last executing test programs: 2.239444376s ago: executing program 2 (id=2055): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8855) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, 0x0, 0x0) 2.20377848s ago: executing program 2 (id=2057): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x1c8, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x1ab, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @broadcast, @from_mac=@broadcast, {}, @value}, 0x0, @random, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x0, 0x0, 0xb06}}, [{0xdd, 0x6, "2d5014b2109a"}, {0xdd, 0x58, "eb13a8b3df323b58645505746aa35226d44912415c3d4ac256aa5c2291a3317d27815fda589135d0308f4ff131b3c4a96dde0f9c497c9bbde281223c0596f01156deb1f851f7602fb2299c382c07898a4d7dddbc046ef6a9"}, {0xdd, 0x91, "4f2a899e94bcf0613609929460dda7b3421f2af277170aab1eef1bc7a6bad283ec72e75c78d8f4f30f5e2ee79daf8ece54852b5b93eabb5832b001d39227230802e601a7f9749d370367565ddb88a137c4572cce24103d4337027917c48d29a1860dad1f99fe412ea5a5eff0a43812f63ec34a05279e6dc25839f828e60b01f9b6a65bf411101d89dc154716566458aa41"}, {0xdd, 0x65, "5dad8ac12f96664d51c30bd3379c2d305630cd93fec0b4249d429b451f52399f26b866650e0e9464949a974045190fa9251c8b6aacda7ecc351ee9cb5512364284512cf7643040ee1f52573ed7bb7527b9a86fc2f33bffce71947a0f29cfb9ac7bd9e7642c"}, {0xdd, 0x6, "83534cd40fda"}]}}]}, 0x1c8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2711, @hyper}, 0x33) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003100)={@ifindex, 0xffffffffffffffff, 0x11, 0x10, 0xffffffffffffffff, @prog_fd}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x6e, 0x1, 0x2fb, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0x800, 0xe5b}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000740)=""/105, 0x42, 0x69, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r7, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000240)="482eadffffffffffff", 0x0}, 0x50) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c2000b0086dd6012000800383a00fc010000000000000000000000000000ff0200000000000000000000000000010100007800000000600ad91500002c00ff010000000000000000000000000001fe8000000000000000000000000000040000009000000000"], 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00e7ff0000000000140003007465616d5f736c6176655f300000000008000a"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0xc, 0x1002, &(0x7f00000004c0)=""/4098}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) 2.069714392s ago: executing program 2 (id=2063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair(0x1d, 0x2, 0x6, &(0x7f00000004c0)) 1.980823896s ago: executing program 0 (id=2066): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0x400448c9, &(0x7f0000000b80)={0x0, "80e21d3f6c946c4b77ca1ec78558619c83df381ea2e6acaaedabfbe5f9695fd2d5e3b1577598bb5b0f3bc3bccd35091df07c0d5633c59fc830306b2e5454126f"}) 1.229769523s ago: executing program 1 (id=2068): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}]}, 0x50}}, 0x0) 1.203755991s ago: executing program 1 (id=2069): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r0) ptrace$getregset(0x15, r0, 0x0, &(0x7f0000000200)={0x0}) 1.149964711s ago: executing program 2 (id=2070): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x80000) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, 0x0) getsockopt$sock_cred(r4, 0x1, 0x1e, &(0x7f00000001c0)={0x0}, 0x0) socket$key(0xf, 0x3, 0x2) shmat(0x0, &(0x7f0000fa4000/0x4000)=nil, 0x0) listen(0xffffffffffffffff, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000340)={0xf5, 0x0, 0x3, 0x2, "aada23be4668e8160c6e8d3bbdd3a4caa79a54028ed84313a6ce1b3fb7594a326e65a3245d728a6be7e2c634ab3d22dba94fa4cfb24c5dc265a8f3398c30dbeae15b7a196c6ecc769a1df8c23bad26d243e781de3983813e84835011e1d29770b95e91199c613062c6d49a3e374f71249dc8ed9aa7d298a88a188c2978eeee0b786b71e5646fb970f03ba1be02fc0083889dc4423f352d9b7ddd57f15f9d7dc40eddb4b6d947dc34ddaa78dfe3f22a254d124eb038b78486ca94fe1f9c7e6260f20d24d2a4c3b7642a53dfd2818cbd4837b4c227aa53657ce31c6e48d5"}) preadv2(r6, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1b4}, 0x1, 0x0, 0x0, 0x4008040}, 0xc841) move_pages(r5, 0x2, &(0x7f0000000000)=[&(0x7f000029a000/0x1000)=nil, &(0x7f000066c000/0x4000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.149658227s ago: executing program 1 (id=2071): socketpair$unix(0x1, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'lo\x00'}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) 1.099824727s ago: executing program 1 (id=2072): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) 1.099520619s ago: executing program 1 (id=2073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x5, &(0x7f00000002c0)=ANY=[], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) 358.115924ms ago: executing program 3 (id=2079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0xb, 0x6, 0x101, 0x0, 0x60}, 0x14}}, 0x0) 357.76122ms ago: executing program 3 (id=2080): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r1, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 298.928164ms ago: executing program 3 (id=2081): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5423, 0x0) 298.620071ms ago: executing program 3 (id=2082): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x1c8, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x1ab, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @broadcast, @from_mac=@broadcast, {}, @value}, 0x0, @random, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x0, 0x0, 0xb06}}, [{0xdd, 0x6, "2d5014b2109a"}, {0xdd, 0x58, "eb13a8b3df323b58645505746aa35226d44912415c3d4ac256aa5c2291a3317d27815fda589135d0308f4ff131b3c4a96dde0f9c497c9bbde281223c0596f01156deb1f851f7602fb2299c382c07898a4d7dddbc046ef6a9"}, {0xdd, 0x91, "4f2a899e94bcf0613609929460dda7b3421f2af277170aab1eef1bc7a6bad283ec72e75c78d8f4f30f5e2ee79daf8ece54852b5b93eabb5832b001d39227230802e601a7f9749d370367565ddb88a137c4572cce24103d4337027917c48d29a1860dad1f99fe412ea5a5eff0a43812f63ec34a05279e6dc25839f828e60b01f9b6a65bf411101d89dc154716566458aa41"}, {0xdd, 0x65, "5dad8ac12f96664d51c30bd3379c2d305630cd93fec0b4249d429b451f52399f26b866650e0e9464949a974045190fa9251c8b6aacda7ecc351ee9cb5512364284512cf7643040ee1f52573ed7bb7527b9a86fc2f33bffce71947a0f29cfb9ac7bd9e7642c"}, {0xdd, 0x6, "83534cd40fda"}]}}]}, 0x1c8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2711, @hyper}, 0x33) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003100)={@ifindex, 0xffffffffffffffff, 0x11, 0x10, 0xffffffffffffffff, @prog_fd}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x6e, 0x1, 0x2fb, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0x800, 0xe5b}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081780000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afc0513466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea01d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a07f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a126a1bdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0d5d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f10bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d00b07862c4fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52c094016406cdd32abf77fea373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515dca8811922929e08538fab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f57cbc05cd897f40693ec427ea71578130cde48de3b4dda0c7b615b57ccd4f8ac729a80f891d91a89d967948b9d95b1f22480ab48969e86b854a8c17f3e264ce11f9f63552364e759eec94572f2f7b0e2f293573d0b80709815f4344f908c00"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000740)=""/105, 0x42, 0x69, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r7, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000240)="482eadffffffffffff", 0x0}, 0x50) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c2000b0086dd6012000800383a00fc010000000000000000000000000000ff0200000000000000000000000000010100007800000000600ad91500002c00ff010000000000000000000000000001fe8000000000000000000000000000040000009000000000"], 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00e7ff0000000000140003007465616d5f736c6176655f300000000008000a"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0xc, 0x1002, &(0x7f00000004c0)=""/4098}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) 291.164893ms ago: executing program 2 (id=2083): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 240.424511ms ago: executing program 0 (id=2084): socket(0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) 240.047527ms ago: executing program 3 (id=2085): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0406000000000000005872133b"], 0x1a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req={0x8000, 0xffffffff, 0x2, 0x8000}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) memfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_emit_ethernet(0xc9, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x301, 0x0, 0x0, {0x24}}, 0x14}}, 0x0) 116.746157ms ago: executing program 1 (id=2086): prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) creat(0x0, 0x1de) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={0x0, 0x0, 0x4000, r1}, 0x18) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000240), 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x40, 0xddd1, 0x0, 0x321, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x1}, 0x48) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 112.19478ms ago: executing program 0 (id=2087): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f96b24fc60040f030035000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000003c0)={r3}, 0x14) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="880000000d46448cf68598e21d5daba4573dcf14d34cb6fc00d9ffec28f6c410bf9788b9e66782b070ab85075919ba659ebc5b6eb5997c", @ANYRES16=0x0, @ANYBLOB="04002abd7000fedbdf2504000000080003000000000005000600000000000500060004000000050005000400000014000100ff01000000000000000000000000000105000600060000001000040003000000f20000000700000018000400a80200000000000009000000400000000500000008000400ff0300000500060080000000"], 