last executing test programs: 25.972244227s ago: executing program 1 (id=4933): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000080009000104000008000b00000000"], 0x24}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f00000021c0)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000002180)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001fc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000001780)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001ec0)=[{&(0x7f0000001a00)=""/161, 0xa1}], 0x1}}], 0x90}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23.853228662s ago: executing program 1 (id=4942): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x15, 0x0, @val=@tracing}, 0x40) r2 = socket(0x22, 0x2, 0x1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000001000)) 23.784677786s ago: executing program 1 (id=4943): r0 = syz_io_uring_setup(0x7d0b, &(0x7f0000000440)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x34, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) write$binfmt_script(r3, &(0x7f00000000c0), 0x10f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r3, 0x0) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) 23.687311246s ago: executing program 1 (id=4945): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8000, &(0x7f0000000280)={0x0, 0x0, 0x20000}, 0x20) 22.809582607s ago: executing program 1 (id=4949): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) 22.13851697s ago: executing program 1 (id=4953): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000080009000104000008000b00000000"], 0x24}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f00000021c0)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000002180)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001fc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000001780)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001ec0)=[{&(0x7f0000001a00)=""/161, 0xa1}], 0x1}}], 0x90}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9.429294268s ago: executing program 0 (id=4991): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000069111200000000008510000002000000850000000500000095000000000000009500a505000000008a4203fc62d9edb70d269a0b11862aeadccb57bee9ea88797aaac93be4c92da3c0c21848d76d2dfe8c6669673ae22171cfb59f39346c908f8e4b2ebd0dde4d8236"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 9.428735384s ago: executing program 2 (id=4992): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x9d, &(0x7f0000000280)=""/157}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f01000000000000000000090581ce40000000000905820200000000000905"], 0x0) 9.427298911s ago: executing program 3 (id=4993): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 9.414734208s ago: executing program 4 (id=4994): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x50}, {0x20, 0x0, 0x0, 0xfffef038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 7.73065509s ago: executing program 0 (id=4995): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioprio_set$pid(0x1, 0x0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x8, 0x0, 0x0, r0, 0x0}]) 7.730442665s ago: executing program 2 (id=4996): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000c002, 0x0) r5 = dup(r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x17) r6 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r6, 0x4018480c, &(0x7f0000000080)={0x2}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0/file0\x00'}) ioprio_set$pid(0x1, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000140)=0x400, 0x4) ioctl(r7, 0x8b35, &(0x7f0000000040)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x3, 0x33a, 0x7e, &(0x7f00000001c0)=""/126}) read$FUSE(r0, 0x0, 0x0) 7.730342533s ago: executing program 3 (id=4997): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000080)={r3, 0x0, 0x0, 0x300, &(0x7f0000000040)}) 7.730252205s ago: executing program 4 (id=4998): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r1, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x600, 0x10000}) 6.008175249s ago: executing program 0 (id=4999): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000080)) 6.007766652s ago: executing program 3 (id=5000): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8}]}}}]}, 0x3c}}, 0x0) 6.007002394s ago: executing program 4 (id=5001): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffff526, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={r0, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0], 0x0, 0x74, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000014c0), &(0x7f0000001500), 0x8, 0x20, 0x8, 0x8, &(0x7f0000001540)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x3, 0x5, 0x45d, 0x0, 0x802, r1, 0x9, '\x00', r2, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xa8, 0x6, 0x0, 0x100, r1, 0x80, '\x00', r2, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x8}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@volatile={0xd, 0x0, 0x0, 0x9, 0x2}, @var={0xb, 0x0, 0x0, 0xe, 0x1, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000500)=""/208, 0x52, 0xd0, 0x0, 0x7}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000a40)=""/4096, 0x1000, 0x0, &(0x7f0000001a40)=""/4096, 0x1000}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x0, &(0x7f0000000240), &(0x7f00000002c0)='GPL\x00', 0xffffda12, 0x6f, &(0x7f0000000300)=""/111, 0x41000, 0x10, '\x00', r2, 0x34, r3, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x10, 0x80, 0x9}, 0x10, r4, 0xffffffffffffffff, 0x3, &(0x7f00000006c0)=[r5, r6, 0x1], &(0x7f0000000700)=[{0x0, 0x3, 0xa, 0x2}, {0x1, 0x1, 0xe, 0x4}, {0x2, 0x4, 0x4, 0x4}]}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r7, 0x400454c9, 0x1) ioctl$TUNATTACHFILTER(r7, 0x401054d5, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.119943634s ago: executing program 0 (id=5002): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000001440), 0x4) 4.119584597s ago: executing program 2 (id=5003): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0x24d, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000580)=0x0) syz_io_uring_setup(0x145f, &(0x7f0000000280), &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x5089, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x0, 0x0, 0x0, {{@in=@loopback}, {@in=@remote}, @in=@local}}, 0xf0}}, 0x0) 4.074638367s ago: executing program 3 (id=5004): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000069111200000000008510000002000000850000000500000095000000000000009500a505000000008a4203fc62d9edb70d269a0b11862aeadccb57bee9ea88797aaac93be4c92da3c0c21848d76d2dfe8c6669673ae22171cfb59f39346c908f8e4b2ebd0dde4d8236"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 4.074255631s ago: executing program 4 (id=5005): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8001, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f00000002c0)="3f79095bfdad6c134146ab4ebdfced33022adafdf14a58ff49954eca658939ebbf2650b255780fe9cf7efc7d33d82825c88b35cbeaac2808c95baf517a29f6b49f551f9b65341f8f79ea8a2179e00afe6f4a46bf754aa85df3ae8b473aaef2c8faf2f6cc0c33bc5b6b9ed318fbb05b86b4bcd22e1195a38c0bb356d092b97155bb7d15ded36fe020035bd791c1d15f7337e99ab1ce334c73d6e2f7163913241ef05fcc4165232d94087b6b30", 0xac}], 0x3, 0x0, 0x0) 2.135600309s ago: executing program 0 (id=5006): r0 = syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000040000040341d0a0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1, "18797792"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 2.135396227s ago: executing program 2 (id=5007): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.123830324s ago: executing program 3 (id=5008): bpf$MAP_CREATE_RINGBUF(0x1d, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) 2.123606635s ago: executing program 4 (id=5009): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioprio_set$pid(0x1, 0x0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x8, 0x0, 0x0, r0, 0x0}]) 2.093086233s ago: executing program 2 (id=5010): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000080)={r3, 0x0, 0x0, 0x300, &(0x7f0000000040)}) 1.897586ms ago: executing program 0 (id=5011): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000080)) 1.236104ms ago: executing program 2 (id=5012): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private}}, @in=@multicast2, {@in6=@dev, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {{@in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2, 0x60}}}}, 0x128}}, 0x0) 929.158µs ago: executing program 3 (id=5013): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) writev(r0, &(0x7f0000002140)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f00000020c0)='7', 0x1}], 0x2) 0s ago: executing program 4 (id=5014): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='rtc_irq_set_state\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r1, r2, 0x0) kernel console output (not intermixed with test programs): : The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.888813][ T5096] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 626.889491][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.904234][ T5096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.910311][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.927676][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.928682][ T5096] usb 2-1: config 0 descriptor?? [ 626.943847][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.946397][ T5096] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 626.965605][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.981233][T14883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.003034][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.015530][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.027220][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.040263][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.050189][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.060920][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.071724][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.082430][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.093992][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.105157][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.130020][T14883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.153731][T14883] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.164480][T14883] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.185873][T14883] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.200331][T14883] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.266021][T15062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.369875][ T5096] gspca_sonixj: reg_r err -71 [ 627.374688][ T5096] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 627.402057][ T2402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.417258][ T5096] usb 2-1: USB disconnect, device number 27 [ 627.434139][ T2402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.484480][ T2412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.502538][ T2412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.511097][T15062] veth0_vlan: entered promiscuous mode [ 627.561586][T15062] veth1_vlan: entered promiscuous mode [ 627.663459][T15062] veth0_macvtap: entered promiscuous mode [ 627.700653][T15062] veth1_macvtap: entered promiscuous mode [ 627.763296][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.790842][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.816290][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.838300][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.849030][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.860037][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.871446][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.883294][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.894352][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.905041][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.916907][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.930431][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.945067][T15062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.962411][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.982986][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.004038][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.035021][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.051384][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.072242][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.082390][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.095857][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.112422][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.124996][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.141720][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.160230][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.177766][T15062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.196419][ T45] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 628.246026][T15062] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.275356][T15062] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.299111][T15062] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.309371][T15062] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.426536][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 628.463943][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.494149][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.524080][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 628.535380][ T45] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 628.545235][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 628.555650][ T45] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 628.570377][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 628.603226][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.635574][ T2402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.654911][ T45] usb 1-1: Product: syz [ 628.679605][ T45] usb 1-1: Manufacturer: syz [ 628.684270][ T45] usb 1-1: SerialNumber: syz [ 628.698926][ T2402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.046098][ T2412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.158135][ T5141] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 629.222045][ T2412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.497570][ T45] cdc_ncm 1-1:1.0: bind() failure [ 629.515487][ T5141] usb 2-1: Using ep0 maxpacket: 8 [ 629.528074][ T5141] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 629.535695][ T5141] usb 2-1: can't read configurations, error -61 [ 629.543101][ T45] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 629.562006][ T45] cdc_ncm 1-1:1.1: bind() failure [ 629.574224][ T45] usb 1-1: USB disconnect, device number 31 [ 629.716546][ T5141] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 629.876801][ T29] audit: type=1326 audit(2000001225.797:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15330 comm="syz.4.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860f575bd9 code=0x7ffc0000 [ 629.906428][ T5141] usb 2-1: Using ep0 maxpacket: 8 [ 629.907691][ T29] audit: type=1326 audit(2000001225.797:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15330 comm="syz.4.