mode [ 1189.606030][T28968] binder: Bad value for 'stats' [ 1191.284589][ T5835] Bluetooth: hci3: command tx timeout [ 1191.302279][T28994] tmpfs: Bad value for 'mpol' [ 1191.549765][ T5903] team0 (unregistering): Port device team_slave_1 removed [ 1191.650536][T29002] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1191.971349][ T5903] team0 (unregistering): Port device team_slave_0 removed [ 1193.397726][T29032] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1195.450617][T28794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1195.523739][T28794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1195.584767][T28794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1195.713107][T28794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1196.073482][T28794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.149490][T28794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.175110][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.182442][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1196.214471][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.221796][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1196.336892][T28794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1196.827831][T28794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1197.008002][T28794] veth0_vlan: entered promiscuous mode [ 1197.067355][T28794] veth1_vlan: entered promiscuous mode [ 1197.177950][T28794] veth0_macvtap: entered promiscuous mode [ 1197.227395][T28794] veth1_macvtap: entered promiscuous mode [ 1197.317644][T28794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1197.381518][T28794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1197.416096][ T149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.462410][ T149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.487402][ T149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.519429][ T149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.064068][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.099875][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.202822][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.211347][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.315938][T29156] __nla_validate_parse: 1 callbacks suppressed [ 1198.315958][T29156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9887'. [ 1199.154706][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1199.164961][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1199.208112][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1199.229663][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1199.237601][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1200.009465][T29182] chnl_net:caif_netlink_parms(): no params data found [ 1200.547262][ T5903] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.791442][ T5903] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.942758][ T5903] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.975599][T29182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.992858][T29182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.012321][T29182] bridge_slave_0: entered allmulticast mode [ 1201.050222][T29182] bridge_slave_0: entered promiscuous mode [ 1201.075139][T29182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.099126][T29182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.106550][T29182] bridge_slave_1: entered allmulticast mode [ 1201.127568][T29182] bridge_slave_1: entered promiscuous mode [ 1201.193162][ T5903] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.348103][T29182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.360157][ T5835] Bluetooth: hci1: command tx timeout [ 1201.390063][T29182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1201.601898][T29182] team0: Port device team_slave_0 added [ 1201.661822][T29182] team0: Port device team_slave_1 added [ 1201.771710][T29182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1201.778762][T29182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1201.892903][T29182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1201.959688][T29182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1201.966696][T29182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1202.079860][T29182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1202.119265][ T5903] bridge_slave_1: left allmulticast mode [ 1202.125009][ T5903] bridge_slave_1: left promiscuous mode [ 1202.139227][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.180863][ T5903] bridge_slave_0: left allmulticast mode [ 1202.186574][ T5903] bridge_slave_0: left promiscuous mode [ 1202.203027][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.651115][T29260] overlayfs: failed to resolve './file0': -2 [ 1203.410439][ T5903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1203.439169][ T5835] Bluetooth: hci1: command tx timeout [ 1203.477431][ T5903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1203.532669][ T5903] bond0 (unregistering): Released all slaves [ 1203.717093][T29283] overlayfs: failed to resolve './file0': -2 [ 1203.733473][T29182] hsr_slave_0: entered promiscuous mode [ 1203.749518][T29182] hsr_slave_1: entered promiscuous mode [ 1203.766557][T29182] debugfs: 'hsr0' already exists in 'hsr' [ 1203.779019][T29182] Cannot create hsr debugfs directory [ 1204.571718][ T5903] hsr_slave_0: left promiscuous mode [ 1204.581735][ T5903] hsr_slave_1: left promiscuous mode [ 1204.588206][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1204.611394][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.640251][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1204.647697][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.707652][ T5903] veth1_macvtap: left promiscuous mode [ 1204.733712][ T5903] veth0_macvtap: left promiscuous mode [ 1204.754627][ T5903] veth1_vlan: left promiscuous mode [ 1204.760951][ T5903] veth0_vlan: left promiscuous mode [ 1205.146048][T29322] overlayfs: failed to resolve './file0': -2 [ 1205.519381][ T5835] Bluetooth: hci1: command tx timeout [ 1205.727103][ T5903] team0 (unregistering): Port device team_slave_1 removed [ 1205.791610][ T5903] team0 (unregistering): Port device team_slave_0 removed [ 1206.454284][T29330] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9942'. [ 1206.507659][T29314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9937'. [ 1207.600092][ T5835] Bluetooth: hci1: command tx timeout [ 1207.622508][T29182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1207.640841][T29182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1207.664498][T29182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1207.694793][T29182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1207.755692][T29365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9951'. [ 