0x88}, 0x1, 0x0, 0x0, 0x4010}, 0x40c00) syz_emit_ethernet(0x7e, &(0x7f0000000840)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000700000000000019078ac1e0001ac1414aa04009078e00000e0450000000000000000110000ac1414aaffffffff830300443c0003ac141400000000000000000000000000ffffffff00000000acfc14bb000000000000000000000000ac14140000000000000000000000000000b8c05715519572ec99acceca99641438c7073f6df01a6f141a263acb444511a7e5d63e5f231025102478b089978ec04eebf567c4832f534bbb30f58731fee96f6e35b3f88bfb72eac0a312a1fd5dcc05910c4bf7e11cfc9ebbb5f2deca9bd2501e5a8a6d31"], 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x628, 0x0, 0x25, 0x148, 0x0, 0x60, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'virt_wifi0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0x0, 0x41, 0x0, 0x0, 0x7fff}}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x688) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000580)={0x0, 0x0}, 0x10) clock_gettime(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x30, r6, 0x0, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 111.910274ms ago: executing program 2 (id=2088): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0}}], 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @local}}}, 0x108) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="abaaaaaaaaaabbbbbbbbbbbb080600010800060400012899e1eda939000000000180c200000000000000"], 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000040)=@mgmt_frame=@action={{{}, {}, @broadcast, @device_b, @from_mac=@broadcast, {0x0, 0x10}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x6, {0x0, 0xff, @val=0xb61, @void, @void}}}}}, 0x2a) connect$pppoe(r3, &(0x7f0000000480)={0x18, 0x0, {0x4, @random="6833dc24450a", 'netdevsim0\x00'}}, 0x1e) readv(r3, &(0x7f00000004c0), 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, &(0x7f0000000000)={0x24, @short}, 0x14) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, r7, 0x1}, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000}}, [0x40, 0x6, 0x7, 0x5, 0x6, 0x7fff, 0x5, 0x1, 0x8001, 0x3, 0x81, 0x7, 0x140000000000000, 0x8, 0x73a]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={r8, 0xc, 0x4400}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000008c0)={0xd, 0x6, 0x2, 0x0, 0xab, 0x6, 0x7, 0xac68, r8}, 0x20) sendmsg$sock(r3, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={'sit0\x00', {0x2, 0x0, @loopback}}) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r10) syz_80211_inject_frame(&(0x7f0000000440), &(0x7f00000004c0)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_b, @initial, {0x8, 0x80}, @value=@ver_80211n={0x0, 0x5b6, 0x0, 0x0, 0x0, 0x0, 0x1}}, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x6}, {0xc}, {0x1}, {0x18, 0x1}, {0xc}, {0x6}, {0x5, 0x1}]}, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x300, 0x1, 0x0, 0x0, {0x6, 0x5, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x4, 0x7}}, @val={0x72, 0x6}, [{0xdd, 0x39, "d31cb61e65c014568560f7227c70ae301342636a11d1f1e471ac56c2893c00c7f5bd0f95633652ae59ab25aa114608afef221d4df64f214979"}, {0xdd, 0xf8, "2fe84e57acca7aa8729ee13b0e7c507172f383b7ab29d8da3f9507d8a091daaf72c17232dfd8a96a1df8392186581407752fcb295b93b1cd32eb7e9f99c134c5e95225737c70243a4179ad452879cee35e70fb20c19157a7971cff05cdf2cdf4c8b0d6f3973c0eb8cfbb10762a8c3d2f13b1ae4eda55c43aa04f78818f72df2fc0200e489df5743c2ce0e5317a6d7f39b0c7d93cf5f54a6b68930ea62a6e2036f9385dad2794172434d5b50b3b7f9a508ce27d0e5c49a8adc13b8c02f44148b139c92facf3cd6bdb337681e0ae8ddbd41b3cbbe1d77c86e1f8a77da8d6c61e6783320ebdc6fd95095a144782196434fb44027771c74a65fe"}, {0xdd, 0x29, "65aea2ba65f2cbab424aebfcd554d096459271116767eb9c4960d62c8cc0fb2bcbe2f7d4f798e9a86e"}, {0xdd, 0x5d, "13514a6a19a1a2b3739ceb3d9fa0054522e5f1961d6994cab0ae762cb67ad7f65bee3c0cb0fa8cfe36c910aad6d942b8a0b6f330c863d289a30f92227899763bbf45af9a6bae501ca32cbaa147a1d44c454e5a340ad7801246fd164fa3"}, {0xdd, 0xc1, "90892bc8855b944f722b432b08bad8108fef86b7737179976f4cde20afcdd7afec69ac52010370d3f75ced77bdb8920f86f0da9c24ea51426d6445a73dced4427e8f19c2561c3426f6641077d4a78e9aff14aa015c3e926135ce3fc5e5b79576db14652dd9e2e3fa8f1a342f44b6e8dea4205ebd81e625f2f7ada763b24b7c4b03e069478a86dac0fbf3ae1573c3d89e61368da75b7c1ca2a4533df26f6516f5924cd552b02cd91950674619bbb1d6bf13e5422fdbc5f8653db09db3335db09ba9"}, {0xdd, 0x5e, "efc88f3edcf6b6261bd99724ecaa10858615ae132e1e176857a153eb2a3f972e3f44b344fb97924acea171517b544c883bfc88008e659fec801f4a3f693e877bba63eb888876c93fab373fcd777b07ca62478f5a39c550b6a779de125208"}, {0xdd, 0x99, "ec405df5e048fee241257f470869b11ff4d1659ca832e10ff9c64adf410151c7b02781561e13938192930ee2cd089b51c9fc63e617725915c91ccbc7dff9dc7bcabdcc11fca77cbbda0100df6f230c5747021af3c777e156d9ce0d1279d569f80080757eda2bb5c0fbf3290c3e6c6b3ccbce8cf9c5235a08412eb4d2d8b76d55e857f0bde00e1fc9ebecf8ed3ac97d28774b419d837604e0b9"}, {0xdd, 0x27, "272cc54940f9f3a93f270e7a7dc3ae94844f9d4e9282f531a8a2f87006d56c79bc415617f72615"}]}, 0x3fa) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000000180)) 50.325476ms ago: executing program 0 (id=2089): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 414.795µs ago: executing program 0 (id=2090): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000100000000000000000000000002002000ff"], 0x1c}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 277.489µs ago: executing program 0 (id=2091): sched_setscheduler(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) 0s ago: executing program 3 (id=2092): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x28}}, 0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) sendmmsg$inet6(r0, &(0x7f0000006640)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="74887a93c8b50ed2", 0x8}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) kernel console output (not intermixed with test programs): 4967295 subj=unconfined pid=6347 comm="syz.1.408" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf73d0579 code=0x7ffc0000 [ 87.283377][ T39] audit: type=1326 audit(2000000023.160:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6347 comm="syz.1.408" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf73d05a7 code=0x7ffc0000 [ 87.291821][ T39] audit: type=1326 audit(2000000023.160:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6347 comm="syz.1.408" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf73d0579 code=0x7ffc0000 [ 87.432841][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 87.686296][ T30] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 87.869302][ T30] usb 6-1: config index 0 descriptor too short (expected 64575, got 68) [ 87.872740][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.878837][ T30] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 87.882984][ T30] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 87.888602][ T30] usb 6-1: config index 1 descriptor too short (expected 64575, got 68) [ 87.891584][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.895464][ T30] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 87.899844][ T30] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 87.913322][ T30] usb 6-1: string descriptor 0 read error: -71 [ 87.916472][ T30] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 87.920586][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.930496][ T30] usb 6-1: can't set config #1, error -71 [ 87.934632][ T30] usb 6-1: USB disconnect, device number 4 [ 88.111287][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 88.122843][ T6386] team_slave_0: entered promiscuous mode [ 88.125237][ T6386] team_slave_0: entered allmulticast mode [ 88.140106][ T6386] team0: Port device team_slave_0 removed [ 89.095877][ T6429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.437'. [ 89.112735][ T6429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.176386][ T6429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.270989][ T6437] input: syz1 as /devices/virtual/input/input9 [ 89.330078][ T6440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.441'. [ 89.915185][ T6469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.453'. [ 90.002204][ T6475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.457'. [ 90.016033][ T6475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.080633][ T6475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.585161][ T6500] tipc: Started in network mode [ 90.588501][ T6500] tipc: Node identity fffffff9, cluster identity 4711 [ 90.592473][ T6500] tipc: Node number set to 4294967289 [ 90.736749][ T6514] can0: slcan on pts0. [ 90.896934][ T6514] can0 (unregistered): slcan off pts0. [ 90.898372][ T4638] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 90.902435][ T4638] Bluetooth: hci3: Injecting HCI hardware error event [ 90.906763][ T5208] Bluetooth: hci3: hardware error 0x00 [ 90.963595][ T4638] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 91.317091][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'. [ 91.452216][ T6568] can0: slcan on pts0. [ 91.541976][ T6568] can0 (unregistered): slcan off pts0. [ 91.620223][ T4638] Bluetooth: hci0: unexpected event 0x06 length: 23 > 3 [ 91.697948][ T6593] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 92.584576][ T5218] Bluetooth: hci0: unexpected event 0x06 length: 23 > 3 [ 92.688522][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.508'. [ 92.976265][ T5208] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 93.202791][ T6640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.512'. [ 93.696365][ T5218] Bluetooth: hci0: command 0x2046 tx timeout [ 93.700521][ T4638] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 94.253238][ T6688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.260032][ T6688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.394968][ T6688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.056289][ T5208] Bluetooth: hci3: Opcode 0x2046 failed: -110 [ 95.556254][ T1272] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 95.771759][ T1272] usb 8-1: config index 0 descriptor too short (expected 64575, got 68) [ 95.775106][ T1272] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.784325][ T1272] usb 8-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 95.789905][ T1272] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 95.798426][ T1272] usb 8-1: config index 1 descriptor too short (expected 64575, got 68) [ 95.803981][ T1272] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.809978][ T1272] usb 8-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 95.815458][ T1272] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 95.838570][ T1272] usb 8-1: string descriptor 0 read error: -71 [ 95.841415][ T1272] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 95.845009][ T1272] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.850555][ T1272] usb 8-1: can't set config #1, error -71 [ 95.855003][ T1272] usb 8-1: USB disconnect, device number 3 [ 97.150160][ T6761] can0: slcan on pts0. [ 97.581524][ T6770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.617653][ T6770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.967360][ T6758] can0 (unregistered): slcan off pts0. [ 98.052339][ T5208] Bluetooth: hci4: unexpected event 0x06 length: 23 > 3 [ 98.137793][ T1272] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 98.328258][ T1272] usb 6-1: config index 0 descriptor too short (expected 64575, got 68) [ 98.334518][ T1272] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.339060][ T1272] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 98.343941][ T1272] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 98.352295][ T1272] usb 6-1: config index 1 descriptor too short (expected 64575, got 68) [ 98.363175][ T1272] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.378794][ T1272] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 98.383269][ T1272] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 98.411610][ T1272] usb 6-1: string descriptor 0 read error: -71 [ 98.414008][ T1272] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 98.425959][ T1272] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.437510][ T1272] usb 6-1: can't set config #1, error -71 [ 98.443140][ T1272] usb 6-1: USB disconnect, device number 5 [ 98.561605][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 98.854446][ T6805] can0: slcan on pts0. [ 99.143803][ T5208] Bluetooth: hci0: unexpected event 0x06 length: 23 > 3 [ 99.618015][ T6807] can0 (unregistered): slcan off pts0. [ 100.097145][ T4638] Bluetooth: hci4: Opcode 0x2046 failed: -110 [ 100.100979][ T4638] Bluetooth: hci4: command 0x2046 tx timeout [ 100.124589][ T6858] can0: slcan on pts1. [ 100.201725][ T6862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.579'. [ 100.207605][ T6862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.237529][ T6862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.635677][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.585'. [ 100.652864][ T6882] team_slave_0: entered promiscuous mode [ 100.655308][ T6882] team_slave_0: entered allmulticast mode [ 100.674158][ T6882] team0: Port device team_slave_0 removed [ 100.967714][ T6856] can0 (unregistered): slcan off pts1. [ 101.352820][ T5208] Bluetooth: hci2: unexpected event 0x06 length: 23 > 3 [ 102.277364][ T6939] netlink: 104 bytes leftover after parsing attributes in process `syz.1.606'. [ 102.283187][ T6939] netlink: 104 bytes leftover after parsing attributes in process `syz.1.606'. [ 102.871226][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'. [ 102.938910][ T6971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.622'. [ 102.944316][ T6971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.968419][ T6971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.140936][ T39] kauditd_printk_skb: 92 callbacks suppressed [ 103.140951][ T39] audit: type=1326 audit(2000000039.040:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.3.628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73f4579 code=0x7ffc0000 [ 103.153602][ T39] audit: type=1326 audit(2000000039.050:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.3.628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73f4579 code=0x7ffc0000 [ 103.162773][ T39] audit: type=1326 audit(2000000039.050:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.3.628" exe="/syz-executor" sig=0 arch=40000003 syscall=179 compat=1 ip=0xf73f4579 code=0x7ffc0000 [ 103.172563][ T39] audit: type=1326 audit(2000000039.050:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.3.628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73f4579 code=0x7ffc0000 [ 103.181791][ T39] audit: type=1326 audit(2000000039.050:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.3.628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73f4579 code=0x7ffc0000 [ 103.235698][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.630'. [ 103.297896][ T6991] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 103.306761][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.376495][ T4638] Bluetooth: hci2: command 0x2046 tx timeout [ 103.379745][ T5208] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 103.488696][ T8] usb 5-1: config index 0 descriptor too short (expected 64575, got 68) [ 103.491818][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.495702][ T8] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 103.500478][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 103.506569][ T8] usb 5-1: config index 1 descriptor too short (expected 64575, got 68) [ 103.515927][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.520245][ T8] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 103.523905][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 103.536564][ T8] usb 5-1: string descriptor 0 read error: -71 [ 103.538965][ T8] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.543172][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.553136][ T8] usb 5-1: can't set config #1, error -71 [ 103.557087][ T8] usb 5-1: USB disconnect, device number 5 [ 104.312747][ T7025] tipc: Failed to remove unknown binding: 66,1,1/0:1283492921/1283492923 [ 104.312894][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'. [ 104.327976][ T7025] tipc: Failed to remove unknown binding: 66,1,1/0:1283492921/1283492923 [ 104.332560][ T7025] tipc: Failed to remove unknown binding: 66,1,1/0:1283492921/1283492923 [ 104.335390][ T7029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.357907][ T7029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.441758][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'. [ 104.527994][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 104.932002][ T7048] ipvlan0: entered promiscuous mode [ 104.934691][ T7047] ipvlan0: left promiscuous mode [ 104.940810][ T5247] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 105.126089][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'. [ 105.137905][ T5247] usb 7-1: config index 0 descriptor too short (expected 64575, got 68) [ 105.142409][ T5247] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.151051][ T5247] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 105.161827][ T5247] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 105.166682][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 105.175610][ T5247] usb 7-1: config index 1 descriptor too short (expected 64575, got 68) [ 105.178610][ T5247] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.182117][ T5247] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 105.185963][ T5247] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 105.203614][ T5247] usb 7-1: string descriptor 0 read error: -71 [ 105.205767][ T5247] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 105.208943][ T5247] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.213127][ T5247] usb 7-1: can't set config #1, error -71 [ 105.216340][ T5247] usb 7-1: USB disconnect, device number 5 [ 105.462603][ T7079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.573811][ T7079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.318404][ T7119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.438409][ T7119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.998539][ T5208] Bluetooth: hci4: unexpected event 0x06 length: 23 > 3 [ 107.305992][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.689'. [ 107.411528][ T7149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.461117][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 107.519068][ T7149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.552968][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'. [ 107.889990][ T5208] Bluetooth: hci2: unexpected event 0x06 length: 23 > 3 [ 108.081068][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 108.171237][ T7181] Bluetooth: MGMT ver 1.22 [ 108.173879][ T7181] Bluetooth: hci3: unsupported parameter 64512 [ 108.176895][ T7181] Bluetooth: hci3: invalid length 0, exp 2 for type 4 [ 108.334251][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 108.341139][ T7192] netlink: 'syz.1.707': attribute type 11 has an invalid length. [ 108.343902][ T7192] netlink: 'syz.1.707': attribute type 14 has an invalid length. [ 108.353335][ T7192] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.356678][ T7192] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.359582][ T7192] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.362466][ T7192] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.366092][ T7192] vxlan0: entered promiscuous mode [ 108.464390][ T7202] Bluetooth: hci3: unsupported parameter 64512 [ 108.467327][ T7202] Bluetooth: hci3: invalid length 0, exp 2 for type 4 [ 108.528574][ T39] audit: type=1326 