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860f575bd9 code=0x7ffc0000 [ 629.933842][T15336] netlink: 'syz.3.3393': attribute type 4 has an invalid length. [ 629.950953][ T5141] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 629.968196][ T5141] usb 2-1: can't read configurations, error -61 [ 629.980160][ T5141] usb usb2-port1: attempt power cycle [ 630.396525][ T5141] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 631.200301][ T5141] usb 2-1: Using ep0 maxpacket: 8 [ 631.229444][ T5141] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 631.250806][ T5141] usb 2-1: can't read configurations, error -61 [ 631.416390][ T5141] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 631.472138][T15361] netlink: 'syz.2.3500': attribute type 1 has an invalid length. [ 631.472178][ T5141] usb 2-1: Using ep0 maxpacket: 8 [ 631.490219][T15361] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.3500'. [ 631.503500][T15361] nbd: couldn't find a device at index 64 [ 631.615078][T15366] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 631.626646][ T5141] usb 2-1: device descriptor read/all, error -71 [ 631.642823][ T5141] usb usb2-port1: unable to enumerate USB device [ 631.649524][T15366] PKCS7: Only support pkcs7_signedData type [ 631.863364][T15376] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3508'. [ 637.286784][T15412] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262395 (only 8 groups) [ 637.487678][T15414] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3522'. [ 637.613933][T15419] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3525'. [ 639.444736][T15453] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262395 (only 8 groups) [ 639.452396][ T5140] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 639.505426][T15456] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3539'. [ 639.664497][ T5140] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 639.779780][ T5140] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 639.911459][ T5140] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 640.232955][ T5140] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=66.21 [ 640.280987][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=22 [ 640.328134][ T5140] usb 3-1: SerialNumber: syz [ 640.354025][ T29] audit: type=1400 audit(2000001236.257:345): lsm=SMACK fn=smack_file_ioctl action=denied subject="I" object="_" requested=w pid=15458 comm="syz.3.3540" path="/sys/kernel/debug/sync/sw_sync" dev="debugfs" ino=1982 [ 640.372940][ T5140] usb 3-1: config 0 descriptor?? [ 641.082924][ T5217] usb 3-1: USB disconnect, device number 26 [ 642.216119][T15489] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3547'. [ 644.099879][ T5140] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 644.308280][ T5140] usb 2-1: config 0 has an invalid interface descriptor of length 8, skipping [ 644.331206][ T5140] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 644.353324][ T5140] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 644.381795][ T5140] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=66.21 [ 644.396308][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=22 [ 644.411300][ T5140] usb 2-1: SerialNumber: syz [ 644.419463][ T5140] usb 2-1: config 0 descriptor?? [ 644.557615][T15550] syz_tun: entered promiscuous mode [ 644.564399][T15550] macsec1: entered promiscuous mode [ 644.570196][T15550] macsec1: entered allmulticast mode [ 644.575857][T15550] syz_tun: entered allmulticast mode [ 644.589654][T15550] syz_tun: left allmulticast mode [ 644.595241][T15550] syz_tun: left promiscuous mode [ 644.976088][ T29] audit: type=1800 audit(2000001240.897:346): pid=15565 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3579" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 645.043667][ T29] audit: type=1326 audit(2000001240.927:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15556 comm="syz.4.3576" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f860f575bd9 code=0x0 [ 645.102832][ T5141] usb 2-1: USB disconnect, device number 32 [ 645.402516][ T5107] Bluetooth: hci2: unexpected event for opcode 0x0c14 [ 645.451419][T15578] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 645.464445][T15578] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 645.484028][T15578] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 645.520069][T15578] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 645.693142][ T29] audit: type=1804 audit(2000001241.617:348): pid=15588 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.3589" name="/newroot/438/bus/file0" dev="overlay" ino=2295 res=1 errno=0 [ 645.708286][T15590] netlink: 'syz.4.3590': attribute type 1 has an invalid length. [ 646.296413][T15607] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3594'. [ 646.533793][T15578] syz.3.3584: attempt to access beyond end of device [ 646.533793][T15578] loop3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 647.028184][T15578] F2FS-fs (loop3): Unable to read 1th superblock [ 647.085017][T15578] syz.3.3584: attempt to access beyond end of device [ 647.085017][T15578] loop3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 647.186863][T15578] F2FS-fs (loop3): Unable to read 2th superblock [ 648.324055][ T29] audit: type=1800 audit(2000001244.247:349): pid=15636 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3608" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 649.306030][T15668] netlink: 'syz.0.3617': attribute type 9 has an invalid length. [ 649.321631][T15669] overlayfs: failed to clone upperpath [ 649.322898][T15668] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3617'. [ 649.832983][T15705] netlink: 'syz.2.3633': attribute type 9 has an invalid length. [ 649.851749][T15705] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3633'. [ 649.901505][ T29] audit: type=1326 audit(2000001245.824:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15692 comm="syz.0.3629" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd64a775bd9 code=0x0 [ 650.034362][T15714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3636'. [ 650.692081][T15736] netlink: 'syz.4.3646': attribute type 9 has an invalid length. [ 650.730600][T15736] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3646'. [ 650.888659][T15747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3651'. [ 651.238732][T15772] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 651.359585][ T29] audit: type=1326 audit(2000001247.292:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15760 comm="syz.2.3658" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f953dd75bd9 code=0x0 [ 651.715821][T15797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3670'. [ 652.106550][ T5096] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 652.258497][ T5141] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 652.331486][ T5096] usb 5-1: config 0 has an invalid interface descriptor of length 8, skipping [ 652.353911][ T5096] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 652.369108][ T5096] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 652.390065][ T5096] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=66.21 [ 652.406285][ T5096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=22 [ 652.414758][ T5096] usb 5-1: SerialNumber: syz [ 652.430943][ T5096] usb 5-1: config 0 descriptor?? [ 652.477246][ T5141] usb 1-1: Using ep0 maxpacket: 8 [ 652.510876][ T5141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.535801][ T5141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.548746][ T5141] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 652.559722][ T5141] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 652.576445][ T5141] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 652.586897][ T5141] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 652.599419][ T5141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 652.618090][ T5141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.637301][ T5141] usb 1-1: Product: syz [ 652.641494][ T5141] usb 1-1: Manufacturer: syz [ 652.646100][ T5141] usb 1-1: SerialNumber: syz [ 652.957087][ T5141] cdc_ncm 1-1:1.0: bind() failure [ 652.981447][ T5141] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 653.003451][ T5141] cdc_ncm 1-1:1.1: bind() failure [ 653.047973][ T5141] usb 1-1: USB disconnect, device number 32 [ 653.243207][ T5140] usb 5-1: USB disconnect, device number 35 [ 653.834971][T15851] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3689'. [ 656.062696][ T29] audit: type=1326 audit(2000001251.322:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15869 comm="syz.2.3698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f953dd75bd9 code=0x0 [ 656.677129][ T5141] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 656.888529][ T5141] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping [ 656.923985][ T5141] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 656.952074][ T5141] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 656.980594][ T5141] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=66.21 [ 657.006760][ T5141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=22 [ 657.031047][ T5141] usb 4-1: SerialNumber: syz [ 657.050090][ T5141] usb 4-1: config 0 descriptor?? [ 657.386734][ T5105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 657.406328][ T5105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 657.415202][ T5105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 657.433936][ T5105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 657.445515][ T5105] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 657.456239][ T5105] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 657.690145][ T1052] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.915761][ T1052] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.943849][ T5141] usb 4-1: USB disconnect, device number 30 [ 658.193775][ T1052] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.324258][ T1052] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.389682][T15932] chnl_net:caif_netlink_parms(): no params data found [ 659.367350][T15978] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 659.375350][T15978] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 659.492203][T15982] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3735'. [ 659.520682][ T5105] Bluetooth: hci3: command tx timeout [ 659.854304][T15978] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 659.914037][T15978] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 660.197860][T15932] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.224978][T15932] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.237146][T15932] bridge_slave_0: entered allmulticast mode [ 660.263107][T15932] bridge_slave_0: entered promiscuous mode [ 660.302177][T15932] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.321192][T15932] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.332748][T15932] bridge_slave_1: entered allmulticast mode [ 660.343288][T15932] bridge_slave_1: entered promiscuous mode [ 660.399369][T15932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.413282][T15932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.445171][ T1052] bridge_slave_1: left allmulticast mode [ 660.456242][ T1052] bridge_slave_1: left promiscuous mode [ 660.462007][ T1052] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.481953][ T1052] bridge_slave_0: left allmulticast mode [ 660.491872][T15993] syz.2.3737: attempt to access beyond end of device [ 660.491872][T15993] loop2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 660.492394][ T1052] bridge_slave_0: left promiscuous mode [ 660.514378][T15993] F2FS-fs (loop2): Unable to read 1th superblock [ 660.522108][T15993] syz.2.3737: attempt to access beyond end of device [ 660.522108][T15993] loop2: rw=0, sector=8, nr_sectors = 8 limit=0 [ 660.526487][ T1052] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.553058][T15993] F2FS-fs (loop2): Unable to read 2th superblock [ 661.181253][ T1052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.192868][ T1052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.211346][ T1052] bond0 (unregistering): Released all slaves [ 661.243559][T15932] team0: Port device team_slave_0 added [ 661.260155][T15932] team0: Port device team_slave_1 added [ 661.325772][T15932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.333672][T15932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.360057][T15932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.399612][T15932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.407782][T15932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.433725][ C1] vkms_vblank_simulate: vblank timer overrun [ 661.441115][T15932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.500183][T15932] hsr_slave_0: entered promiscuous mode [ 661.512170][T15932] hsr_slave_1: entered promiscuous mode [ 661.518433][T15932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 661.526042][T15932] Cannot create hsr debugfs directory [ 661.593301][ T5105] Bluetooth: hci3: command tx timeout [ 661.628829][ T1052] hsr_slave_0: left promiscuous mode [ 661.634700][ T1052] hsr_slave_1: left promiscuous mode [ 661.646107][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.653996][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.661847][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.669350][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.693486][ T1052] veth1_macvtap: left promiscuous mode [ 661.699364][ T1052] veth0_macvtap: left promiscuous mode [ 661.705000][ T1052] veth1_vlan: left promiscuous mode [ 661.714751][ T1052] veth0_vlan: left promiscuous mode [ 662.406022][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3748'. [ 662.421029][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3748'. [ 662.929625][T16038] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3754'. [ 663.164058][ T1052] team0 (unregistering): Port device team_slave_1 removed [ 663.680628][ T5105] Bluetooth: hci3: command tx timeout [ 663.740992][ T1052] team0 (unregistering): Port device team_slave_0 removed [ 664.043594][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3763'. [ 664.653125][T16051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3760'. [ 664.737398][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3760'. [ 665.748414][ T5105] Bluetooth: hci3: command tx timeout [ 666.135006][T16107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3785'. [ 666.214738][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3785'. [ 666.276388][T16113] mmap: syz.3.3788 (16113): VmData 41660416 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 666.403572][T15932] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 666.438172][T15932] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 666.465697][T15932] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 666.497919][T15932] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 666.768645][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3795'. [ 666.876156][T15932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.904173][T15932] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.945567][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.952771][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.985401][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.992620][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.259603][T16152] veth2: entered allmulticast mode [ 667.448668][T16161] netlink: 5300 bytes leftover after parsing attributes in process `syz.0.3806'. [ 667.474769][T15932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.483380][T16161] openvswitch: netlink: IP tunnel dst address not specified [ 667.835747][T16181] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3808'. [ 667.860110][T16178] tap0: tun_chr_ioctl cmd 1074812118 [ 668.849430][T16199] netlink: 'syz.3.3816': attribute type 2 has an invalid length. [ 668.862619][T16199] netlink: 'syz.3.3816': attribute type 1 has an invalid length. [ 668.912447][T15932] veth0_vlan: entered promiscuous mode [ 668.950149][T15932] veth1_vlan: entered promiscuous mode [ 668.982144][T16202] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.3818'. [ 668.999142][T15932] veth0_macvtap: entered promiscuous mode [ 669.018081][T15932] veth1_macvtap: entered promiscuous mode [ 669.072702][T15932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.095941][T15932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.118319][T15932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.129452][T16202] openvswitch: netlink: IP tunnel dst address not specified [ 669.150217][T15932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.201322][T15932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.211877][T15932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.222819][T15932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.233553][T15932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.243439][T15932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.253994][T15932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.263897][T15932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.275819][T15932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.409127][T15932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.745880][T15932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.961458][T15932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.017355][T15932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.055307][T15932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.090211][T15932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.101770][T15932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.111699][T15932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.122270][T15932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.132857][T15932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.150811][T15932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.170223][T15932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.183896][T15932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.197997][T15932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.217859][T15932] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.234443][T15932] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.245168][T15932] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.264092][T15932] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.266372][ T5141] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 670.445888][ T2424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.454105][ T2424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.478127][ T5141] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 670.495873][ T5141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.519275][ T5141] usb 4-1: config 0 descriptor?? [ 670.531503][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.544611][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.737131][T16211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.756749][ T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 670.758137][T16211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.818265][ T5105] Bluetooth: hci2: link tx timeout [ 670.825084][ T5105] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 670.829876][T16211] Bluetooth: MGMT ver 1.22 [ 670.860919][ T5141] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 670.895688][ T5141] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 670.945397][ T5141] usb 4-1: USB disconnect, device number 31 [ 670.970409][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 670.987159][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.023899][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.036923][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 671.066967][T16243] netlink: 'syz.4.3833': attribute type 10 has an invalid length. [ 671.072972][ T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 671.093470][ T8] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 671.107581][T16243] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3833'. [ 671.177193][ T8] usb 2-1: Manufacturer: syz [ 671.192665][ T8] usb 2-1: config 0 descriptor?? [ 671.644621][ T8] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 671.662072][ T8] appleir 0003:05AC:8243.0015: No inputs registered, leaving [ 671.716580][ T8] appleir 0003:05AC:8243.0015: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 672.346383][ T5142] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 672.873063][ T5142] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.883753][ T5105] Bluetooth: hci2: command 0x0405 tx timeout [ 673.026644][ T5142] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 673.037454][ T5142] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 673.055153][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 673.063514][ T5142] usb 3-1: SerialNumber: syz [ 673.280597][T16274] netlink: 'syz.0.3845': attribute type 10 has an invalid length. [ 673.290664][ T5142] usb 3-1: 0:2 : does not exist [ 673.306615][T16274] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3845'. [ 673.334998][ T5142] usb 3-1: USB disconnect, device number 27 [ 673.786389][ T45] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 673.808611][ T5143] usb 2-1: USB disconnect, device number 33 [ 673.980351][ T45] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 674.013523][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.057991][ T45] usb 4-1: config 0 descriptor?? [ 674.295110][T16281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.295354][T16281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.324749][ T45] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 674.324808][ T45] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 674.349411][ T45] usb 4-1: USB disconnect, device number 32 [ 674.405865][T16295] loop0: detected capacity change from 0 to 7 [ 674.414795][T16295] loop0: [POWERTEC] [ 674.702639][T16306] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 674.904088][T16312] netlink: 'syz.1.3859': attribute type 10 has an invalid length. [ 674.912927][T16312] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3859'. [ 675.144996][T16317] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.3860'. [ 675.173892][T16317] openvswitch: netlink: IP tunnel dst address not specified [ 675.458164][T16329] loop0: detected capacity change from 0 to 7 [ 675.480101][T16329] loop0: [POWERTEC] [ 675.654351][T16335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3868'. [ 676.019412][T16345] netlink: 'syz.2.3871': attribute type 10 has an invalid length. [ 676.019430][T16345] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3871'. [ 676.476328][ T45] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 677.291440][T16349] delete_channel: no stack [ 677.509937][ T45] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 677.529881][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.555691][ T45] usb 3-1: config 0 descriptor?? [ 677.781490][T16347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.792431][T16347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.809075][ T45] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 677.816953][ T45] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 677.828571][ T45] usb 3-1: USB disconnect, device number 28 [ 678.556454][ T5140] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 678.788593][T16371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3880'. [ 678.836995][ T5140] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 678.874347][ T5140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.935444][ T5140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.982664][ T5140] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 679.026958][T16375] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 679.266851][ T5140] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 679.279339][ T5140] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 679.287492][ T5140] usb 5-1: Manufacturer: syz [ 679.294420][ T5140] usb 5-1: config 0 descriptor?? [ 679.694575][T16387] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 679.995436][ T5140] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 680.040049][ T5140] appleir 0003:05AC:8243.0016: No inputs registered, leaving [ 680.120721][ T5140] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 680.315838][T16403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3893'. [ 682.780315][T16416] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 683.048119][T16423] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 683.471104][T16455] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 683.708160][ T45] usb 5-1: reset high-speed USB device number 36 using dummy_hcd [ 683.800049][T16471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3921'. [ 683.812638][T16471] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3921'. [ 684.577390][T16503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3935'. [ 684.597478][T16503] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3935'. [ 685.750715][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.056963][ T5142] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 686.226629][ T5140] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 686.272843][ T5142] usb 1-1: string descriptor 0 read error: -22 [ 686.284123][ T5142] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 686.302652][ T5142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.319244][ T5142] usb 1-1: config 0 descriptor?? [ 686.386493][ T5140] usb 4-1: device descriptor read/64, error -71 [ 686.560716][T16539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3949'. [ 686.570458][T16539] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3949'. [ 686.656508][ T5140] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 687.426443][ T5140] usb 4-1: device descriptor read/64, error -71 [ 687.556901][ T5140] usb usb4-port1: attempt power cycle [ 687.576622][ T5142] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 687.732875][ T5142] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 687.742553][ T5142] dib0700: firmware download failed at 7 with -22 [ 687.765607][ T5142] usb 1-1: USB disconnect, device number 33 [ 687.976554][ T5140] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 688.015130][ T5140] usb 4-1: device descriptor read/8, error -71 [ 688.121138][T16564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3960'. [ 688.130746][T16564] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3960'. [ 688.286342][ T5140] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 688.344560][ T5140] usb 4-1: device descriptor read/8, error -71 [ 688.477730][ T5140] usb usb4-port1: unable to enumerate USB device [ 688.693536][T16593] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 688.746578][ T5143] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 688.957195][ T5143] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 688.971934][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.993524][ T5143] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 689.003009][ T5143] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 689.016981][ T5143] usb 3-1: Manufacturer: syz [ 689.033643][ T5143] usb 3-1: config 0 descriptor?? [ 689.062401][T11410] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 689.348022][ T5143] rc_core: IR keymap rc-hauppauge not found [ 689.354558][ T5143] Registered IR keymap rc-empty [ 689.366052][ T5143] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 689.378735][ T5143] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input25 [ 689.571349][T16617] TCP: TCP_TX_DELAY enabled [ 689.938708][T11410] usb 2-1: string descriptor 0 read error: -22 [ 690.045682][T16621] netlink: 'syz.4.3984': attribute type 2 has an invalid length. [ 690.069797][T11410] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 690.136887][T11410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.145344][ T5143] usb 3-1: USB disconnect, device number 29 [ 690.184912][T11410] usb 2-1: config 0 descriptor?? [ 691.852642][ T5142] usb 5-1: USB disconnect, device number 36 [ 691.904112][T16633] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3988'. [ 692.287095][T11410] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 692.298789][T11410] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 692.307054][T11410] dib0700: firmware download failed at 7 with -22 [ 692.317247][T11410] usb 2-1: USB disconnect, device number 34 [ 692.616682][T16667] xt_CONNSECMARK: invalid mode: 0 [ 693.635589][T16681] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4007'. [ 695.186955][ T5142] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 695.376333][ T5142] usb 1-1: Using ep0 maxpacket: 32 [ 695.388578][ T5142] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 695.410748][ T5142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.424426][T16723] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4020'. [ 695.445245][ T5142] usb 1-1: config 0 descriptor?? [ 695.457553][ T5142] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 695.482845][ T5142] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 695.505543][ T5142] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 695.526603][ T5142] usb 1-1: media controller created [ 695.569547][ T5142] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 695.622924][ T5142] usb 1-1: selecting invalid altsetting 1 [ 695.629675][ T5142] set interface failed [ 695.632365][ T5142] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 695.636698][T11410] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 695.637530][ T5142] error writing reg: 0xff, val: 0x00 [ 695.723447][ T5142] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 695.784390][ T5142] usb 1-1: USB disconnect, device number 34 [ 695.835985][T11410] usb 3-1: string descriptor 0 read error: -22 [ 695.851081][T11410] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 695.863149][T11410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.877863][T11410] usb 3-1: config 0 descriptor?? [ 696.497148][T11410] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 696.523560][T11410] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 696.544375][T11410] dib0700: firmware download failed at 7 with -22 [ 696.561215][T11410] usb 3-1: USB disconnect, device number 30 [ 702.578066][ T45] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 702.962390][ T45] usb 1-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 702.984558][T16827] xt_CONNSECMARK: invalid mode: 0 [ 702.986339][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.025276][ T45] usb 1-1: config 0 descriptor?? [ 703.121238][ T45] usb-storage 1-1:0.0: USB Mass Storage device detected [ 703.131809][T16841] xt_CT: You must specify a L4 protocol and not use inversions on it [ 703.170938][ T45] usb-storage 1-1:0.0: Quirks match for vid 0781 pid 0100: 1 [ 703.394477][T16821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.418869][T16821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.718026][ T45] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 703.906415][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 703.920074][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 703.956617][ T45] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 703.966497][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.975092][ T45] usb 5-1: Product: syz [ 703.979691][ T45] usb 5-1: Manufacturer: syz [ 703.984821][ T45] usb 5-1: SerialNumber: syz [ 703.992735][ T45] usb 5-1: config 0 descriptor?? [ 704.002545][ T45] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 704.012017][ T45] usb 5-1: Detected FT232R [ 704.220702][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 704.449351][ T45] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 704.925584][ T45] usb 5-1: USB disconnect, device number 37 [ 704.960973][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 704.986429][ T45] ftdi_sio 5-1:0.0: device disconnected [ 705.141504][ T5143] usb 1-1: USB disconnect, device number 35 [ 705.309467][T16882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 705.760025][T16887] bridge: RTM_NEWNEIGH with invalid ether address [ 705.844345][T16893] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 705.851694][T16893] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 705.858167][T16893] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 705.864637][T16893] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 705.871303][T16893] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 705.877744][T16893] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 705.884331][T16893] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 705.890749][T16893] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 705.897226][T16893] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 705.903638][T16893] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 706.566080][ T29] audit: type=1326 audit(2000001302.492:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16909 comm="syz.1.