1208.015139][T29182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.059037][T29182] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.098405][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.105711][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.150581][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.157875][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.852502][T29182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.965656][T29182] veth0_vlan: entered promiscuous mode [ 1208.986630][T29182] veth1_vlan: entered promiscuous mode [ 1209.036756][T29182] veth0_macvtap: entered promiscuous mode [ 1209.052718][T29182] veth1_macvtap: entered promiscuous mode [ 1209.118383][T29182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1209.161002][T29182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1209.187320][ T5903] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.206462][ T5903] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.223734][ T5903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.249098][ T5903] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.400859][ T5903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.425460][ T5903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.487766][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.505387][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.415806][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1210.429592][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1210.441537][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1210.453317][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1210.476402][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1210.610841][T29454] support for the xor transformation has been removed. [ 1211.316783][T29450] chnl_net:caif_netlink_parms(): no params data found [ 1211.324961][T29484] overlayfs: failed to resolve './file1': -2 [ 1211.766362][T29450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.779145][T29450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.786553][T29450] bridge_slave_0: entered allmulticast mode [ 1211.821689][T29450] bridge_slave_0: entered promiscuous mode [ 1212.209544][T29450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.227140][T29450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.281153][T29450] bridge_slave_1: entered allmulticast mode [ 1212.309433][T29450] bridge_slave_1: entered promiscuous mode [ 1212.547813][T29450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.564158][ T5144] Bluetooth: hci2: command tx timeout [ 1212.651721][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.695237][T29450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.045848][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.090999][T29450] team0: Port device team_slave_0 added [ 1213.102593][T29450] team0: Port device team_slave_1 added [ 1213.191908][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.331427][T29450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.349373][T29450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.397562][T29450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.426380][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.460380][T29450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.477672][T29450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.539614][T29450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.675456][T29565] binder: Bad value for 'stats' [ 1213.717874][T29450] hsr_slave_0: entered promiscuous mode [ 1213.726463][T29450] hsr_slave_1: entered promiscuous mode [ 1213.733419][T29450] debugfs: 'hsr0' already exists in 'hsr' [ 1213.743511][T29450] Cannot create hsr debugfs directory [ 1214.009666][ T50] bridge_slave_1: left allmulticast mode [ 1214.025606][ T50] bridge_slave_1: left promiscuous mode [ 1214.036041][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.062930][ T50] bridge_slave_0: left allmulticast mode [ 1214.068649][ T50] bridge_slave_0: left promiscuous mode [ 1214.082672][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.644316][ T5144] Bluetooth: hci2: command tx timeout [ 1214.721034][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1214.762316][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1214.803484][ T50] bond0 (unregistering): Released all slaves [ 1214.890499][T29604] binder: Bad value for 'stats' [ 1215.215858][T29619] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10022'. [ 1215.411761][ T30] audit: type=1800 audit(2000000096.960:1293): pid=29628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10024" name="file0" dev="overlay" ino=122 res=0 errno=0 [ 1215.548624][T29450] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1215.579203][ T50] hsr_slave_0: left promiscuous mode [ 1215.586660][T29632] binder: Bad value for 'stats' [ 1215.591949][ T50] hsr_slave_1: left promiscuous mode [ 1215.601656][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1215.615372][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1215.631402][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1215.650600][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1215.703499][ T50] veth1_macvtap: left promiscuous mode [ 1215.711465][ T50] veth0_macvtap: left promiscuous mode [ 1215.717613][ T50] veth1_vlan: left promiscuous mode [ 1215.724333][ T50] veth0_vlan: left promiscuous mode [ 1216.318736][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1216.376792][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1216.719577][ T5144] Bluetooth: hci2: command tx timeout [ 1216.916492][T29450] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1216.933352][T29450] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1216.951499][T29450] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1217.196392][T29670] binder: Bad value for 'stats' [ 1217.367694][T29450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.474090][T29450] 8021q: adding VLAN 0 to HW filter on device team0 [ 1217.511476][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.518807][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.564748][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.572023][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.077446][T29450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.799927][ T5144] Bluetooth: hci2: command tx timeout [ 1218.923573][T29450] veth0_vlan: entered promiscuous mode [ 1218.975296][T29450] veth1_vlan: entered promiscuous mode [ 1219.078782][T29450] veth0_macvtap: entered promiscuous mode [ 1219.112601][T29450] veth1_macvtap: entered