audit(2000000044.430:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73f4579 code=0x7ffc0000 [ 108.552242][ T39] audit: type=1326 audit(2000000044.440:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73f4579 code=0x7ffc0000 [ 108.562113][ T39] audit: type=1326 audit(2000000044.440:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf73f4579 code=0x7ffc0000 [ 108.571536][ T39] audit: type=1326 audit(2000000044.440:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73f4579 code=0x7ffc0000 [ 108.579960][ T39] audit: type=1326 audit(2000000044.440:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73f4579 code=0x7ffc0000 [ 108.828465][ T7219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.857588][ T7219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.548853][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 109.815158][ T7254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.825613][ T7254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.946250][ T4638] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 109.948376][ T4638] Bluetooth: hci2: command 0x2046 tx timeout [ 110.383712][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 110.628379][ T7286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.640585][ T7286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.013752][ T7291] netlink: 'syz.0.748': attribute type 30 has an invalid length. [ 111.213545][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 111.552027][ T7311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.567203][ T7311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.688547][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.758'. [ 112.321996][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'. [ 112.329731][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.767'. [ 112.813516][ T7378] netlink: 'syz.3.777': attribute type 30 has an invalid length. [ 115.264537][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 115.313464][ T7451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.327825][ T7451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.971265][ T7457] syzkaller0: entered promiscuous mode [ 115.973680][ T7457] syzkaller0: entered allmulticast mode [ 116.198655][ T7462] openvswitch: netlink: Message has 4 unknown bytes. [ 116.330063][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'. [ 116.676220][ T30] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 116.867734][ T30] usb 7-1: config index 0 descriptor too short (expected 64575, got 68) [ 116.875081][ T30] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.882118][ T30] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 116.891416][ T30] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 116.927705][ T30] usb 7-1: config index 1 descriptor too short (expected 64575, got 68) [ 116.930770][ T30] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.934430][ T30] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 116.938668][ T30] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 116.946275][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'. [ 116.950789][ T30] usb 7-1: string descriptor 0 read error: -71 [ 116.953039][ T30] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 116.956605][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.964310][ T30] usb 7-1: can't set config #1, error -71 [ 116.970944][ T30] usb 7-1: USB disconnect, device number 6 [ 117.324080][ T7495] syz.1.830 uses obsolete (PF_INET,SOCK_PACKET) [ 117.441970][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'. [ 117.481361][ T7501] openvswitch: netlink: Message has 4 unknown bytes. [ 117.500321][ T7506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.835'. [ 117.505246][ T7506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.533225][ T7506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.593777][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'. [ 117.751906][ T7523] vlan3: entered allmulticast mode [ 117.754326][ T7523] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 117.856887][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 117.960448][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 118.111703][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.854'. [ 118.138260][ T7556] openvswitch: netlink: Message has 4 unknown bytes. [ 118.285345][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 118.370738][ T7573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.394060][ T7573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.935885][ T7601] vlan2: entered allmulticast mode [ 118.956701][ T7601] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 119.726232][ T1261] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.917520][ T1261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.921988][ T1261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.925491][ T1261] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 119.929464][ T1261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.938414][ T1261] usb 5-1: config 0 descriptor?? [ 120.150484][ T7677] can0: slcan on pts0. [ 120.216860][ T7677] can0 (unregistered): slcan off pts0. [ 120.225950][ T7680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.254591][ T7680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.422568][ T1261] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 120.425314][ T1261] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 120.431524][ T1261] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 120.434470][ T1261] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 120.440001][ T1261] zydacron 0003:13EC:0006.0003: item fetching failed at offset 4/5 [ 120.444106][ T1261] zydacron 0003:13EC:0006.0003: parse failed [ 120.446919][ T1261] zydacron 0003:13EC:0006.0003: probe with driver zydacron failed with error -22 [ 120.622811][ T1272] usb 5-1: USB disconnect, device number 6 [ 121.365467][ T7735] __nla_validate_parse: 8 callbacks suppressed [ 121.365485][ T7735] netlink: 134312 bytes leftover after parsing attributes in process `syz.1.926'. [ 121.372572][ T7735] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 121.375977][ T7735] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 121.393037][ T7737] can0: slcan on pts0. [ 121.416420][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.925'. [ 121.457948][ T7737] can0 (unregistered): slcan off pts0. [ 121.850246][ T7765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.933'. [ 121.931377][ T4638] Bluetooth: hci4: unexpected event 0x06 length: 23 > 3 [ 122.471111][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 122.478363][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 122.481296][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 122.484214][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 122.487781][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 122.569004][ T7812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.649066][ T7812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.502256][ T7852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.610329][ T7852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.936276][ T4638] Bluetooth: hci4: Opcode 0x2046 failed: -110 [ 123.936365][ T5208] Bluetooth: hci4: command 0x2046 tx timeout [ 124.559488][ T7877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.976'. [ 124.566002][ T7877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.597970][ T7877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.251563][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 125.446297][ T1261] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 125.628415][ T1261] usb 5-1: config index 0 descriptor too short (expected 64575, got 68) [ 125.631849][ T1261] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.636420][ T1261] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 125.640514][ T1261] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 125.645712][ T1261] usb 5-1: config index 1 descriptor too short (expected 64575, got 68) [ 125.648280][ T1261] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.651139][ T1261] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 125.655110][ T1261] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 125.671439][ T1261] usb 5-1: string descriptor 0 read error: -71 [ 125.673961][ T1261] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 125.682139][ T1261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.689017][ T1261] usb 5-1: can't set config #1, error -71 [ 125.692405][ T1261] usb 5-1: USB disconnect, device number 7 [ 125.805210][ T7908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.362882][ T7921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.460017][ T7921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.805133][ T7941] netlink: 'syz.3.1000': attribute type 4 has an invalid length. [ 126.808709][ T7941] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1000'. [ 127.180525][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1006'. [ 127.303696][ T7963] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 127.354790][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1014'. [ 127.479749][ T7986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.499211][ T7981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.547798][ T7991] can0: slcan on pts0. [ 127.627608][ T7991] can0 (unregistered): slcan off pts0. [ 127.748361][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'. [ 127.755529][ T7995] vlan2: entered promiscuous mode [ 128.145572][ T8005] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 128.202805][ T5208] Bluetooth: hci2: unexpected event for opcode 0x100c [ 128.452903][ T8023] can0: slcan on pts0. [ 128.517868][ T8023] can0 (unregistered): slcan off pts0. [ 128.568627][ T8026] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 130.038728][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1053'. [ 