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57575bd9 code=0x7ffc0000 [ 706.632261][ T29] audit: type=1326 audit(2000001302.522:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16909 comm="syz.1.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f1b57575bd9 code=0x7ffc0000 [ 706.702088][T16916] xt_CT: You must specify a L4 protocol and not use inversions on it [ 706.710378][ T29] audit: type=1326 audit(2000001302.522:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16909 comm="syz.1.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57575bd9 code=0x7ffc0000 [ 706.761827][ T29] audit: type=1326 audit(2000001302.522:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16909 comm="syz.1.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1b5757475f code=0x7ffc0000 [ 706.818274][ T29] audit: type=1326 audit(2000001302.522:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16909 comm="syz.1.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57575bd9 code=0x7ffc0000 [ 706.868929][ T29] audit: type=1326 audit(2000001302.522:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16909 comm="syz.1.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1b57575bd9 code=0x7ffc0000 [ 706.918315][ T29] audit: type=1326 audit(2000001302.522:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16909 comm="syz.1.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57575bd9 code=0x7ffc0000 [ 707.031560][ T29] audit: type=1326 audit(2000001302.522:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16909 comm="syz.1.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57575bd9 code=0x7ffc0000 [ 707.126926][ T5143] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 707.348587][ T5143] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.366267][ T5143] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 707.597222][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.608098][ T5143] usb 2-1: config 0 descriptor?? [ 707.864395][ T5143] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 708.934068][ T29] audit: type=1326 audit(2000001304.862:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16950 comm="syz.0.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64a775bd9 code=0x7ffc0000 [ 708.992146][ T29] audit: type=1326 audit(2000001304.862:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16950 comm="syz.0.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64a775bd9 code=0x7ffc0000 [ 709.089400][T16955] xt_CT: You must specify a L4 protocol and not use inversions on it [ 709.201263][T16962] ieee802154 phy0 wpan0: encryption failed: -22 [ 709.235373][T16963] overlayfs: missing 'lowerdir' [ 709.750695][ T5142] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 709.936324][ T5142] usb 1-1: Using ep0 maxpacket: 32 [ 709.960689][ T5142] usb 1-1: config 1 interface 0 altsetting 249 bulk endpoint 0x82 has invalid maxpacket 16 [ 710.057130][ T5142] usb 1-1: config 1 interface 0 altsetting 249 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 710.247971][ T5142] usb 1-1: config 1 interface 0 has no altsetting 0 [ 710.344874][ T5142] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 710.511921][ T5141] usb 2-1: USB disconnect, device number 35 [ 710.526409][ T5142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.572393][ T5142] usb 1-1: Product: ÑŠ [ 710.591794][ T5142] usb 1-1: Manufacturer: й [ 710.648455][T16966] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 710.655816][T16966] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 710.689172][T16988] ieee802154 phy0 wpan0: encryption failed: -22 [ 711.058359][ T5142] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 711.083820][ T5142] usb 1-1: USB disconnect, device number 36 [ 711.111883][T16997] overlayfs: missing 'lowerdir' [ 711.286425][ T5141] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 711.568436][ T5141] usb 2-1: Using ep0 maxpacket: 32 [ 711.778228][ T5141] usb 2-1: New USB device found, idVendor=13d3, idProduct=3311, bcdDevice=ea.d7 [ 711.806457][ T5141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.844988][ T5141] usb 2-1: Product: syz [ 711.855322][ T5141] usb 2-1: Manufacturer: syz [ 711.875500][ T5141] usb 2-1: SerialNumber: syz [ 711.918315][ T5141] usb 2-1: config 0 descriptor?? [ 711.947627][ T5141] r8712u: register rtl8712_netdev_ops to netdev_ops [ 711.975875][ T5141] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 712.269521][ T5141] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 712.292668][ T5141] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 712.301503][ T5141] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 712.331609][ T5141] usb 2-1: USB disconnect, device number 36 [ 712.726711][T11410] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 713.003127][T11410] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.281858][T11410] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 713.319205][T11410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.424504][T11410] usb 4-1: config 0 descriptor?? [ 713.480082][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 713.480124][ T29] audit: type=1326 audit(2000001309.412:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17034 comm="syz.1.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57575bd9 code=0x7ffc0000 [ 713.513415][ T29] audit: type=1326 audit(2000001309.412:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17034 comm="syz.1.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57575bd9 code=0x7ffc0000 [ 713.570559][ T29] audit: type=1326 audit(2000001309.442:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17034 comm="syz.1.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f1b57575bd9 code=0x7ffc0000 [ 713.616899][T17040] netlink: 'syz.4.4133': attribute type 5 has an invalid length. [ 713.625213][ T29] audit: type=1326 audit(2000001309.442:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17034 comm="syz.1.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57575bd9 code=0x7ffc0000 [ 713.635120][T17040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4133'. [ 713.677934][T11410] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 713.688837][ T29] audit: type=1326 audit(2000001309.442:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17034 comm="syz.1.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57575bd9 code=0x7ffc0000 [ 713.731781][ T29] audit: type=1326 audit(2000001309.442:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17034 comm="syz.1.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1b5757475f code=0x7ffc0000 [ 713.785493][ T29] audit: type=1326 audit(2000001309.442:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17034 comm="syz.1.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57575bd9 code=0x7ffc0000 [ 713.809048][ T29] audit: type=1326 audit(2000001309.442:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17034 comm="syz.1.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57575bd9 code=0x7ffc0000 [ 713.832078][ T29] audit: type=1326 audit(2000001309.442:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17034 comm="syz.1.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1b57575bd9 code=0x7ffc0000 [ 713.932249][ T29] audit: type=1326 audit(2000001309.442:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17034 comm="syz.1.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57575bd9 code=0x7ffc0000 [ 715.591351][T11410] usb 4-1: USB disconnect, device number 37 [ 715.784633][T17062] overlayfs: workdir and upperdir must be separate subtrees [ 716.272107][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a4e3000: rx timeout, send abort [ 716.280758][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a4e1400: rx timeout, send abort [ 716.296601][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a4e3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 716.311618][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a4e1400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 716.843167][T17066] delete_channel: no stack [ 717.057152][T17086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.089025][T17090] overlayfs: workdir and upperdir must be separate subtrees [ 719.900994][T17119] delete_channel: no stack [ 720.109243][T17127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 720.250507][T17132] overlayfs: workdir and upperdir must be separate subtrees [ 720.473065][T17147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4174'. [ 721.057211][T17175] overlayfs: workdir and upperdir must be separate subtrees [ 721.586758][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 721.853122][T17207] overlayfs: workdir and upperdir must be separate subtrees [ 721.958353][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 721.958374][ T29] audit: type=1326 audit(2000001317.892:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17208 comm="syz.4.4202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa905175bd9 code=0x0 [ 723.512107][T17237] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 724.378366][T17249] overlayfs: workdir and upperdir must be separate subtrees [ 724.556353][ T5105] Bluetooth: hci3: command 0x0405 tx timeout [ 726.790150][T17283] Bluetooth: hci3: unsupported parameter 65535 [ 726.807779][T17283] Bluetooth: hci3: invalid len left 4, exp >= 35 [ 727.107587][T17288] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 727.132318][ T5140] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 727.351720][ T5140] usb 4-1: Using ep0 maxpacket: 16 [ 727.380855][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 727.469290][ T5140] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 727.545247][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.683056][T17293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.709022][ T5140] usb 4-1: config 0 descriptor?? [ 728.349647][T17277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.388542][T17277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.418814][ T5140] hid (null): unknown global tag 0xa5 [ 728.436507][ T5140] hid (null): unknown global tag 0xd [ 728.459387][ T5140] hid (null): unknown global tag 0xc [ 728.476576][ T5141] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 728.493466][ T5140] hid-generic 0003:0158:0100.0017: unknown main item tag 0x1 [ 728.518175][ T5140] hid-generic 0003:0158:0100.0017: unexpected long global item [ 728.538775][ T5140] hid-generic 0003:0158:0100.0017: probe with driver hid-generic failed with error -22 [ 728.653025][T17309] netlink: 'syz.4.4239': attribute type 5 has an invalid length. [ 728.682674][T17277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.712621][ T5141] usb 3-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 728.725031][T17277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.756232][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.792066][ T5217] usb 4-1: USB disconnect, device number 38 [ 728.794847][ T5141] usb 3-1: config 0 descriptor?? [ 728.817702][T17313] Bluetooth: hci3: unsupported parameter 65535 [ 728.819713][ T5141] usb-storage 3-1:0.0: USB Mass Storage device detected [ 728.831070][T17313] Bluetooth: hci3: invalid len left 4, exp >= 35 [ 728.904711][ T5141] usb-storage 3-1:0.0: Quirks match for vid 0781 pid 0100: 1 [ 729.113294][T17297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.125783][T17297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.222079][T17329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.249233][T17329] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 729.255888][T17329] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 729.256030][T17333] tun0: tun_chr_ioctl cmd 1074812118 [ 729.278113][T17329] vhci_hcd vhci_hcd.0: Device attached [ 729.288309][T17334] usbip_core: unknown command [ 729.306231][T17334] vhci_hcd: unknown pdu 3020988904 [ 729.322341][T17334] usbip_core: unknown command [ 729.342491][ T11] vhci_hcd: stop threads [ 729.348838][ T11] vhci_hcd: release socket [ 729.426776][ T11] vhci_hcd: disconnect device [ 730.193552][T17360] tun0: tun_chr_ioctl cmd 1074812118 [ 730.586284][ T5217] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 730.809912][ T5217] usb 2-1: Using ep0 maxpacket: 16 [ 730.946481][ T5217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 731.078206][ T5217] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 731.276326][ T5217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.292752][ T5217] usb 2-1: config 0 descriptor?? [ 731.340093][ T5141] usb 3-1: USB disconnect, device number 31 [ 731.837552][T17390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.890771][T17364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.906103][T17385] netlink: 'syz.4.4272': attribute type 2 has an invalid length. [ 731.912897][T17364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.927986][T17394] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 731.934542][T17394] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 731.942510][T17385] netlink: 'syz.4.4272': attribute type 1 has an invalid length. [ 731.961050][ T5217] hid (null): unknown global tag 0xa5 [ 731.963507][T17394] vhci_hcd vhci_hcd.0: Device attached [ 731.969657][ T5217] hid (null): unknown global tag 0xd [ 731.977624][T17385] netlink: 614 bytes leftover after parsing attributes in process `syz.4.4272'. [ 731.987292][ T5217] hid (null): unknown global tag 0xc [ 731.994034][ T5217] hid-generic 0003:0158:0100.0018: unknown main item tag 0x1 [ 732.009787][ T5217] hid-generic 0003:0158:0100.0018: unexpected long global item [ 732.021247][T17395] usbip_core: unknown command [ 732.026077][T17395] vhci_hcd: unknown pdu 3020988904 [ 732.042372][ T5217] hid-generic 0003:0158:0100.0018: probe with driver hid-generic failed with error -22 [ 732.052464][T17395] usbip_core: unknown command [ 732.063151][ T2424] vhci_hcd: stop threads [ 732.069633][ T2424] vhci_hcd: release socket [ 732.088522][ T2424] vhci_hcd: disconnect device [ 732.135972][T17398] netlink: 'syz.0.4274': attribute type 2 has an invalid length. [ 732.217024][T17364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.239598][T17364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.269109][ T5217] usb 2-1: USB disconnect, device number 37 [ 732.333024][T17401] tun0: tun_chr_ioctl cmd 1074812118 [ 732.448344][T17403] netlink: 'syz.4.4276': attribute type 21 has an invalid length. [ 732.457722][T17403] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4276'. [ 735.362796][T17418] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 736.028837][T17424] netlink: 'syz.3.4284': attribute type 1 has an invalid length. [ 736.158445][T17424] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4284'. [ 736.425640][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4284'. [ 736.435838][T17429] netlink: 'syz.1.4285': attribute type 2 has an invalid length. [ 736.458104][T17429] netlink: 766 bytes leftover after parsing attributes in process `syz.1.4285'. [ 736.774708][T17445] binder: 17444:17445 ioctl 4018620d 0 returned -22 [ 736.913727][T17453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.120751][T17453] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 737.127347][T17453] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 737.136027][T17453] vhci_hcd vhci_hcd.0: Device attached [ 737.399788][T17461] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 738.135511][ T5142] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 738.211196][T17457] vhci_hcd: connection closed [ 738.211522][ T2412] vhci_hcd: stop threads [ 738.236405][T11410] usb 16-1: SetAddress Request (2) to port 0 [ 738.242507][T11410] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 738.250133][ T2412] vhci_hcd: release socket [ 738.275811][ T2412] vhci_hcd: disconnect device [ 738.326993][ T5142] usb 2-1: Using ep0 maxpacket: 16 [ 738.334148][T11410] usb 16-1: enqueue for inactive port 0 [ 738.344259][ T5142] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 738.378309][ T5142] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 738.406262][ T5142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.424378][ T5142] usb 2-1: config 0 descriptor?? [ 738.767820][T11410] usb usb16-port1: attempt power cycle [ 738.856542][ T5140] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 738.953300][T17451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.000633][T17451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.038151][ T5142] hid (null): unknown global tag 0xa5 [ 739.059800][ T5142] hid (null): unknown global tag 0xd [ 739.067395][ T5142] hid (null): unknown global tag 0xc [ 739.082121][ T5142] hid-generic 0003:0158:0100.0019: unknown main item tag 0x1 [ 739.100390][ T5140] usb 3-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 739.106331][ T5105] Bluetooth: hci2: command 0x0405 tx timeout [ 739.132314][ T5142] hid-generic 0003:0158:0100.0019: unexpected long global item [ 739.147040][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.180317][ T5142] hid-generic 0003:0158:0100.0019: probe with driver hid-generic failed with error -22 [ 739.198984][ T5140] usb 3-1: config 0 descriptor?? [ 739.212167][ T5140] usb-storage 3-1:0.0: USB Mass Storage device detected [ 739.233847][ T5140] usb-storage 3-1:0.0: Quirks match for vid 0781 pid 0100: 1 [ 739.354886][T17451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.408287][T17451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.428786][T11410] usb usb16-port1: unable to enumerate USB device [ 739.617500][T17481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.626063][T17481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.704284][T17495] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 739.748595][ T5140] usb 2-1: USB disconnect, device number 38 [ 740.641603][T17501] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 741.526508][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4323'. [ 741.558135][T11410] usb 3-1: USB disconnect, device number 32 [ 741.571432][T17531] vxlan0: entered allmulticast mode [ 742.697770][T17547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4333'. [ 743.430691][T17574] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 744.255727][T17582] bridge_slave_0: default FDB implementation only supports local addresses [ 744.929761][T17611] bridge_slave_0: default FDB implementation only supports local addresses [ 745.109975][T17616] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 746.864637][T17654] bridge_slave_0: default FDB implementation only supports local addresses [ 747.139338][ T5140] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 747.201147][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.300727][ T51] bridge_slave_1: left allmulticast mode [ 747.326235][ T51] bridge_slave_1: left promiscuous mode [ 747.332101][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.349909][ T5140] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 747.383267][ T51] bridge_slave_0: left allmulticast mode [ 747.384904][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.406558][ T51] bridge_slave_0: left promiscuous mode [ 747.413063][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.423884][ T5140] usb 5-1: config 0 descriptor?? [ 747.449251][ T5140] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 747.698712][ T5142] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 747.899249][ T5142] usb 2-1: Using ep0 maxpacket: 32 [ 747.930569][ T5142] usb 2-1: New USB device found, idVendor=13d3, idProduct=3311, bcdDevice=ea.d7 [ 747.940010][ T5142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.950457][ T5142] usb 2-1: Product: syz [ 747.954843][ T5142] usb 2-1: Manufacturer: syz [ 747.959601][ T5142] usb 2-1: SerialNumber: syz [ 747.969510][ T5142] usb 2-1: config 0 descriptor?? [ 747.984765][ T5142] r8712u: register rtl8712_netdev_ops to netdev_ops [ 747.991620][ T5142] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 748.021139][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.035080][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.048893][ T51] bond0 (unregistering): Released all slaves [ 748.067908][T17682] bridge_slave_0: default FDB implementation only supports local addresses [ 748.261647][ T5140] gspca_cpia1: usb_control_msg 02, error -71 [ 748.290562][ T5140] gspca_cpia1: usb_control_msg 05, error -71 [ 748.319387][ T5140] gspca_cpia1: usb_control_msg 04, error -71 [ 748.328853][ T5140] cpia1 5-1:0.0: probe with driver cpia1 failed with error -71 [ 748.359404][ T5140] usb 5-1: USB disconnect, device number 38 [ 748.377437][ T5142] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 748.384117][ T5142] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 748.424477][ T5142] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 748.451498][ T5142] usb 2-1: USB disconnect, device number 39 [ 748.787137][ T51] hsr_slave_0: left promiscuous mode [ 748.807133][ T51] hsr_slave_1: left promiscuous mode [ 748.829375][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.849235][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.869096][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.926553][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.045638][ T51] veth1_macvtap: left promiscuous mode [ 749.097600][ T51] veth0_macvtap: left promiscuous mode [ 749.111625][ T51] veth1_vlan: left promiscuous mode [ 749.129259][ T51] veth0_vlan: left promiscuous mode [ 749.417035][ T5142] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 749.649545][ T5142] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 749.681744][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.691449][T17726] support for the xor transformation has been removed. [ 749.721559][ T5142] usb 3-1: config 0 descriptor?? [ 749.753516][ T5142] cp210x 3-1:0.0: cp210x converter detected [ 750.404686][ T5142] usb 3-1: cp210x converter now attached to ttyUSB0 [ 750.832310][ T5142] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 751.091481][ T5142] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.145755][ T5142] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 751.155971][ T5142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.169809][ T5142] usb 1-1: config 0 descriptor?? [ 751.177939][ T5142] rndis_host 1-1:0.0: invalid descriptor buffer length [ 751.201325][ T5142] usb 1-1: bad CDC descriptors [ 751.530215][ T51] team0 (unregistering): Port device team_slave_1 removed [ 751.609556][ T51] team0 (unregistering): Port device team_slave_0 removed [ 752.311527][T17710] Falling back ldisc for ptm0. [ 752.313114][ T5217] usb 3-1: USB disconnect, device number 33 [ 752.369165][ T5217] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 752.419929][ T5217] cp210x 3-1:0.0: device disconnected [ 752.449132][ T29] audit: type=1326 audit(2000001348.344:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17736 comm="syz.2.4407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f953dd75bd9 code=0x0 [ 752.586980][T17726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4403'. [ 752.635149][T17731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4405'. [ 752.696932][T17740] netlink: 'syz.4.4408': attribute type 11 has an invalid length. [ 752.863863][T17748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4412'. [ 752.904629][T17744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4410'. [ 753.306276][ T5217] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 753.385238][ T5143] usb 1-1: USB disconnect, device number 37 [ 753.815199][ T5217] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 753.929602][ T5217] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 753.986570][ T5217] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 753.995671][ T5217] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 754.070987][ T5217] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 754.086759][ T5217] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 754.103997][ T5217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.237449][T17772] support for the xor transformation has been removed. [ 754.245349][T17774] netlink: 'syz.0.4421': attribute type 11 has an invalid length. [ 754.246437][T17772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4420'. [ 754.298563][ T5140] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 754.438232][ T5142] usb 2-1: USB disconnect, device number 40 [ 754.512285][ T5140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 755.374954][ T5140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 755.428060][ T5141] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 755.464264][T17790] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4425'. [ 755.473563][T17790] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4425'. [ 756.385595][ T5140] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 756.403245][ T5141] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.473357][ T5141] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 756.489978][ T5140] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 756.500550][ T5141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.509372][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.527467][ T5141] usb 4-1: config 0 descriptor?? [ 756.535836][ T5140] usb 3-1: config 0 descriptor?? [ 756.553833][ T5141] rndis_host 4-1:0.0: invalid descriptor buffer length [ 756.568299][T17761] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 756.608442][ T5141] usb 4-1: bad CDC descriptors [ 756.649270][T17795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4427'. [ 757.036049][ T5140] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 757.070810][ T5140] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 757.107738][T17812] support for the xor transformation has been removed. [ 757.119470][T17812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4434'. [ 757.131612][ T5140] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 757.394871][T11410] usb 3-1: USB disconnect, device number 34 [ 757.924638][ T5140] usb 4-1: USB disconnect, device number 39 [ 759.526650][T11410] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 759.563707][T17851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4452'. [ 759.586021][T17851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4452'. [ 759.719817][T11410] usb 2-1: config 0 has no interfaces? [ 759.743579][T11410] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 759.767887][T11410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.789654][T11410] usb 2-1: config 0 descriptor?? [ 759.791853][T17856] support for the xor transformation has been removed. [ 759.818367][T17856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4454'. [ 759.994166][T17863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4458'. [ 760.006702][T17863] netlink: 'syz.2.4458': attribute type 1 has an invalid length. [ 760.042734][T17863] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4458'. [ 760.218872][T17838] syz.4.4447: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 760.260172][T17838] CPU: 1 PID: 17838 Comm: syz.4.4447 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 760.270394][T17838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 760.280490][T17838] Call Trace: [ 760.283789][T17838] [ 760.286710][T17838] dump_stack_lvl+0x241/0x360 [ 760.291412][T17838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 760.296611][T17838] ? __pfx__printk+0x10/0x10 [ 760.301203][T17838] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 760.307616][T17838] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 760.314136][T17838] warn_alloc+0x278/0x410 [ 760.318500][T17838] ? __pfx_warn_alloc+0x10/0x10 [ 760.323365][T17838] ? vb2_vmalloc_alloc+0xf2/0x340 [ 760.328409][T17838] ? __get_vm_area_node+0x23d/0x270 [ 760.333639][T17838] __vmalloc_node_range_noprof+0x69f/0x1460 [ 760.339557][T17838] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 760.345887][T17838] ? __kasan_kmalloc+0x98/0xb0 [ 760.350667][T17838] ? vb2_vmalloc_alloc+0xb5/0x340 [ 760.355696][T17838] vmalloc_user_noprof+0x74/0x80 [ 760.360642][T17838] ? vb2_vmalloc_alloc+0xf2/0x340 [ 760.365665][T17838] vb2_vmalloc_alloc+0xf2/0x340 [ 760.370550][T17838] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 760.376009][T17838] __vb2_queue_alloc+0xa0f/0x16f0 [ 760.381056][T17838] vb2_core_reqbufs+0xd2e/0x17c0 [ 760.386050][T17838] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 760.391472][T17838] v4l2_m2m_ioctl_reqbufs+0x14e/0x230 [ 760.396854][T17838] __video_do_ioctl+0xc26/0xde0 [ 760.401712][T17838] ? __pfx___video_do_ioctl+0x10/0x10 [ 760.407080][T17838] ? smack_log+0x123/0x540 [ 760.411504][T17838] ? __might_fault+0xc6/0x120 [ 760.416210][T17838] video_usercopy+0x89b/0x1180 [ 760.421004][T17838] ? __pfx___video_do_ioctl+0x10/0x10 [ 760.426374][T17838] ? __pfx_video_usercopy+0x10/0x10 [ 760.431591][T17838] ? smack_file_ioctl+0x2fa/0x3a0 [ 760.436648][T17838] ? __fget_files+0x3f6/0x470 [ 760.441326][T17838] ? __fget_files+0x29/0x470 [ 760.445922][T17838] v4l2_ioctl+0x18c/0x1e0 [ 760.450273][T17838] ? __pfx_v4l2_ioctl+0x10/0x10 [ 760.455133][T17838] __se_sys_ioctl+0xfc/0x170 [ 760.459741][T17838] do_syscall_64+0xf3/0x230 [ 760.464253][T17838] ? clear_bhb_loop+0x35/0x90 [ 760.468934][T17838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.474836][T17838] RIP: 0033:0x7fa905175bd9 [ 760.479267][T17838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.498919][T17838] RSP: 002b:00007fa905ec7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 760.507351][T17838] RAX: ffffffffffffffda RBX: 00007fa905303f60 RCX: 00007fa905175bd9 [ 760.515334][T17838] RDX: 00000000200000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 760.523335][T17838] RBP: 00007fa9051e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 760.531319][T17838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.539304][T17838] R13: 000000000000000b R14: 00007fa905303f60 R15: 00007ffd5ea6d118 [ 760.547292][T17838] [ 760.609158][T17838] Mem-Info: [ 760.614706][T17838] active_anon:230 inactive_anon:4882 isolated_anon:0 [ 760.614706][T17838] active_file:5638 inactive_file:49926 isolated_file:0 [ 760.614706][T17838] unevictable:0 dirty:32 writeback:0 [ 760.614706][T17838] slab_reclaimable:9665 slab_unreclaimable:103501 [ 760.614706][T17838] mapped:14168 shmem:1741 pagetables:702 [ 760.614706][T17838] sec_pagetables:0 bounce:0 [ 760.614706][T17838] kernel_misc_reclaimable:0 [ 760.614706][T17838] free:1368771 free_pcp:377 free_cma:0 [ 760.709750][T17838] Node 0 active_anon:920kB inactive_anon:18792kB active_file:22280kB inactive_file:199704kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56580kB dirty:328kB writeback:0kB shmem:5428kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9984kB pagetables:2808kB sec_pagetables:0kB all_unreclaimable? no [ 760.743405][T17838] Node 1 active_anon:0kB inactive_anon:1536kB active_file:272kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 760.804961][T17838] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 760.882944][T17838] lowmem_reserve[]: 0 2571 2571 0 0 [ 760.908771][T17838] Node 0 DMA32 free:1512604kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:916kB inactive_anon:16180kB active_file:22016kB inactive_file:199644kB unevictable:0kB writepending:348kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:1156kB local_pcp:904kB free_cma:0kB [ 760.946100][T17838] lowmem_reserve[]: 0 0 0 0 0 [ 760.950937][T17838] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:264kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 760.978774][T17838] lowmem_reserve[]: 0 0 0 0 0 [ 761.040357][T17838] Node 1 Normal free:3949612kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:1536kB active_file:272kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 761.069311][ C1] vkms_vblank_simulate: vblank timer overrun [ 761.087913][T17878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4464'. [ 761.093028][T17838] lowmem_reserve[]: 0 0 0 0 0 [ 761.101867][T17838] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 761.116026][T17838] Node 0 DMA32: 660*4kB (ME) 920*8kB (UME) 374*16kB (UME) 491*32kB (UME) 371*64kB (UME) 139*128kB (UME) 55*256kB (UM) 32*512kB (UM) 27*1024kB (UME) 5*2048kB (UM) 337*4096kB (UM) = 1521936kB [ 761.144860][T17878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4464'. [ 761.161457][T17838] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 761.186715][T17838] Node 1 Normal: 7*4kB (UM) 6*8kB (UM) 12*16kB (UM) 23*32kB (UM) 15*64kB (UM) 7*128kB (UM) 5*256kB (UM) 4*512kB (UM) 5*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3949612kB [ 761.211601][T17838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 761.221383][T17838] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 761.238063][T17838] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 761.249263][T17838] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 761.283126][T17838] 57306 total pagecache pages [ 761.287926][T17838] 1 pages in swap cache [ 761.292606][T17838] Free swap = 124460kB [ 761.296781][T17838] Total swap = 124996kB [ 761.301023][T17838] 2097051 pages RAM [ 761.304964][T17838] 0 pages HighMem/MovableOnly [ 761.309660][T17838] 400873 pages reserved [ 761.320307][T17838] 0 pages cma reserved [ 761.375859][T17888] netlink: 'syz.3.4467': attribute type 3 has an invalid length. [ 761.386319][T17888] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4467'. [ 761.398436][T17888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4467'. [ 761.515272][T17895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4470'. [ 761.525688][T17895] netlink: 'syz.3.4470': attribute type 1 has an invalid length. [ 762.174692][ T5142] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 762.210985][ T5141] usb 2-1: USB disconnect, device number 41 [ 762.372319][ T5142] usb 5-1: Using ep0 maxpacket: 32 [ 762.391570][ T5142] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=3a.75 [ 762.414386][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.446278][ T5142] usb 5-1: Product: syz [ 762.450600][ T5142] usb 5-1: Manufacturer: syz [ 762.457310][ T5142] usb 5-1: SerialNumber: syz [ 762.472043][ T5142] usb 5-1: config 0 descriptor?? [ 762.486072][ T5142] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 762.580486][ T45] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 762.613404][T17913] kvm: kvm [17912]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x12df00000800 [ 762.712018][ T5217] usb 5-1: USB disconnect, device number 39 [ 762.721633][T17923] netlink: 'syz.2.4479': attribute type 3 has an invalid length. [ 762.803471][ T45] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 762.815531][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.836269][ T45] usb 1-1: config 0 descriptor?? [ 762.850966][ T45] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 763.169678][T17925] net_ratelimit: 120 callbacks suppressed [ 763.169715][T17925] netlink: zone id is out of range [ 763.939065][T17925] netlink: zone id is out of range [ 763.944426][T17925] netlink: zone id is out of range [ 763.951140][T17925] netlink: zone id is out of range [ 763.956406][T17925] netlink: zone id is out of range [ 763.961908][T17925] netlink: zone id is out of range [ 763.967139][T17925] netlink: zone id is out of range [ 763.972642][T17925] netlink: zone id is out of range [ 763.977909][T17925] netlink: zone id is out of range [ 763.992536][T17925] netlink: zone id is out of range [ 764.174105][T17943] vlan2: entered promiscuous mode [ 764.179417][T17943] syz_tun: entered promiscuous mode [ 764.189306][T17945] input: syz1 as /devices/virtual/input/input27 [ 764.345203][ T45] gspca_cpia1: usb_control_msg 02, error -71 [ 764.361497][ T45] gspca_cpia1: usb_control_msg 05, error -71 [ 764.374156][ T45] gspca_cpia1: usb_control_msg 04, error -71 [ 764.381178][ T45] cpia1 1-1:0.0: probe with driver cpia1 failed with error -71 [ 764.559290][T17956] kvm: kvm [17955]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x12df00000800 [ 764.606292][ T45] usb 1-1: USB disconnect, device number 38 [ 765.489980][T17964] __nla_validate_parse: 4 callbacks suppressed [ 765.489999][T17964] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4493'. [ 765.652621][T17977] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4499'. [ 766.150866][T17996] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 770.395372][T18001] ax25_connect(): syz.2.4506 uses autobind, please contact jreuter@yaina.de [ 770.825561][T18037] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4522'. [ 771.004264][T18032] kvm: kvm [18031]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x12df00000800 [ 771.358708][T18064] ax25_connect(): syz.3.4530 uses autobind, please contact jreuter@yaina.de [ 771.426319][T18074] net_ratelimit: 53 callbacks suppressed [ 771.426336][T18074] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 771.759237][ T29] audit: type=1326 audit(2000003945.684:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18086 comm="syz.4.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa905175bd9 code=0x7ffc0000 [ 771.818605][ T29] audit: type=1326 audit(2000003945.684:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18086 comm="syz.4.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa905175bd9 code=0x7ffc0000 [ 771.880067][T11410] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 771.900054][ T29] audit: type=1326 audit(2000003945.715:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18086 comm="syz.4.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa905175bd9 code=0x7ffc0000 [ 771.921619][ C1] vkms_vblank_simulate: vblank timer overrun [ 771.975784][ T29] audit: type=1326 audit(2000003945.715:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18086 comm="syz.4.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa905175bd9 code=0x7ffc0000 [ 772.036142][ T29] audit: type=1326 audit(2000003945.715:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18086 comm="syz.4.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa905175bd9 code=0x7ffc0000 [ 772.071142][T18099] netlink: 'syz.0.4547': attribute type 3 has an invalid length. [ 772.073718][ T29] audit: type=1326 audit(2000003945.735:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18086 comm="syz.4.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fa905175bd9 code=0x7ffc0000 [ 772.103574][T11410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.124289][T18099] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4547'. [ 772.124639][T18100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4547'. [ 772.137908][ T29] audit: type=1326 audit(2000003945.735:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18086 comm="syz.4.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa905175bd9 code=0x7ffc0000 [ 772.169246][T11410] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 772.195384][T11410] usb 3-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 772.205073][T11410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.239479][T11410] usb 3-1: config 0 descriptor?? [ 772.272779][T11410] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 772.336275][ T5217] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 772.551130][ T45] usb 3-1: USB disconnect, device number 35 [ 773.473336][ T5217] usb 5-1: config 0 has no interfaces? [ 773.486323][ T5217] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 773.508132][ T29] audit: type=1326 audit(2000006525.456:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18119 comm="syz.0.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64a775bd9 code=0x7ffc0000 [ 773.509158][ T5217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.529706][ C1] vkms_vblank_simulate: vblank timer overrun [ 773.573776][ T5217] usb 5-1: config 0 descriptor?? [ 773.588046][ T29] audit: type=1326 audit(2000006525.456:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18119 comm="syz.0.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64a775bd9 code=0x7ffc0000 [ 773.643158][ T29] audit: type=1326 audit(2000006525.496:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18119 comm="syz.0.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd64a775bd9 code=0x7ffc0000 [ 773.893189][T18136] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 774.096976][ T5217] usb 5-1: can't set config #0, error -71 [ 774.130035][ T5217] usb 5-1: USB disconnect, device number 40 [ 776.495316][T18168] netlink: zone id is out of range [ 776.511265][T18168] netlink: zone id is out of range [ 776.584598][T18189] binder: 18180:18189 ioctl c0306201 200003c0 returned -14 [ 777.319689][T18168] netlink: zone id is out of range [ 777.348967][T18168] netlink: zone id is out of range [ 777.354997][T18168] netlink: zone id is out of range [ 777.360837][T18168] netlink: zone id is out of range [ 777.369149][T18168] netlink: zone id is out of range [ 777.374897][T18168] netlink: zone id is out of range [ 777.541123][T18168] netlink: zone id is out of range [ 777.546487][T18168] netlink: zone id is out of range [ 778.577261][ T2439] team0: left allmulticast mode [ 778.599292][ T2439] team_slave_0: left allmulticast mode [ 778.608061][ T2439] team_slave_1: left allmulticast mode [ 778.614621][ T2439] team0: left promiscuous mode [ 778.620719][ T2439] team_slave_0: left promiscuous mode [ 778.640055][ T2439] team_slave_1: left promiscuous mode [ 778.657129][ T2439] bridge0: port 3(team0) entered disabled state [ 778.726804][ T2439] bridge_slave_1: left allmulticast mode [ 778.749375][ T2439] bridge_slave_1: left promiscuous mode [ 778.755207][ T2439] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.804559][ T2439] bridge_slave_0: left allmulticast mode [ 778.830887][ T2439] bridge_slave_0: left promiscuous mode [ 778.853079][ T2439] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.915668][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 778.915694][ T29] audit: type=1326 audit(2000006530.898:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18217 comm="syz.1.4591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b57575bd9 code=0x0 [ 779.926115][ T5105] Bluetooth: hci3: command 0x0405 tx timeout [ 780.061188][ T2439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.074004][ T2439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.085144][ T2439] bond0 (unregistering): Released all slaves [ 780.285130][ T2439] IPVS: stopping backup sync thread 7145 ... [ 780.500196][ T2439] hsr_slave_0: left promiscuous mode [ 780.506413][ T2439] hsr_slave_1: left promiscuous mode [ 780.515983][ T2439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.523942][ T2439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.532176][ T2439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.539615][ T2439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.561992][ T2439] veth1_macvtap: left promiscuous mode [ 780.567514][ T2439] veth0_macvtap: left promiscuous mode [ 780.575100][ T2439] veth1_vlan: left promiscuous mode [ 780.580388][ T2439] veth0_vlan: left promiscuous mode [ 781.057870][ T2439] team0 (unregistering): Port device team_slave_1 removed [ 781.105562][ T2439] team0 (unregistering): Port device team_slave_0 removed [ 782.525349][T18256] netlink: 332 bytes leftover after parsing attributes in process `syz.3.4603'. [ 782.538935][T18256] netlink: 652 bytes leftover after parsing attributes in process `syz.3.4603'. [ 783.102262][T18271] binder: 18261:18271 ioctl c0306201 200003c0 returned -14 [ 784.510675][T11410] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 784.721426][T11410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.750024][T11410] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 784.788771][T11410] usb 1-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 784.811759][T11410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.818305][ T45] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 784.839629][T11410] usb 1-1: config 0 descriptor?? [ 784.859128][T11410] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 785.042666][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 785.073808][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.085244][ T45] usb 2-1: Product: syz [ 785.101040][ T45] usb 2-1: Manufacturer: syz [ 785.113492][ T45] usb 2-1: SerialNumber: syz [ 785.133953][ T45] usb 2-1: config 0 descriptor?? [ 785.501989][ T8] usb 1-1: USB disconnect, device number 39 [ 787.211335][ T45] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 787.292221][T18336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4635'. [ 787.402396][ T5142] usb 2-1: USB disconnect, device number 42 [ 787.409450][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 787.431688][ T45] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.448045][ T45] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.478360][ T45] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 787.502926][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.550565][ T45] hub 5-1:4.0: USB hub found [ 787.774525][ T45] hub 5-1:4.0: 2 ports detected [ 787.790204][ T45] usb 5-1: selecting invalid altsetting 1 [ 787.806256][ T45] hub 5-1:4.0: Using single TT (err -22) [ 788.158353][ T45] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 788.166271][ T45] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 788.236642][ T45] usb 5-1: USB disconnect, device number 41 [ 788.472467][ T8] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 788.489005][T18372] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 788.686700][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.715952][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 788.774116][ T8] usb 1-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 788.796471][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.824201][ T8] usb 1-1: config 0 descriptor?? [ 788.852122][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 789.512845][T18403] tmpfs: Bad value for 'mpol' [ 789.743201][ T5141] usb 1-1: USB disconnect, device number 40 [ 790.136971][ T45] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 791.063765][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 791.111449][ T45] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.332905][ T45] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.351848][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 791.361773][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.374208][ T45] hub 2-1:4.0: USB hub found [ 791.629462][ T45] hub 2-1:4.0: 2 ports detected [ 791.645313][ T45] usb 2-1: selecting invalid altsetting 1 [ 791.681334][ T45] hub 2-1:4.0: Using single TT (err -22) [ 791.802084][T18440] tmpfs: Bad value for 'mpol' [ 791.878621][ T45] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 791.918116][ T45] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 791.998566][ T45] usb 2-1: USB disconnect, device number 43 [ 792.494386][ T5141] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 792.712380][ T5141] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 792.723115][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.736067][ T5141] usb 1-1: config 0 descriptor?? [ 792.745757][ T5141] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 792.753955][ T5141] dw2102: su3000_power_ctrl: 1, initialized 0 [ 792.761211][ T5141] dvb-usb: bulk message failed: -22 (2/0) [ 792.776871][ T5141] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 792.797325][ T5141] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 792.805093][ T5141] usb 1-1: media controller created [ 792.818047][ T5141] dvb-usb: bulk message failed: -22 (6/0) [ 792.825913][ T5141] dw2102: i2c transfer failed. [ 792.832260][ T5141] dvb-usb: bulk message failed: -22 (6/0) [ 792.839307][ T5141] dw2102: i2c transfer failed. [ 792.847047][ T5141] dvb-usb: bulk message failed: -22 (6/0) [ 792.854200][ T5141] dw2102: i2c transfer failed. [ 792.864741][ T5141] dvb-usb: bulk message failed: -22 (6/0) [ 792.871965][ T5141] dw2102: i2c transfer failed. [ 792.879402][ T5141] dvb-usb: bulk message failed: -22 (6/0) [ 792.886546][ T5141] dw2102: i2c transfer failed. [ 792.891704][ T5141] dvb-usb: bulk message failed: -22 (6/0) [ 792.897635][ T5141] dw2102: i2c transfer failed. [ 792.906416][ T5141] dvb-usb: MAC address: 02:02:02:02:02:02 [ 793.028540][ T5141] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 793.138559][ T5141] dvb-usb: bulk message failed: -22 (3/0) [ 793.161629][ T5141] dw2102: command 0x0e transfer failed. [ 793.255162][ T5141] dvb-usb: bulk message failed: -22 (3/0) [ 793.269416][ T5141] dw2102: command 0x0e transfer failed. [ 793.348948][T11410] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 793.551918][T11410] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 793.574746][T11410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.599434][T11410] usb 2-1: config 0 descriptor?? [ 793.606816][ T5141] dvb-usb: bulk message failed: -22 (3/0) [ 793.612966][ T5141] dw2102: command 0x0e transfer failed. [ 793.625296][ T5141] dvb-usb: bulk message failed: -22 (3/0) [ 793.635978][ T5141] dw2102: command 0x0e transfer failed. [ 793.650578][ T5141] dvb-usb: bulk message failed: -22 (1/0) [ 793.668993][ T5141] dw2102: command 0x51 transfer failed. [ 793.684083][ T5141] dvb-usb: bulk message failed: -22 (5/0) [ 793.694637][ T5141] dw2102: i2c probe for address 0x68 failed. [ 793.709856][ T5141] dvb-usb: bulk message failed: -22 (5/0) [ 793.716408][ T5141] dw2102: i2c probe for address 0x69 failed. [ 793.722551][ T5141] dvb-usb: bulk message failed: -22 (5/0) [ 793.733802][ T5141] dw2102: i2c probe for address 0x6a failed. [ 793.740815][ T5141] dw2102: probing for demodulator failed. Is the external power switched on? [ 793.756073][ T5141] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 793.845888][ T5141] rc_core: IR keymap rc-tt-1500 not found [ 793.868379][ T5141] Registered IR keymap rc-empty [ 793.889606][ T5141] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 793.917329][ T5141] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input28 [ 793.951246][ T5141] dvb-usb: schedule remote query interval to 250 msecs. [ 794.147771][ T5141] dw2102: su3000_power_ctrl: 0, initialized 1 [ 794.153956][ T5141] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 794.164082][ T5141] usb 1-1: USB disconnect, device number 41 [ 794.418813][T18503] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 794.963376][ T5141] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 796.304786][T18513] syzkaller0: entered promiscuous mode [ 796.321219][T18513] syzkaller0: entered allmulticast mode [ 796.486418][T18535] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 796.492925][T11410] usb 2-1: Cannot set autoneg [ 796.508872][T11410] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 796.860362][T18543] sctp: [Deprecated]: syz.3.4713 (pid 18543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 796.860362][T18543] Use struct sctp_sack_info instead [ 797.467536][ T5142] usb 2-1: USB disconnect, device number 44 [ 800.532118][T18553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4717'. [ 800.554489][T18553] netlink: 'syz.3.4717': attribute type 20 has an invalid length. [ 801.213850][T18600] nbd: socks must be embedded in a SOCK_ITEM attr [ 801.229592][ T5140] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 801.466430][ T5140] usb 3-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 801.512038][ T5140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.564024][ T5140] usb 3-1: Product: syz [ 801.579680][ T5140] usb 3-1: Manufacturer: syz [ 801.584359][ T5140] usb 3-1: SerialNumber: syz [ 801.647682][ T5140] usb 3-1: config 0 descriptor?? [ 802.950147][T18652] nbd: socks must be embedded in a SOCK_ITEM attr [ 802.981374][ T5140] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 803.377968][ T5140] usb 5-1: Using ep0 maxpacket: 32 [ 803.394469][ T5140] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.409258][ T5140] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.419474][ T5140] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 803.428635][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.492469][ T5140] hub 5-1:4.0: USB hub found [ 803.741447][ T5140] hub 5-1:4.0: 2 ports detected [ 803.761470][ T5140] usb 5-1: selecting invalid altsetting 1 [ 803.782756][ T5140] hub 5-1:4.0: Using single TT (err -22) [ 803.793322][ T5142] usb 3-1: USB disconnect, device number 36 [ 803.949683][ T5140] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 803.963778][ T5140] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 804.234719][ T5140] usb 5-1: USB disconnect, device number 42 [ 805.531750][T18694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4772'. [ 805.754999][T18697] 9pnet_fd: Insufficient options for proto=fd [ 806.095186][T18716] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 806.811910][ T5140] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 806.856958][T18724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 806.936861][T18727] net_ratelimit: 52 callbacks suppressed [ 806.936881][T18727] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 807.039813][ T5140] usb 3-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 807.077552][ T5140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.092090][ T5140] usb 3-1: Product: syz [ 807.210709][ T5140] usb 3-1: Manufacturer: syz [ 807.223573][ T5140] usb 3-1: SerialNumber: syz [ 807.313515][ T5140] usb 3-1: config 0 descriptor?? [ 807.873670][T18737] nbd: socks must be embedded in a SOCK_ITEM attr [ 808.410557][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.877387][ T5140] usb 3-1: USB disconnect, device number 37 [ 808.910635][T18753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 809.032612][T18760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4799'. [ 809.050445][T18760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4799'. [ 809.072355][T18760] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4799'. [ 809.201574][T18769] netlink: 'syz.2.4802': attribute type 24 has an invalid length. [ 810.425778][T18774] 9pnet_fd: Insufficient options for proto=fd [ 810.638258][T18799] nbd: socks must be embedded in a SOCK_ITEM attr [ 810.722472][T18803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4814'. [ 810.732881][T18803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4814'. [ 810.748223][T18803] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4814'. [ 810.807314][ T5143] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 811.036436][ T5143] usb 1-1: Using ep0 maxpacket: 8 [ 811.055072][ T5143] usb 1-1: config 0 has an invalid interface number: 193 but max is 0 [ 811.096671][ T5143] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 811.122428][ T5143] usb 1-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 811.147211][ T5143] usb 1-1: config 0 has no interface number 0 [ 811.163715][ T5143] usb 1-1: config 0 interface 193 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 811.196931][T18813] tmpfs: Bad value for 'mpol' [ 811.218547][ T5143] usb 1-1: config 0 interface 193 altsetting 0 endpoint 0x5 has invalid maxpacket 1032, setting to 64 [ 811.260571][ T5143] usb 1-1: config 0 interface 193 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 811.282594][ T5143] usb 1-1: config 0 interface 193 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 13 [ 811.366012][ T5143] usb 1-1: New USB device found, idVendor=03eb, idProduct=2002, bcdDevice= 1.00 [ 811.408608][ T5143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.430692][ T5143] usb 1-1: config 0 descriptor?? [ 811.454632][ T5143] usb-storage 1-1:0.193: USB Mass Storage device detected [ 811.495272][ T5143] usb-storage 1-1:0.193: Quirks match for vid 03eb pid 2002: 20 [ 811.772529][T18829] vhci_hcd: default hub control req: 4000 v0000 i0000 l0 [ 812.985531][T18845] tmpfs: Bad value for 'mpol' [ 813.181550][T18858] vhci_hcd: default hub control req: 4000 v0000 i0000 l0 [ 813.414334][ T5141] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 813.601405][ T5141] usb 4-1: Using ep0 maxpacket: 32 [ 813.634673][ T5141] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.823935][ T5141] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.870161][ T5141] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 813.975830][ T5141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.169409][ T5141] hub 4-1:4.0: USB hub found [ 814.450111][ T5143] usb 1-1: USB disconnect, device number 42 [ 814.503956][ T5141] hub 4-1:4.0: 2 ports detected [ 814.508905][ T5141] usb 4-1: selecting invalid altsetting 1 [ 814.517329][ T5141] hub 4-1:4.0: Using single TT (err -22) [ 814.643750][T18879] tmpfs: Bad value for 'mpol' [ 814.709715][ T5141] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 814.727058][ T5141] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 814.762584][ T5141] usb 4-1: USB disconnect, device number 40 [ 814.990805][T18883] nbd: socks must be embedded in a SOCK_ITEM attr [ 817.173195][T18911] tmpfs: Bad value for 'mpol' [ 817.284010][T18914] sctp: [Deprecated]: syz.2.4855 (pid 18914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 817.284010][T18914] Use struct sctp_sack_info instead [ 818.266051][T18932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4863'. [ 818.367039][T18938] netlink: 'syz.2.4867': attribute type 1 has an invalid length. [ 820.456389][T18971] input: syz0 as /devices/virtual/input/input29 [ 820.519708][T18973] netlink: 'syz.3.4881': attribute type 1 has an invalid length. [ 822.227661][T19001] netlink: 'syz.4.4893': attribute type 1 has an invalid length. [ 822.271156][T19005] input: syz1 as /devices/virtual/input/input30 [ 822.379180][T19012] netlink: 'syz.4.4898': attribute type 12 has an invalid length. [ 822.410459][T19010] binder: 19009:19010 ioctl c018620c 20000100 returned -1 [ 822.717382][ T5140] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 822.932154][ T5140] usb 5-1: Using ep0 maxpacket: 16 [ 822.971274][ T5140] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 823.002681][ T5140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.032828][ T5140] usb 5-1: Product: syz [ 823.038224][ T5140] usb 5-1: Manufacturer: syz [ 823.046409][ T5140] usb 5-1: SerialNumber: syz [ 823.062086][ T5140] usb 5-1: config 0 descriptor?? [ 823.079518][ T5140] usb 5-1: Found UVC 0.00 device syz (046d:0721) [ 823.090920][ T5140] usb 5-1: No valid video chain found. [ 823.390211][T19019] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 823.662261][T19012] netlink: 'syz.4.4898': attribute type 10 has an invalid length. [ 824.554646][T19012] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 824.733117][ T5140] usb 5-1: USB disconnect, device number 43 [ 824.759857][T19051] binder: 19050:19051 ioctl c018620c 20000100 returned -1 [ 826.505811][T19091] netlink: 'syz.2.4925': attribute type 1 has an invalid length. [ 826.553147][T19091] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.4925'. [ 826.581257][T19091] netlink: 'syz.2.4925': attribute type 1 has an invalid length. [ 826.600159][T19091] netlink: 'syz.2.4925': attribute type 2 has an invalid length. [ 826.943517][T19104] binder: 19102:19104 ioctl c018620c 20000100 returned -1 [ 827.225004][ T5217] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 827.474024][ T5217] usb 3-1: Using ep0 maxpacket: 32 [ 827.754036][T19108] xt_connbytes: Forcing CT accounting to be enabled [ 827.761883][ T5217] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.796914][ T5217] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.836498][ T5217] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 828.065996][T19113] sch_fq: defrate 0 ignored. [ 828.083672][ T5217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.109402][ T5217] hub 3-1:4.0: USB hub found [ 828.986686][ T5217] hub 3-1:4.0: 2 ports detected [ 828.991669][ T5217] usb 3-1: selecting invalid altsetting 1 [ 829.003757][ T5217] hub 3-1:4.0: Using single TT (err -22) [ 829.010705][ T5217] hub 3-1:4.0: config failed, can't get hub status (err -5) [ 829.074930][ T5217] usb 3-1: USB disconnect, device number 38 [ 830.182417][T19144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4946'. [ 830.193190][T19147] sch_fq: defrate 0 ignored. [ 830.958295][T19144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4946'. [ 831.002345][T19144] block nbd0: Unsupported socket: shutdown callout must be supported. [ 831.114825][ T2451] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.239863][ T2451] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.378230][ T5140] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 831.425805][ T2451] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.453203][ T29] audit: type=1326 audit(2000006582.569:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19167 comm="syz.0.4958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd64a775bd9 code=0x0 [ 831.608050][ T5140] usb 3-1: Using ep0 maxpacket: 32 [ 831.621124][ T5140] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 831.640180][ T5140] usb 3-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=d5.3b [ 831.664889][ T5140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.673426][ T5140] usb 3-1: Product: syz [ 831.677628][ T5140] usb 3-1: Manufacturer: syz [ 831.682355][ T5140] usb 3-1: SerialNumber: syz [ 831.689292][ T5140] usb 3-1: config 0 descriptor?? [ 831.696947][ T5140] usb 3-1: bad CDC descriptors [ 831.702187][ T5140] cdc_acm 3-1:0.0: Zero length descriptor references [ 831.709182][ T5140] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 831.712992][ T2451] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.652029][T19156] tmpfs: Bad value for 'nr_inodes' [ 832.670867][T19156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.679857][T19156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.703624][ T45] usb 3-1: USB disconnect, device number 39 [ 832.733324][ T2451] bridge_slave_1: left allmulticast mode [ 832.739024][ T2451] bridge_slave_1: left promiscuous mode [ 832.745564][ T2451] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.756670][ T2451] bridge_slave_0: left allmulticast mode [ 832.762324][ T2451] bridge_slave_0: left promiscuous mode [ 832.769461][ T2451] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.121633][T19189] netlink: 'syz.0.4963': attribute type 1 has an invalid length. [ 833.359660][ T45] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 833.440153][ T2451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.452871][ T2451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.463824][ T2451] bond0 (unregistering): Released all slaves [ 833.528557][ T2451] Êü: left promiscuous mode [ 833.567958][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 833.580760][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 833.591001][ T45] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 833.620464][ T45] usb 3-1: New USB device found, idVendor=056a, idProduct=0038, bcdDevice= 0.40 [ 833.629571][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.637787][ T45] usb 3-1: Product: syz [ 833.643165][ T45] usb 3-1: Manufacturer: syz [ 833.647801][ T45] usb 3-1: SerialNumber: syz [ 834.055801][ T45] usb 3-1: USB disconnect, device number 40 [ 834.930329][ T2451] hsr_slave_0: left promiscuous mode [ 834.952550][ T2451] hsr_slave_1: left promiscuous mode [ 835.005661][ T2451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.028852][ T2451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.044158][ T2451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.053575][ T2451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.087331][ T2451] veth1_macvtap: left promiscuous mode [ 835.093709][ T2451] veth0_macvtap: left promiscuous mode [ 835.099341][ T2451] veth1_vlan: left promiscuous mode [ 835.104762][ T2451] veth0_vlan: left promiscuous mode [ 835.609749][ T2451] team0 (unregistering): Port device team_slave_1 removed [ 835.655151][ T2451] team0 (unregistering): Port device team_slave_0 removed [ 836.200657][ T2451] lo (unregistering): left allmulticast mode [ 836.212023][T19214] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.219808][T19214] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.251973][T19214] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.259552][T19214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.268755][T19214] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.276042][T19214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.306316][ T5142] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 836.308173][T19214] team0: Port device bridge0 added [ 836.329268][T19216] bridge_slave_1: left allmulticast mode [ 836.334953][T19216] bridge_slave_1: left promiscuous mode [ 836.344040][T19216] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.354597][T19216] bridge_slave_0: left allmulticast mode [ 836.360556][T19216] bridge_slave_0: left promiscuous mode [ 836.366332][T19216] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.404296][T19216] team0: Port device bridge0 removed [ 836.537045][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 836.548186][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 836.559306][ T5142] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 836.572927][ T5142] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 836.582057][ T5142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.593451][ T5142] usb 4-1: config 0 descriptor?? [ 836.711857][ T2451] IPVS: stop unused estimator thread 0... [ 836.867580][T19224] netlink: 'syz.2.4974': attribute type 1 has an invalid length. [ 837.128513][ T5142] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x1 [ 837.136760][ T5142] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 837.147483][ T5142] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 837.979793][ T29] audit: type=1326 audit(2000006588.598:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19230 comm="syz.4.4978" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa905175bd9 code=0x0 [ 838.104285][T19234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4978'. [ 839.200340][T19238] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 839.211503][T19238] [U] J"—E:ÀÆ" [ 839.215118][T19238] [U] ª‡Ó [ 839.394697][ T5140] usb 4-1: USB disconnect, device number 41 [ 841.946841][T19257] netlink: 'syz.0.4987': attribute type 1 has an invalid length. [ 843.813112][ T5140] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 844.021562][ T5140] usb 3-1: Using ep0 maxpacket: 16 [ 844.028320][ T5140] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 844.038198][ T5140] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 844.048122][ T5140] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 844.057881][ T5140] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x69 has invalid maxpacket 28275, setting to 1024 [ 844.069056][ T5140] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x69 has invalid maxpacket 1024 [ 844.079157][ T5140] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 844.094306][ T5140] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 844.103409][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 844.111488][ T5140] usb 3-1: SerialNumber: syz [ 844.119226][T19272] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 844.126565][T19272] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 844.135101][ T5140] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 844.354463][ T5140] usb 3-1: USB disconnect, device number 41 [ 845.473608][ T5143] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 845.679199][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 845.690742][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 845.701987][ T5143] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 845.718501][ T5143] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 845.727936][ T5143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.738592][ T5143] usb 3-1: config 0 descriptor?? [ 845.746651][T19277] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 846.194417][ T5143] plantronics 0003:047F:FFFF.001C: unknown main item tag 0xd [ 846.203640][ T5143] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 846.216545][ T5143] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 846.672244][ T5140] usb 3-1: USB disconnect, device number 42 [ 846.946558][T19294] tun0: tun_chr_ioctl cmd 1074812117 [ 851.126148][ T5217] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 851.323302][ T5217] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.334319][ T5217] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.344132][ T5217] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 851.353190][ T5217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.363057][ T5217] usb 1-1: config 0 descriptor?? [ 852.029766][ T5217] hid-led 0003:1D34:000A.001D: probe with driver hid-led failed with error -71 [ 852.042128][ T5217] usb 1-1: USB disconnect, device number 43 SYZFAIL: proc resp pipe read failed n=-1 (errno 11: Resource temporarily unavailable) [ 853.806810][T17921] syz_tun (unregistering): left promiscuous mode [ 853.903120][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.917716][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.005324][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.015749][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.098843][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.109423][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.176594][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.187108][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.284303][ T11] bridge_slave_0: left allmulticast mode [ 854.290204][ T11] bridge_slave_0: left promiscuous mode [ 854.295909][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.776889][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.788262][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.799024][ T11] bond0 (unregistering): Released all slaves [ 855.088824][ T11] hsr_slave_0: left promiscuous mode [ 855.095320][ T11] hsr_slave_1: left promiscuous mode [ 855.101229][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.108715][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.117639][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.125822][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.151639][ T11] veth1_macvtap: left promiscuous mode [ 855.159194][ T11] veth0_macvtap: left promiscuous mode [ 855.164823][ T11] veth1_vlan: left promiscuous mode [ 855.170198][ T11] veth0_vlan: left promiscuous mode [ 855.646814][ T11] team0 (unregistering): Port device team_slave_1 removed [ 855.692749][ T11] team0 (unregistering): Port device team_slave_0 removed [ 856.431114][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.509620][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.604531][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.695135][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.836055][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.911855][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.985263][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.048272][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 857.059559][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.198607][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.279022][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.345609][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.410215][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.522386][ T11] bridge_slave_1: left allmulticast mode [ 857.528221][ T11] bridge_slave_1: left promiscuous mode [ 857.534247][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.544116][ T11] bridge_slave_0: left allmulticast mode [ 857.549791][ T11] bridge_slave_0: left promiscuous mode [ 857.556026][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.569101][ T11] bridge_slave_1: left allmulticast mode [ 857.574988][ T11] bridge_slave_1: left promiscuous mode [ 857.580765][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.590771][ T11] bridge_slave_0: left allmulticast mode [ 857.596763][ T11] bridge_slave_0: left promiscuous mode [ 857.602440][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.958058][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.969365][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.980298][ T11] bond0 (unregistering): Released all slaves [ 859.098059][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.109186][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.119830][ T11] bond0 (unregistering): Released all slaves [ 859.237851][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.250023][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.261105][ T11] bond0 (unregistering): Released all slaves [ 859.273158][ T11] bond1 (unregistering): Released all slaves [ 859.391556][ T11] Êü: left promiscuous mode [ 860.211436][ T11] hsr_slave_0: left promiscuous mode [ 860.217711][ T11] hsr_slave_1: left promiscuous mode [ 860.223638][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.231111][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.240815][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.248221][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.259978][ T11] hsr_slave_0: left promiscuous mode [ 860.265914][ T11] hsr_slave_1: left promiscuous mode [ 860.276952][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.284403][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.292686][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.300082][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.312329][ T11] hsr_slave_0: left promiscuous mode [ 860.318285][ T11] hsr_slave_1: left promiscuous mode [ 860.324211][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.331747][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.339777][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.347240][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.400248][ T11] veth1_macvtap: left promiscuous mode [ 860.405785][ T11] veth0_macvtap: left promiscuous mode [ 860.411457][ T11] veth1_vlan: left promiscuous mode [ 860.416748][ T11] veth0_vlan: left promiscuous mode [ 860.423065][ T11] veth1_macvtap: left promiscuous mode [ 860.428580][ T11] veth0_macvtap: left promiscuous mode [ 860.434311][ T11] veth1_vlan: left promiscuous mode [ 860.439594][ T11] veth0_vlan: left promiscuous mode [ 860.448495][ T11] veth1_macvtap: left promiscuous mode [ 860.454009][ T11] veth0_macvtap: left promiscuous mode [ 860.459694][ T11] veth1_vlan: left promiscuous mode [ 860.466686][ T11] veth0_vlan: left promiscuous mode [ 861.095503][ T11] team0 (unregistering): Port device team_slave_1 removed [ 861.139780][ T11] team0 (unregistering): Port device team_slave_0 removed [ 861.922601][ T11] team0 (unregistering): Port device team_slave_1 removed [ 861.971784][ T11] team0 (unregistering): Port device team_slave_0 removed [ 862.753840][ T11] team0 (unregistering): Port device team_slave_1 removed [ 862.799940][ T11] team0 (unregistering): Port device team_slave_0 removed