promiscuous mode [ 1219.206727][T29450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1219.354965][T29450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1219.409583][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.424151][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.447779][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.471834][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.880953][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.899029][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.009928][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.019232][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.671293][ T30] audit: type=1326 audit(2000000103.220:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29795 comm="syz.0.10069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efa98f6c9 code=0x7ffc0000 [ 1221.730150][ T30] audit: type=1326 audit(2000000103.240:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29795 comm="syz.0.10069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efa98f6c9 code=0x7ffc0000 [ 1221.802348][ T30] audit: type=1326 audit(2000000103.250:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29795 comm="syz.0.10069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1efa98f6c9 code=0x7ffc0000 [ 1221.889027][ T30] audit: type=1326 audit(2000000103.250:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29795 comm="syz.0.10069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efa98f6c9 code=0x7ffc0000 [ 1221.952009][ T30] audit: type=1326 audit(2000000103.250:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29795 comm="syz.0.10069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efa98f6c9 code=0x7ffc0000 [ 1221.999019][ T30] audit: type=1326 audit(2000000103.320:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29798 comm="syz.2.10070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b098f6c9 code=0x7ffc0000 [ 1222.048575][ T30] audit: type=1326 audit(2000000103.320:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29798 comm="syz.2.10070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f16b098f6c9 code=0x7ffc0000 [ 1222.119394][ T30] audit: type=1326 audit(2000000103.320:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29798 comm="syz.2.10070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b098f6c9 code=0x7ffc0000 [ 1222.208104][ T30] audit: type=1326 audit(2000000103.320:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29798 comm="syz.2.10070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b098f6c9 code=0x7ffc0000 [ 1222.428677][T29822] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1222.449300][T29822] block device autoloading is deprecated and will be removed. [ 1223.196227][T29853] overlay: Unknown parameter '/' [ 1224.350177][T29876] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10099'. [ 1224.370669][T29876] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10099'. [ 1225.179196][T29899] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1227.018511][T29946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10128'. [ 1230.415237][T30005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10149'. [ 1230.424933][T30005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10149'. [ 1231.199411][T26895] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1231.389005][T26895] usb 1-1: Using ep0 maxpacket: 16 [ 1231.398654][T26895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1231.412439][T26895] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1231.422173][T26895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.432419][T26895] usb 1-1: Product: syz [ 1231.436929][T26895] usb 1-1: Manufacturer: syz [ 1231.445209][T26895] usb 1-1: SerialNumber: syz [ 1231.453978][T26895] usb 1-1: config 0 descriptor?? [ 1231.470172][T26895] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1231.485590][T26895] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1231.831614][T30063] overlay: Unknown parameter '/' [ 1232.074086][T26895] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1232.515432][T26895] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1232.527125][T26895] em28xx 1-1:0.0: board has no eeprom [ 1232.600596][T26895] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1232.600716][T26895] em28xx 1-1:0.0: dvb set to bulk mode. [ 1232.634583][T23915] em28xx 1-1:0.0: Binding DVB extension [ 1232.677470][T26895] usb 1-1: USB disconnect, device number 9 [ 1232.688402][T26895] em28xx 1-1:0.0: Disconnecting em28xx [ 1232.793352][T23915] em28xx 1-1:0.0: Registering input extension [ 1232.801613][T26895] em28xx 1-1:0.0: Closing input extension [ 1232.885360][T26895] em28xx 1-1:0.0: Freeing device [ 1234.032146][T30143] overlay: Unknown parameter '/' [ 1235.486339][T30181] overlay: Unknown parameter '/' [ 1237.643023][T30214] overlay: Unknown parameter '/' [ 1238.971185][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.977585][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.054678][T30250] overlay: Unknown parameter '/' [ 1241.713185][T30285] sctp: [Deprecated]: syz.0.10235 (pid 30285) Use of int in maxseg socket option. [ 1241.713185][T30285] Use struct sctp_assoc_value instead [ 1243.399976][T30321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10243'. [ 1248.113841][T30398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10272'. [ 1248.619592][T30416] binder: Unknown parameter 's' [ 1248.986027][T30429] syzkaller0: entered promiscuous mode [ 1249.019088][T30429] syzkaller0: entered allmulticast mode [ 1249.546832][ T4581] gretap0: left allmulticast mode [ 1249.553133][ T4581] gretap0: left promiscuous mode [ 1249.558353][ T4581] bridge0: port 3(gretap0) entered disabled state [ 1249.567962][ T4581] bridge_slave_1: left allmulticast mode [ 1249.574086][ T4581] bridge_slave_1: left promiscuous mode [ 1249.580777][ T4581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.607855][ T4581] bridge_slave_0: left allmulticast mode [ 1249.622308][ T4581] bridge_slave_0: left promiscuous mode [ 1249.648680][ T4581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.211353][ T4581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1252.251947][ T4581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.291413][ T4581] bond0 (unregistering): Released all slaves [ 1253.000664][ T4581] hsr_slave_0: left promiscuous mode [ 1253.014988][ T4581] hsr_slave_1: left promiscuous mode [ 1253.027623][ T4581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1253.046864][ T4581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.069836][ T4581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1253.084420][ T4581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.124641][ T4581] veth1_macvtap: left promiscuous mode [ 1253.130671][ T4581] veth0_macvtap: left promiscuous mode [ 1253.137783][ T4581] veth1_vlan: left promiscuous mode [ 1253.144021][ T4581] veth0_vlan: left promiscuous mode [ 1254.480333][ T5144] Bluetooth: hci1: command tx timeout [ 1255.438053][ T4581] team0 (unregistering): Port device team_slave_1 removed [ 1255.525466][ T4581] team0 (unregistering): Port device team_slave_0 removed [ 1257.032073][T30546] binder: Unknown parameter 'stat' [ 1258.580460][T30565] block device autoloading is deprecated and will be removed. [ 1260.647583][T30605] syzkaller1: entered promiscuous mode [ 1260.653299][T30605] syzkaller1: entered allmulticast mode [ 1261.385971][T30614] syzkaller0: entered promiscuous mode [ 1261.391649][T30614] syzkaller0: entered allmulticast mode [ 1264.395782][T30649] syzkaller0: entered promiscuous mode [ 1264.419901][T30649] syzkaller0: entered allmulticast mode [ 1264.467686][T30527] Set syz1 is full, maxelem 65536 reached [ 1264.896485][T30669] binder: 30668:30669 ioctl c0306201 200000004a40 returned -14 [ 1264.935387][ T5144] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1266.648137][T30685] syzkaller0: entered promiscuous mode [ 1266.659829][T30685] syzkaller0: entered allmulticast mode [ 1268.479049][T30717] netlink: 112 bytes leftover after parsing attributes in process `syz.4.10392'. [ 1270.193550][T30775] netlink: 'syz.2.10415': attribute type 4 has an invalid length. [ 1270.201873][T30775] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10415'. [ 1270.221227][T30775] .`: renamed from bond0 (while UP) [ 1273.300624][ T5144] Bluetooth: Frame is too long (len 148, expected len 117) [ 1273.319661][ T5144] Bluetooth: hci1: link tx timeout [ 1273.325900][ T5144] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1273.338051][T30816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10430'. [ 1273.721176][T30824] delete_channel: no stack [ 1274.600462][ T43] hid_parser_main: 1 callbacks suppressed [ 1274.600496][ T43] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1274.696740][ T43] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1275.360825][ T5144] Bluetooth: hci1: command 0x0406 tx timeout [ 1276.994656][T30910] sctp: [Deprecated]: syz.3.10467 (pid 30910) Use of int in max_burst socket option deprecated. [ 1276.994656][T30910] Use struct sctp_assoc_value instead [ 1278.947083][T30970] syzkaller1: entered promiscuous mode [ 1279.157291][T30970] syzkaller1: entered allmulticast mode [ 1279.902169][T30985] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 1280.505856][ T793] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1280.547220][ T793] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1282.370099][T26895] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1282.449866][T26895] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1282.675796][ T793] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1282.849378][ T793] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1282.879349][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.899167][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.928925][ T793] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1282.963830][ T793] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1282.973346][ T793] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1282.989033][ T793] usb 4-1: Manufacturer: syz [ 1283.000235][ T793] usb 4-1: config 0 descriptor?? [ 1283.175158][T31063] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 320 [ 1283.433225][ T793] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 1283.447937][ T793] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1285.189270][T26895] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1285.338953][T26895] usb 1-1: Using ep0 maxpacket: 32 [ 1285.358479][T26895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1285.371467][T26895] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1285.381003][T26895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.393420][T17337] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1285.405512][T26895] usb 1-1: Product: syz [ 1285.410278][T26895] usb 1-1: Manufacturer: syz [ 1285.415447][T26895] usb 1-1: SerialNumber: syz [ 1285.424240][T26895] usb 1-1: config 0 descriptor?? [ 1285.468329][T30006] usb 4-1: USB disconnect, device number 14 [ 1285.574225][T17337] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1285.589146][T17337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.612222][T17337] usb 3-1: config 0 descriptor?? [ 1285.697959][T26895] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 1285.711319][T26895] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 1285.739332][T26895] usb 1-1: USB disconnect, device number 10 [ 1285.929393][T30006] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1285.940827][ T793] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1286.079098][T30006] usb 4-1: Using ep0 maxpacket: 16 [ 1286.086322][T30006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1286.098514][T30006] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1286.108546][T30006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.117571][T30006] usb 4-1: Product: syz [ 1286.122771][T30006] usb 4-1: Manufacturer: syz [ 1286.128005][T30006] usb 4-1: SerialNumber: syz [ 1286.132878][ T793] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1286.145511][ T793] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 1286.157608][T30006] usb 4-1: config 0 descriptor?? [ 1286.163709][ T793] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 20 [ 1286.181102][T30006] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1286.190564][T30006] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1286.197858][ T793] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1286.207080][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1286.215433][ T793] usb 5-1: SerialNumber: syz [ 1286.225735][T31136] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1286.259480][T26895] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1286.418984][T26895] usb 1-1: Using ep0 maxpacket: 8 [ 1286.426082][T26895] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1286.438640][T26895] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1286.446064][ T793] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1286.468959][T26895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.476966][ T793] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 1286.477305][T26895] usb 1-1: Product: syz [ 1286.489565][T26895] usb 1-1: Manufacturer: syz [ 1286.495206][ T793] usb 5-1: USB disconnect, device number 2 [ 1286.499306][T26895] usb 1-1: SerialNumber: syz [ 1286.530873][T26895] usb 1-1: config 0 descriptor?? [ 1286.549795][T26895] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1286.786452][T30006] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1288.400777][T17337] usb 3-1: Cannot set autoneg [ 1288.408073][T17337] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1288.423765][T17337] usb 3-1: USB disconnect, device number 12 [ 1289.445660][T30006] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1289.457968][T30006] em28xx 4-1:0.0: board has no eeprom [ 1289.519003][T30006] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1289.527166][T30006] em28xx 4-1:0.0: dvb set to bulk mode. [ 1289.533360][ T793] em28xx 4-1:0.0: Binding DVB extension [ 1289.554936][T30006] usb 4-1: USB disconnect, device number 15 [ 1289.590032][T30006] em28xx 4-1:0.0: Disconnecting em28xx [ 1289.654361][ T793] em28xx 4-1:0.0: Registering input extension [ 1289.662022][T30006] em28xx 4-1:0.0: Closing input extension [ 1289.687423][T30006] em28xx 4-1:0.0: Freeing device [ 1289.729334][T17337] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1289.744989][T26895] gspca_zc3xx: i2c_r status error 49 [ 1289.899184][T17337] usb 5-1: Using ep0 maxpacket: 8 [ 1289.914426][T17337] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1289.923194][T17337] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1289.939912][T17337] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1289.956216][T17337] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1289.968063][T17337] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1289.988128][T17337] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1289.998231][T17337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.164156][T26895] gspca_zc3xx: reg_r err -71 [ 1290.183354][T26895] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1290.250476][T26895] usb 1-1: USB disconnect, device number 11 [ 1290.270513][T17337] usb 5-1: usb_control_msg returned -32 [ 1290.292352][T17337] usbtmc 5-1:16.0: can't read capabilities [ 1291.029765][T31171] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 1291.219022][T26895] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1291.306175][T17337] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1291.315678][T17337] hid-generic 0000:0000:0000.000E: unknown main item tag 0x2 [ 1291.323845][T17337] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1291.332818][T17337] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1291.340564][T17337] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1291.348109][T17337] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1291.357504][T17337] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1291.367992][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 1291.378184][T17337] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1291.386399][T17337] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1291.394028][T17337] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1291.404265][T26895] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1291.414637][T26895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.423036][T17337] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1291.434069][T26895] usb 4-1: Product: syz [ 1291.438386][T26895] usb 4-1: Manufacturer: syz [ 1291.443233][T26895] usb 4-1: SerialNumber: syz [ 1291.468737][T26895] usb 4-1: config 0 descriptor?? [ 1291.484981][T26895] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1291.512352][T26895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1291.532772][T26895] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1291.550425][T31200] fido_id[31200]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1291.564178][T26895] usb 4-1: media controller created [ 1291.592702][T26895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1291.655873][T26895] DVB: Unable to find symbol mt352_attach() [ 1291.695612][T31192] dvb-usb: bulk message failed: -22 (7/0) [ 1291.711539][T26895] DVB: Unable to find symbol nxt6000_attach() [ 1291.717905][T26895] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1291.736953][T26895] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 1291.761564][T26895] dvb-usb: schedule remote query interval to 1000 msecs. [ 1291.777515][T26895] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1291.788264][T26895] dvb-usb: bulk message failed: -22 (7/0) [ 1291.798009][T26895] dvb-usb: bulk message failed: -22 (7/0) [ 1291.813146][T26895] usb 4-1: USB disconnect, device number 16 [ 1291.944119][T26895] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1292.277652][T26895] usb 5-1: USB disconnect, device number 3 [ 1294.697424][T17337] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1294.829155][T26895] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1294.851272][T17337] usb 3-1: config 171 has an invalid interface number: 109 but max is 0 [ 1294.869541][T17337] usb 3-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.895119][T17337] usb 3-1: config 171 has no interface number 0 [ 1294.921192][T17337] usb 3-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1294.937659][T17337] usb 3-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 2560, setting to 64 [ 1294.949274][T17337] usb 3-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1294.969041][T17337] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1294.978336][T17337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.986647][T26895] usb 1-1: Using ep0 maxpacket: 8 [ 1294.995055][T17337] usb 3-1: Product: syz [ 1294.999976][T17337] usb 3-1: Manufacturer: syz [ 1295.011392][T26895] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1295.026227][T17337] usb 3-1: SerialNumber: syz [ 1295.031270][T26895] usb 1-1: config 14 has too many interfaces: 36, using maximum allowed: 32 [ 1295.040572][T26895] usb 1-1: config 14 has an invalid interface number: 156 but max is 35 [ 1295.050754][T26895] usb 1-1: config 14 has 1 interface, different from the descriptor's value: 36 [ 1295.062973][T31270] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1295.067882][T26895] usb 1-1: config 14 has no interface number 0 [ 1295.077129][T26895] usb 1-1: config 14 interface 156 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1295.099899][T26895] usb 1-1: config 14 interface 156 has no altsetting 0 [ 1295.111010][T26895] usb 1-1: language id specifier not provided by device, defaulting to English [ 1295.126018][T26895] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1295.135406][T26895] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1295.143642][T26895] usb 1-1: Product: syz [ 1295.147869][T26895] usb 1-1: SerialNumber: syz [ 1295.293420][T17337] ath6kl: Failed to submit usb control message: -71 [ 1295.300232][T17337] ath6kl: unable to send the bmi data to the device: -71 [ 1295.307376][T17337] ath6kl: Unable to send get target info: -71 [ 1295.328348][T17337] ath6kl: Failed to init ath6kl core: -71 [ 1295.344617][T17337] ath6kl_usb 3-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1295.385040][T26895] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:14.156/input/input16 [ 1295.396921][T17337] usb 3-1: USB disconnect, device number 13 [ 1295.439703][T26895] usb 1-1: USB disconnect, device number 12 [ 1295.439784][ C1] usb_acecad 1-1:14.156: can't resubmit intr, dummy_hcd.0-1/input0, status -19 [ 1295.518520][T31141] udevd[31141]: Error opening device "/dev/input/event4": No such file or directory [ 1295.538954][ T794] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1295.548576][T31141] udevd[31141]: Unable to EVIOCGABS device "/dev/input/event4" [ 1295.560238][T31141] udevd[31141]: Unable to EVIOCGABS device "/dev/input/event4" [ 1295.690874][ T794] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.701863][ T794] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1295.713180][ T794] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1295.722933][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1295.733377][ T794] usb 4-1: SerialNumber: syz [ 1295.963753][ T794] usb 4-1: 0:2 : does not exist [ 1295.992692][ T794] usb 4-1: USB disconnect, device number 17 [ 1296.058721][T30832] udevd[30832]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1296.113109][T21948] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1296.281297][T21948] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.292055][T21948] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1296.301525][T21948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.321028][T21948] usb 5-1: config 0 descriptor?? [ 1296.340655][T21948] pwc: Askey VC010 type 2 USB webcam detected. [ 1296.402031][ T5835] Bluetooth: hci2: command tx timeout [ 1296.640572][T31328] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10632'. [ 1296.942253][T21948] pwc: recv_control_msg error -71 req 02 val 2700 [ 1296.960472][T21948] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1296.979054][T21948] pwc: recv_control_msg error -71 req 04 val 1000 [ 1296.986020][T21948] pwc: recv_control_msg error -71 req 04 val 1300 [ 1296.997928][T21948] pwc: recv_control_msg error -71 req 04 val 1400 [ 1297.009448][T21948] pwc: recv_control_msg error -71 req 02 val 2000 [ 1297.016487][T21948] pwc: recv_control_msg error -71 req 02 val 2100 [ 1297.023899][T21948] pwc: recv_control_msg error -71 req 04 val 1500 [ 1297.031609][T21948] pwc: recv_control_msg error -71 req 02 val 2500 [ 1297.038527][T21948] pwc: recv_control_msg error -71 req 02 val 2400 [ 1297.049859][T21948] pwc: recv_control_msg error -71 req 02 val 2600 [ 1297.058505][T21948] pwc: recv_control_msg error -71 req 02 val 2900 [ 1297.069457][T21948] pwc: recv_control_msg error -71 req 02 val 2800 [ 1297.076647][T21948] pwc: recv_control_msg error -71 req 04 val 1100 [ 1297.085836][T21948] pwc: recv_control_msg error -71 req 04 val 1200 [ 1297.105653][T21948] pwc: Registered as video103. [ 1297.127255][T21948] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 1297.189106][T21948] usb 5-1: USB disconnect, device number 4 [ 1297.627012][ T5835] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 1297.709437][T31358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10646'. [ 1298.018993][T21948] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1298.181889][T31377] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 1298.191535][T21948] usb 4-1: Using ep0 maxpacket: 32 [ 1298.212101][T21948] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1298.239557][T21948] usb 4-1: config 0 has no interface number 0 [ 1298.246511][T21948] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1298.258636][T21948] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1298.275095][T21948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.298577][T21948] usb 4-1: Product: syz [ 1298.307595][T21948] usb 4-1: Manufacturer: syz [ 1298.320326][T21948] usb 4-1: SerialNumber: syz [ 1298.341337][T21948] usb 4-1: config 0 descriptor?? [ 1299.120956][T30006] hid_parser_main: 28 callbacks suppressed [ 1299.120979][T30006] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1299.161156][T30006] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1299.699957][T31403] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1299.707321][T31403] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1299.926288][T31411] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1299.933649][T31411] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1299.963718][T31415] syzkaller0: entered promiscuous mode [ 1299.970360][T31415] syzkaller0: entered allmulticast mode [ 1299.986849][T31411] vhci_hcd vhci_hcd.0: Device attached [ 1299.996647][T31412] vhci_hcd: connection closed [ 1300.001043][ T13] vhci_hcd vhci_hcd.0: stop threads [ 1300.013088][ T13] vhci_hcd vhci_hcd.0: release socket [ 1300.048001][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 1300.246206][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.253950][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.771267][T31440] syzkaller0: entered promiscuous mode [ 1300.776900][T31440] syzkaller0: entered allmulticast mode [ 1301.119292][T30006] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1301.291317][T30006] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.309308][T30006] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1301.333967][T30006] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1301.358990][T30006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1301.377410][T30006] usb 1-1: SerialNumber: syz [ 1301.403754][T21948] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1301.430275][T21948] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1301.438467][T21948] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1301.446305][T21948] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1301.470564][T21948] usb 4-1: USB disconnect, device number 18 [ 1301.576301][T31464] syzkaller0: entered promiscuous mode [ 1301.582349][T31464] syzkaller0: entered allmulticast mode [ 1301.601458][T30006] usb 1-1: 0:2 : does not exist [ 1301.613241][T30006] usb 1-1: unit 5: unexpected type 0x03 [ 1301.671258][T30006] usb 1-1: USB disconnect, device number 13 [ 1301.721102][T30832] udevd[30832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1301.944037][ T30] audit: type=1804 audit(2000000183.490:1303): pid=31470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.10694" name="/newroot/174/file0" dev="fuse" ino=1 res=1 errno=0 [ 1302.589442][T31489] syzkaller0: entered promiscuous mode [ 1302.599363][T31489] syzkaller0: entered allmulticast mode [ 1302.880080][ T794] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1302.890421][T17337] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1303.052504][ T794] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1303.063978][ T794] usb 1-1: not running at top speed; connect to a high speed hub [ 1303.072576][T17337] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1303.082443][T17337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.091155][T17337] usb 3-1: Product: syz [ 1303.095796][T17337] usb 3-1: Manufacturer: syz [ 1303.101018][ T794] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.110312][T21948] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1303.112074][T17337] usb 3-1: SerialNumber: syz [ 1303.123468][ T794] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1303.136160][ T794] usb 1-1: string descriptor 0 read error: -22 [ 1303.144286][T17337] usb 3-1: config 0 descriptor?? [ 1303.151981][ T794] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1303.164208][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.193107][ T794] usb 1-1: 0:2 : does not exist [ 1303.288946][T21948] usb 4-1: Using ep0 maxpacket: 8 [ 1303.301520][T21948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1303.315279][T21948] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1303.324631][T21948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.332810][T21948] usb 4-1: Product: syz [ 1303.337005][T21948] usb 4-1: Manufacturer: syz [ 1303.342781][T21948] usb 4-1: SerialNumber: syz [ 1303.360294][T21948] usb 4-1: config 0 descriptor?? [ 1303.573134][ T793] usb 4-1: USB disconnect, device number 19 [ 1303.586764][T17337] usb 3-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 1303.797602][T17337] usb 3-1: failed to fetch extended address, random address set [ 1303.860215][T17337] usb 3-1: USB disconnect, device number 14 [ 1304.027365][ T794] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1304.042111][ T794] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1304.056745][ T794] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 1304.090891][ T794] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1304.119279][ T794] usb 1-1: USB disconnect, device number 14 [ 1304.429646][T31519] syzkaller0: entered promiscuous mode [ 1304.435193][T31519] syzkaller0: entered allmulticast mode [ 1305.412160][T31554] syzkaller0: entered promiscuous mode [ 1305.420377][T31554] syzkaller0: entered allmulticast mode [ 1305.709309][ T793] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1305.872629][ T793] usb 1-1: Using ep0 maxpacket: 8 [ 1305.894029][ T793] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1305.926905][ T793] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1305.951548][ T793] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1305.974301][ T793] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1306.009670][ T793] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1306.057412][ T793] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1306.077870][T21948] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1306.115334][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.271305][T31565] netlink: 228 bytes leftover after parsing attributes in process `syz.3.10734'. [ 1306.290881][T21948] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1306.314132][T21948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1306.339839][T21948] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1306.358923][T21948] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1306.377297][T21948] usb 5-1: Manufacturer: syz [ 1306.389508][ T793] usb 1-1: usb_control_msg returned -32 [ 1306.395512][ T793] usbtmc 1-1:16.0: can't read capabilities [ 1306.415625][T21948] usb 5-1: config 0 descriptor?? [ 1306.668918][T21948] rc_core: IR keymap rc-hauppauge not found [ 1306.674927][T21948] Registered IR keymap rc-empty [ 1306.700691][T21948] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1306.716449][T21948] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 1306.796452][T31579] syzkaller0: entered promiscuous mode [ 1306.817070][T31579] syzkaller0: entered allmulticast mode [ 1306.858949][ T793] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1307.018923][ T793] usb 4-1: Using ep0 maxpacket: 16 [ 1307.036834][ T793] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.067745][ T793] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1307.088689][ T793] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1307.107655][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.145866][ T793] usb 4-1: Product: syz [ 1307.155570][ T793] usb 4-1: Manufacturer: syz [ 1307.170070][T31582] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 1307.176451][ T793] usb 4-1: SerialNumber: syz [ 1307.234487][T21948] usb 5-1: USB disconnect, device number 5 [ 1307.409969][ T793] usb 4-1: 0:2 : does not exist [ 1307.440857][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 1307.449063][ T793] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1307.536773][ T793] usb 4-1: USB disconnect, device number 20 [ 1307.625730][T30832] udevd[30832]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1307.917074][T31596] loop4: detected capacity change from 0 to 2560 [ 1307.929973][T30832] Buffer I/O error on dev loop4, logical block 0, async page read [ 1307.941973][T30832] Buffer I/O error on dev loop4, logical block 0, async page read [ 1307.950932][T30832] Buffer I/O error on dev loop4, logical block 0, async page read [ 1307.996222][T31596] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 1308.016315][T31596] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 1308.026504][T31599] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 1308.035333][T31599] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 1308.051018][T31596] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 1308.088073][T31601] syzkaller0: entered promiscuous mode [ 1308.102835][T31596] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 1308.111295][T31601] syzkaller0: entered allmulticast mode [ 1308.120331][T31596] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 1308.318989][ T794] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1308.471407][ T794] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1308.489699][ T794] usb 3-1: config 0 has no interface number 0 [ 1308.497333][ T794] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1308.518911][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.543135][ T794] usb 3-1: config 0 descriptor?? [ 1308.568256][ T794] usb 3-1: selecting invalid altsetting 1 [ 1308.583449][ T794] dvb_ttusb_budget: ttusb_init_controller: error [ 1308.591214][ T794] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1308.599070][ T793] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1308.675056][ T794] DVB: Unable to find symbol cx22700_attach() [ 1308.724305][ T794] DVB: Unable to find symbol tda10046_attach() [ 1308.736257][ T794] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1308.768952][ T793] usb 4-1: Using ep0 maxpacket: 8 [ 1308.780866][ T793] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 19910, setting to 64 [ 1308.799840][ T793] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1308.824899][ T794] usb 3-1: USB disconnect, device number 15 [ 1308.829779][ T793] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1308.860766][T26895] usb 1-1: USB disconnect, device number 15 [ 1308.872475][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.895637][ T793] usb 4-1: Product: syz [ 1308.905795][ T793] usb 4-1: Manufacturer: syz [ 1308.912524][ T793] usb 4-1: SerialNumber: syz [ 1308.944697][ T793] usb 4-1: config 0 descriptor?? [ 1308.975479][ T793] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1309.193227][ T793] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1309.227481][ T793] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1309.250305][T31627] syzkaller0: entered promiscuous mode [ 1309.255857][T31627] syzkaller0: entered allmulticast mode [ 1309.392598][ T793] usb 4-1: USB disconnect, device number 21 [ 1309.533674][T31634] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1310.118949][T26895] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1310.234467][T31653] dlm: no locking on control device [ 1310.315189][T26895] usb 5-1: Using ep0 maxpacket: 8 [ 1310.328261][T26895] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1310.336670][T26895] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1310.347361][T26895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1310.430696][T26895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1310.475582][T26895] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1310.491224][T26895] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1310.503864][T26895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.799702][T26895] usb 5-1: usb_control_msg returned -32 [ 1310.805368][T26895] usbtmc 5-1:16.0: can't read capabilities [ 1310.845268][T31670] usb usb8: usbfs: process 31670 (syz.3.10777) did not claim interface 0 before use [ 1311.332295][ T5144] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1311.594438][T31694] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000017: 0000 [#1] SMP KASAN PTI [ 1311.606472][T31694] KASAN: null-ptr-deref in range [0x00000000000000b8-0x00000000000000bf] [ 1311.614934][T31694] CPU: 1 UID: 0 PID: 31694 Comm: syz.0.10787 Not tainted syzkaller #0 PREEMPT(full) [ 1311.624402][T31694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1311.634481][T31694] RIP: 0010:put_pid_ns+0x37/0x2a0 [ 1311.639629][T31694] Code: 53 48 89 fb e8 0a ba 03 00 48 85 db 0f 84 e8 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d b3 d0 00 00 00 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 f9 12 6a 00 4d 8b 3e 31 ff 4c [ 1311.659256][T31694] RSP: 0018:ffffc9000bda7cd0 EFLAGS: 00010206 [ 1311.665355][T31694] RAX: ffffffff81be2646 RBX: ffffffffffffffea RCX: 0000000000080000 [ 1311.673350][T31694] RDX: ffffc900149eb000 RSI: 0000000000001da6 RDI: 0000000000001da7 [ 1311.681349][T31694] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1311.689350][T31694] R10: dffffc0000000000 R11: fffff520017b4f78 R12: dffffc0000000000 [ 1311.697344][T31694] R13: 0000000000000017 R14: 00000000000000ba R15: ffff888027cc52d0 [ 1311.705327][T31694] FS: 00007f1efb8906c0(0000) GS:ffff888125b78000(0000) knlGS:0000000000000000 [ 1311.714272][T31694] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1311.720865][T31694] CR2: 00007f1efb88ff98 CR3: 000000008a33c000 CR4: 00000000003526f0 [ 1311.728878][T31694] Call Trace: [ 1311.732178][T31694] [ 1311.735130][T31694] nsproxy_free+0x20f/0x7c0 [ 1311.739648][T31694] create_new_namespaces+0x47a/0x540 [ 1311.745035][T31694] unshare_nsproxy_namespaces+0x11c/0x170 [ 1311.750767][T31694] ksys_unshare+0x4c8/0x8c0 [ 1311.755377][T31694] ? __pfx_ksys_unshare+0x10/0x10 [ 1311.760414][T31694] __x64_sys_unshare+0x38/0x50 [ 1311.765192][T31694] do_syscall_64+0xfa/0xfa0 [ 1311.769720][T31694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.775802][T31694] ? clear_bhb_loop+0x60/0xb0 [ 1311.780490][T31694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.786389][T31694] RIP: 0033:0x7f1efa98f6c9 [ 1311.790821][T31694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1311.810438][T31694] RSP: 002b:00007f1efb890038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1311.818872][T31694] RAX: ffffffffffffffda RBX: 00007f1efabe5fa0 RCX: 00007f1efa98f6c9 [ 1311.826857][T31694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026020480 [ 1311.834838][T31694] RBP: 00007f1efaa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1311.842819][T31694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1311.850886][T31694] R13: 00007f1efabe6038 R14: 00007f1efabe5fa0 R15: 00007ffed99c9448 [ 1311.858876][T31694] [ 1311.861913][T31694] Modules linked in: [ 1311.866531][T31694] ---[ end trace 0000000000000000 ]--- [ 1311.897514][T31694] RIP: 0010:put_pid_ns+0x37/0x2a0 [ 1311.904100][T31694] Code: 53 48 89 fb e8 0a ba 03 00 48 85 db 0f 84 e8 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d b3 d0 00 00 00 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 f9 12 6a 00 4d 8b 3e 31 ff 4c [ 1311.925155][T31694] RSP: 0018:ffffc9000bda7cd0 EFLAGS: 00010206 [ 1311.932943][T31694] RAX: ffffffff81be2646 RBX: ffffffffffffffea RCX: 0000000000080000 [ 1311.940986][T31694] RDX: ffffc900149eb000 RSI: 0000000000001da6 RDI: 0000000000001da7 [ 1311.949107][T31694] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1311.957187][T31694] R10: dffffc0000000000 R11: fffff520017b4f78 R12: dffffc0000000000 [ 1311.965369][T31694] R13: 0000000000000017 R14: 00000000000000ba R15: ffff888027cc52d0 [ 1311.973434][T31694] FS: 00007f1efb8906c0(0000) GS:ffff888125b78000(0000) knlGS:0000000000000000 [ 1311.982753][T31694] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1311.989547][T31694] CR2: 00007f1efb86ef98 CR3: 000000008a33c000 CR4: 00000000003526f0 [ 1311.997688][T31694] Kernel panic - not syncing: Fatal exception [ 1312.004092][T31694] Kernel Offset: disabled [ 1312.008427][T31694] Rebooting in 86400 seconds..