130.104868][ T8081] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1056'. [ 130.369712][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1064'. [ 130.800423][ T8133] can0: slcan on pts0. [ 130.876918][ T8133] can0 (unregistered): slcan off pts0. [ 130.967600][ T8137] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1078'. [ 131.249484][ T8109] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 131.307069][ T4638] Bluetooth: hci4: unexpected event 0x06 length: 23 > 3 [ 131.430581][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1090'. [ 131.926720][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 132.170338][ T8198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.218809][ T8198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.267541][ T5218] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 132.272559][ T5218] Bluetooth: hci2: Injecting HCI hardware error event [ 132.276891][ T5218] Bluetooth: hci2: hardware error 0x00 [ 132.290277][ T39] audit: type=1326 audit(2000000068.190:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7468579 code=0x7ffc0000 [ 132.300395][ T39] audit: type=1326 audit(2000000068.190:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7468579 code=0x7ffc0000 [ 132.309170][ T39] audit: type=1326 audit(2000000068.190:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7468579 code=0x7ffc0000 [ 132.318164][ T39] audit: type=1326 audit(2000000068.190:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7468579 code=0x7ffc0000 [ 132.327542][ T39] audit: type=1326 audit(2000000068.190:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7468579 code=0x7ffc0000 [ 132.336565][ T39] audit: type=1326 audit(2000000068.190:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7468579 code=0x7ffc0000 [ 132.345474][ T39] audit: type=1326 audit(2000000068.190:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7468579 code=0x7ffc0000 [ 132.354549][ T39] audit: type=1326 audit(2000000068.190:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7468579 code=0x7ffc0000 [ 132.364189][ T39] audit: type=1326 audit(2000000068.190:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=378 compat=1 ip=0xf7468579 code=0x7ffc0000 [ 132.372835][ T39] audit: type=1326 audit(2000000068.190:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7468579 code=0x7ffc0000 [ 132.532713][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 132.739597][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.741767][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.815934][ T5216] Bluetooth: hci0: unexpected event 0x06 length: 23 > 3 [ 132.983203][ T8246] netlink: 'syz.0.1128': attribute type 10 has an invalid length. [ 133.007015][ T8246] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 133.034324][ T8246] syz.0.1128 (8246) used greatest stack depth: 21232 bytes left [ 133.073927][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'. [ 133.150431][ T8250] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1130'. [ 133.172206][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'. [ 133.183386][ T8254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1132'. [ 133.292869][ T8263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.306597][ T5208] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 133.312567][ T8170] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 133.386323][ T4638] Bluetooth: hci4: Opcode 0x2046 failed: -110 [ 133.388847][ T5208] Bluetooth: hci4: command 0x2046 tx timeout [ 133.423288][ T8263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.644009][ T8278] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1140'. [ 133.783726][ T8285] netlink: 'syz.3.1143': attribute type 10 has an invalid length. [ 133.795095][ T8285] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 134.010784][ T8294] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1147'. [ 134.189766][ T8308] ceph: Bad value for 'source' [ 134.336229][ T5218] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 134.356685][ T5247] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 134.556284][ T5247] usb 6-1: Using ep0 maxpacket: 16 [ 134.564084][ T5247] usb 6-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 134.568010][ T5247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.571410][ T5247] usb 6-1: Product: syz [ 134.573185][ T5247] usb 6-1: Manufacturer: syz [ 134.575204][ T5247] usb 6-1: SerialNumber: syz [ 134.579385][ T5247] usb 6-1: config 0 descriptor?? [ 134.620005][ T5209] udevd[5209]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.730441][ T8289] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 134.797306][ T8300] team0: entered promiscuous mode [ 134.800458][ T8300] dummy0: entered promiscuous mode [ 134.809941][ T5250] usb 6-1: USB disconnect, device number 6 [ 134.894874][ T8318] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1158'. [ 135.165472][ T4638] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 135.882535][ T8334] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 136.364523][ T5208] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.372650][ T5208] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.382325][ T5208] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.386631][ T5208] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.389789][ T5208] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 136.392571][ T5208] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.413419][ T8375] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 136.429476][ T5218] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 136.592880][ T1088] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.660988][ T8372] chnl_net:caif_netlink_parms(): no params data found [ 136.735584][ T1088] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.820771][ T8372] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.823754][ T8372] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.828227][ T8372] bridge_slave_0: entered allmulticast mode [ 136.832490][ T8372] bridge_slave_0: entered promiscuous mode [ 136.847905][ T1088] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.853306][ T8372] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.856280][ T8372] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.859429][ T8372] bridge_slave_1: entered allmulticast mode [ 136.863607][ T8372] bridge_slave_1: entered promiscuous mode [ 136.941516][ T1088] bond0: (slave netdevsim0): Releasing backup interface [ 136.950410][ T1088] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.964632][ T8372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.972127][ T8396] can0: slcan on pts0. [ 136.988534][ T8372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.062886][ T8372] team0: Port device team_slave_0 added [ 137.068430][ T8396] can0 (unregistered): slcan off pts0. [ 137.075260][ T8372] team0: Port device team_slave_1 added [ 137.122728][ T8372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.125090][ T8372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.135592][ T8372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.141678][ T8372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.144052][ T8372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.154186][ T8372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.231123][ T1088] bridge_slave_1: left allmulticast mode [ 137.233809][ T1088] bridge_slave_1: left promiscuous mode [ 137.236644][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.242711][ T1088] bridge_slave_0: left allmulticast mode [ 137.245239][ T1088] bridge_slave_0: left promiscuous mode [ 137.248187][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.576464][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.581745][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.591136][ T1088] bond0 (unregistering): Released all slaves [ 137.645696][ T8372] hsr_slave_0: entered promiscuous mode [ 137.649041][ T8372] hsr_slave_1: entered promiscuous mode [ 137.652079][ T8372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.654736][ T8372] Cannot create hsr debugfs directory [ 137.936634][ T1088] hsr_slave_0: left promiscuous mode [ 137.942630][ T1088] hsr_slave_1: left promiscuous mode [ 137.950014][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.954837][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.960966][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.995089][ T1088] veth1_macvtap: left promiscuous mode [ 137.997243][ T1088] veth0_macvtap: left promiscuous mode [ 138.000804][ T1088] veth1_vlan: left promiscuous mode [ 138.003653][ T1088] veth0_vlan: left promiscuous mode [ 138.012197][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 138.419524][ T5218] Bluetooth: hci1: command tx timeout [ 138.748171][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 138.817470][ T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 139.008536][ T8] usb 6-1: config index 0 descriptor too short (expected 64575, got 68) [ 139.011502][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.015103][ T8] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 139.019017][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 139.024502][ T8] usb 6-1: config index 1 descriptor too short (expected 64575, got 68) [ 139.027455][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.030992][ T8] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 139.034718][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 139.057036][ T8] usb 6-1: string descriptor 0 read error: -71 [ 139.059889][ T8] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.063246][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.068300][ T8] usb 6-1: can't set config #1, error -71 [ 139.071949][ T8] usb 6-1: USB disconnect, device number 7 [ 139.449384][ T8440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.474986][ T8440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.782751][ T8372] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 139.793628][ T8372] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 139.800711][ T8372] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.805565][ T8372] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.868751][ T8372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.889788][ T8372] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.904205][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.906928][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.910460][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.912839][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.933777][ T8372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.083628][ T8372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.119997][ T8372] veth0_vlan: entered promiscuous mode [ 140.127839][ T8372] veth1_vlan: entered promiscuous mode [ 140.157899][ T8372] veth0_macvtap: entered promiscuous mode [ 140.163108][ T8372] veth1_macvtap: entered promiscuous mode [ 140.183018][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.191912][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.196042][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.199647][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.202996][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.206672][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.211086][ T8372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.218522][ T8372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.226933][ T8372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.229868][ T8372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.233184][ T8372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.236298][ T8372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.293960][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.299900][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.322899][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.327403][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.432926][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1205'. [ 140.450095][ T8479] team_slave_0: entered promiscuous mode [ 140.452394][ T8479] team_slave_0: entered allmulticast mode [ 140.463215][ T8479] team0: Port device team_slave_0 removed [ 140.496417][ T5218] Bluetooth: hci1: command tx timeout [ 140.578743][ T8490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.609133][ T8490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.762245][ T8491] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1209'. [ 140.886346][ T55] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 141.071491][ T55] usb 8-1: config index 0 descriptor too short (expected 64575, got 68) [ 141.075157][ T55] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.078719][ T55] usb 8-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 141.082340][ T55] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 141.088219][ T55] usb 8-1: config index 1 descriptor too short (expected 64575, got 68) [ 141.091453][ T55] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.094772][ T55] usb 8-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 141.098487][ T55] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 141.118192][ T55] usb 8-1: string descriptor 0 read error: -71 [ 141.120600][ T55] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 141.123640][ T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.128680][ T55] usb 8-1: can't set config #1, error -71 [ 141.137032][ T55] usb 8-1: USB disconnect, device number 4 [ 141.646253][ T5250] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 141.859440][ T5250] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.863249][ T5250] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.875724][ T5250] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.880136][ T5250] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.894667][ T5250] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.904142][ T5250] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.908064][ T5250] usb 5-1: Product: syz [ 141.909968][ T5250] usb 5-1: Manufacturer: syz [ 141.926784][ T5250] cdc_wdm 5-1:1.0: skipping garbage [ 141.929117][ T5250] cdc_wdm 5-1:1.0: skipping garbage [ 141.933866][ T5250] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 141.946203][ T5250] cdc_wdm 5-1:1.0: Unknown control protocol [ 142.162436][ T8516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.181381][ T8516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.249542][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.252797][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.255628][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.258572][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.261508][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.264497][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.267406][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.270271][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.273019][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.275894][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.278793][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.281661][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.284508][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.287390][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.290415][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.293290][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.296077][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.298823][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.301675][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.304551][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.308545][ T1272] usb 5-1: USB disconnect, device number 8 [ 142.311191][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 142.526047][ T8520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.547161][ T8520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.576497][ T5218] Bluetooth: hci1: command tx timeout [ 143.406207][ T2677] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 143.607711][ T2677] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.611512][ T2677] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.614877][ T2677] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 143.618456][ T2677] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.622717][ T2677] usb 7-1: config 0 descriptor?? [ 144.044747][ T2677] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 144.056174][ T2677] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 144.058959][ T2677] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 144.062011][ T2677] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 144.064626][ T2677] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 144.068605][ C2] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 144.076206][ T2677] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 144.079254][ T2677] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 144.082178][ T2677] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 144.084644][ T2677] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 144.106225][ T2677] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 144.109202][ T2677] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 144.113946][ T2677] lg-g15 0003:046D:C222.0004: hidraw1: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 144.243391][ T8] usb 7-1: USB disconnect, device number 7 [ 144.249957][ T39] kauditd_printk_skb: 73 callbacks suppressed [ 144.249966][ T39] audit: type=1326 audit(2000000080.150:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.1.1232" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73d0579 code=0x7fc00000 [ 144.280038][ T39] audit: type=1326 audit(2000000080.180:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.1.1232" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73d0579 code=0x7fc00000 [ 144.656274][ T5218] Bluetooth: hci1: command tx timeout [ 144.974810][ T39] audit: type=1326 audit(2000000080.870:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.1.1232" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73d0579 code=0x7fc00000 [ 144.983265][ T39] audit: type=1326 audit(2000000080.870:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.1.1232" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73d0579 code=0x7fc00000 [ 145.963227][ T8590] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1240'. [ 146.133727][ T8594] Bluetooth: MGMT ver 1.22 [ 146.541873][ T4638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.547982][ T4638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.551783][ T4638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.557394][ T4638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.562418][ T4638] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.565519][ T4638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.577968][ T1088] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.693380][ T1088] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.705183][ T8619] netlink: 'syz.2.1252': attribute type 1 has an invalid length. [ 146.709003][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'. [ 146.782617][ T1088] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.882937][ T1088] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.924165][ T8614] chnl_net:caif_netlink_parms(): no params data found [ 147.085746][ T8614] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.089299][ T8614] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.092491][ T8614] bridge_slave_0: entered allmulticast mode [ 147.096406][ T8614] bridge_slave_0: entered promiscuous mode [ 147.101465][ T8614] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.104483][ T8614] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.107605][ T8614] bridge_slave_1: entered allmulticast mode [ 147.111477][ T8614] bridge_slave_1: entered promiscuous mode [ 147.128430][ T39] audit: type=1326 audit(2000000083.030:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.3.1262" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73f4579 code=0x7fc00000 [ 147.140909][ T39] audit: type=1326 audit(2000000083.040:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.3.1262" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73f4579 code=0x7fc00000 [ 147.202511][ T8614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.211854][ T8614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.246336][ T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 147.297640][ T8614] team0: Port device team_slave_0 added [ 147.308346][ T8614] team0: Port device team_slave_1 added [ 147.311439][ T1088] bridge_slave_1: left allmulticast mode [ 147.313882][ T1088] bridge_slave_1: left promiscuous mode [ 147.316417][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.322567][ T1088] bridge_slave_0: left allmulticast mode [ 147.325121][ T1088] bridge_slave_0: left promiscuous mode [ 147.329213][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.436336][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 147.441464][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 147.454192][ T8] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 147.458271][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.461841][ T8] usb 6-1: Product: syz [ 147.463808][ T8] usb 6-1: Manufacturer: syz [ 147.465876][ T8] usb 6-1: SerialNumber: syz [ 147.480837][ T8] usb 6-1: config 0 descriptor?? [ 147.484072][ T8642] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 147.489566][ T8] hub 6-1:0.0: bad descriptor, ignoring hub [ 147.492344][ T8] hub 6-1:0.0: probe with driver hub failed with error -5 [ 147.499202][ T8] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input10 [ 147.621556][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.629828][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.636776][ T1088] bond0 (unregistering): Released all slaves [ 147.752716][ T8614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.757147][ T8614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.769129][ T8614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.769917][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 147.775941][ T8614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.778779][ T5268] usb 6-1: USB disconnect, device number 8 [ 147.781467][ T8614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.794596][ T8614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.804456][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'. [ 147.845363][ T39] audit: type=1326 audit(2000000083.740:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.3.1262" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73f4579 code=0x7fc00000 [ 147.861951][ T39] audit: type=1326 audit(2000000083.740:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.3.1262" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73f4579 code=0x7fc00000 [ 147.872753][ T39] audit: type=1326 audit(2000000083.740:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.3.1262" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73f4579 code=0x7fc00000 [ 147.883058][ T39] audit: type=1326 audit(2000000083.740:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.3.1262" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73f4579 code=0x7fc00000 [ 148.009488][ T8614] hsr_slave_0: entered promiscuous mode [ 148.013372][ T8614] hsr_slave_1: entered promiscuous mode [ 148.021881][ T8614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.024884][ T8614] Cannot create hsr debugfs directory [ 148.053133][ T8664] netlink: 'syz.2.1265': attribute type 1 has an invalid length. [ 148.056351][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 148.198392][ T1088] hsr_slave_0: left promiscuous mode [ 148.202291][ T1088] hsr_slave_1: left promiscuous mode [ 148.205564][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.209331][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.214019][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.217280][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.272992][ T1088] veth1_macvtap: left promiscuous mode [ 148.275227][ T1088] veth0_macvtap: left promiscuous mode [ 148.277409][ T1088] veth1_vlan: left promiscuous mode [ 148.279339][ T1088] veth0_vlan: left promiscuous mode [ 148.657015][ T5218] Bluetooth: hci1: command tx timeout [ 149.059911][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 149.736677][ T8669] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1267'. [ 150.011438][ T8685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.186779][ T8685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.460838][ T8707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1273'. [ 150.553896][ T8719] tipc: Started in network mode [ 150.555734][ T8719] tipc: Node identity fffffff9, cluster identity 4711 [ 150.559377][ T8719] tipc: Node number set to 4294967289 [ 150.566219][ T8719] tipc: Cannot configure node identity twice [ 150.620322][ T8614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 150.627208][ T8614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 150.633574][ T8614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 150.643731][ T8614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 150.721950][ T8614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.756168][ T5218] Bluetooth: hci1: command tx timeout [ 150.756197][ T8614] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.769644][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.772692][ T5247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.778896][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.781893][ T5247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.815846][ T8614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.993923][ T8614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.999746][ T8762] tipc: Started in network mode [ 151.001424][ T8762] tipc: Node identity 1, cluster identity 4711 [ 151.003490][ T8762] tipc: Node number set to 1 [ 151.063317][ T8614] veth0_vlan: entered promiscuous mode [ 151.074069][ T8614] veth1_vlan: entered promiscuous mode [ 151.092941][ T8614] veth0_macvtap: entered promiscuous mode [ 151.098422][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1289'. [ 151.103622][ T8614] veth1_macvtap: entered promiscuous mode [ 151.115498][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.121222][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.124551][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.129476][ T5247] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 151.132635][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.136044][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.140052][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.144411][ T8614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.163146][ T8614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.170679][ T8614] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.174218][ T8614] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.177923][ T8614] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.181360][ T8614] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.268143][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.270785][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.301293][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.307562][ T5247] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.309861][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.310970][ T5247] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.319474][ T5247] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 151.322503][ T5247] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 151.325180][ T5247] usb 7-1: SerialNumber: syz [ 151.465884][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 151.542315][ T5247] usb 7-1: 0:2 : does not exist [ 151.544045][ T5247] usb 7-1: unit 120 not found! [ 151.555052][ T5247] usb 7-1: unit 102 not found! [ 151.572062][ T5247] usb 7-1: USB disconnect, device number 8 [ 151.686551][ T8819] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1304'. [ 151.690194][ T8819] netlink: del zone limit has 8 unknown bytes [ 151.777629][ T5209] udevd[5209]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.895265][ T8843] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1313'. [ 152.361451][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1322'. [ 152.598290][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1326'. [ 152.601278][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1326'. [ 152.604287][ T8874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1326'. [ 152.816732][ T5218] Bluetooth: hci1: command tx timeout [ 152.956329][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'. [ 153.313799][ T8925] netlink: 'syz.0.1347': attribute type 33 has an invalid length. [ 153.316826][ T8925] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1347'. [ 153.707301][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 153.888772][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 153.893636][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 153.921506][ T8] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 153.931666][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.935448][ T8] usb 5-1: Product: syz [ 153.940203][ T8] usb 5-1: Manufacturer: syz [ 153.942409][ T8] usb 5-1: SerialNumber: syz [ 153.946632][ T8] usb 5-1: config 0 descriptor?? [ 153.949772][ T8935] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.957706][ T8] hub 5-1:0.0: bad descriptor, ignoring hub [ 153.960621][ T8] hub 5-1:0.0: probe with driver hub failed with error -5 [ 153.968469][ T8] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input11 [ 154.164781][ T8] usb 5-1: USB disconnect, device number 9 [ 154.167267][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 154.906377][ T5218] Bluetooth: hci1: command tx timeout [ 154.978829][ T8994] can0: slcan on ptm1. [ 155.122225][ T9002] syzkaller0: entered promiscuous mode [ 155.124176][ T9002] syzkaller0: entered allmulticast mode [ 156.387570][ T8993] can0 (unregistered): slcan off ptm1. [ 156.938686][ T9045] __nla_validate_parse: 3 callbacks suppressed [ 156.938697][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1389'. [ 156.967363][ T9051] can0: slcan on ptm1. [ 156.973950][ T5218] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 157.431705][ T9074] netlink: 'syz.0.1396': attribute type 9 has an invalid length. [ 157.435121][ T9074] netlink: 'syz.0.1396': attribute type 6 has an invalid length. [ 157.797244][ T9048] can0 (unregistered): slcan off ptm1. [ 157.942759][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1399'. [ 158.028765][ T9099] IPVS: length: 35 != 24 [ 158.179612][ T9115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.281145][ T9125] 8021q: VLANs not supported on hsr0 [ 158.283568][ T9115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.329840][ T9129] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1413'. [ 158.410896][ T1272] kernel write not supported for file bpf-prog (pid: 1272 comm: kworker/3:2) [ 158.956211][ T5218] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 158.986336][ T5218] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3 [ 159.217390][ T9176] netlink: 'syz.2.1433': attribute type 10 has an invalid length. [ 159.234709][ T9176] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 159.301324][ T9178] mmap: syz.2.1434 (9178) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 159.981810][ T9205] usb usb8: usbfs: process 9205 (syz.0.1444) did not claim interface 0 before use [ 160.007185][ T30] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 160.010273][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 160.211707][ T30] usb 6-1: config index 0 descriptor too short (expected 64575, got 68) [ 160.215270][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.219179][ T30] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 160.223529][ T30] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 160.230359][ T30] usb 6-1: config index 1 descriptor too short (expected 64575, got 68) [ 160.233838][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.238329][ T30] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 160.239812][ T9220] netlink: 'syz.0.1450': attribute type 10 has an invalid length. [ 160.242639][ T30] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 160.260037][ T30] usb 6-1: string descriptor 0 read error: -71 [ 160.262994][ T30] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 160.263971][ T9220] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 160.266395][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.267932][ T30] usb 6-1: can't set config #1, error -71 [ 160.277039][ T30] usb 6-1: USB disconnect, device number 9 [ 160.576877][ T9238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.681503][ T5218] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3 [ 161.056406][ T4638] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 161.056513][ T5218] Bluetooth: hci1: command 0x2046 tx timeout [ 161.478976][ T9303] dccp_invalid_packet: P.Data Offset(0) too small [ 161.533093][ T9307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1487'. [ 161.541182][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1483'. [ 161.637707][ T9314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1488'. [ 161.678101][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 162.007182][ T5247] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 162.217818][ T5247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 162.222249][ T5247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 162.226752][ T5247] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.231712][ T5247] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.235198][ T5247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.240850][ T5247] usb 5-1: config 0 descriptor?? [ 162.243595][ T9319] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 162.454741][ T9327] netlink: 'syz.2.1495': attribute type 33 has an invalid length. [ 162.458318][ T9327] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1495'. [ 162.602746][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1497'. [ 162.613337][ T9332] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.617592][ T9332] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.621512][ T9332] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.625369][ T9332] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.629370][ T9332] vxlan0: entered promiscuous mode [ 162.658169][ T5247] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 162.663186][ T5247] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 162.674369][ T5247] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 162.862440][ T30] usb 5-1: USB disconnect, device number 10 [ 163.656318][ T5268] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 163.836210][ T5268] usb 5-1: Using ep0 maxpacket: 32 [ 163.840596][ T5268] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.844088][ T5268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.848052][ T5268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.851535][ T5268] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 163.855905][ T5268] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 163.859108][ T5268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.867233][ T5268] usb 5-1: config 0 descriptor?? [ 163.949377][ T9349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.035087][ T9349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.294489][ T5268] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 164.296951][ T5268] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 164.299282][ T5268] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 164.301673][ T5268] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 164.304057][ T5268] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 164.309661][ T5268] ntrig 0003:1B96:000A.0006: hidraw1: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 164.572383][ T39] kauditd_printk_skb: 37 callbacks suppressed [ 164.572399][ T39] audit: type=1326 audit(2000000100.470:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9337 comm="syz.0.1500" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740f579 code=0x0 [ 164.636573][ T5268] usb 5-1: USB disconnect, device number 11 [ 165.397472][ T5268] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 165.584008][ T5268] usb 6-1: config index 0 descriptor too short (expected 64575, got 68) [ 165.590464][ T5268] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.595615][ T5268] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 165.602328][ T5268] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 165.611571][ T5268] usb 6-1: config index 1 descriptor too short (expected 64575, got 68) [ 165.616403][ T5268] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.623316][ T5268] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 165.629457][ T5268] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 165.644361][ T5268] usb 6-1: string descriptor 0 read error: -71 [ 165.647470][ T5268] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 165.651694][ T5268] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.661263][ T5268] usb 6-1: can't set config #1, error -71 [ 165.664813][ T5268] usb 6-1: USB disconnect, device number 10 [ 165.706232][ T5247] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 165.896264][ T5247] usb 7-1: Using ep0 maxpacket: 8 [ 165.900571][ T5247] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 165.905180][ T5247] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 165.908950][ T5247] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.188687][ T5247] usb 7-1: string descriptor 0 read error: -71 [ 166.192704][ T5247] hub 7-1:32.0: USB hub found [ 166.195907][ T5247] hub 7-1:32.0: config failed, can't read hub descriptor (err -22) [ 166.252454][ T5247] usb 7-1: USB disconnect, device number 9 [ 166.741689][ T9402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.888430][ T9402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.276253][ T5250] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 167.489459][ T5250] usb 5-1: config index 0 descriptor too short (expected 64575, got 68) [ 167.493128][ T5250] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.497703][ T5250] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 167.505565][ T5250] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 167.513144][ T5250] usb 5-1: config index 1 descriptor too short (expected 64575, got 68) [ 167.516991][ T5250] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.521565][ T5250] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 167.526508][ T5250] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 167.539880][ T9421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1528'. [ 167.558381][ T5250] usb 5-1: string descriptor 0 read error: -71 [ 167.562484][ T5250] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 167.569106][ T5250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.574795][ T5250] usb 5-1: can't set config #1, error -71 [ 167.578316][ T5250] usb 5-1: USB disconnect, device number 12 [ 167.882096][ T5247] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 168.066424][ T5247] usb 7-1: Using ep0 maxpacket: 8 [ 168.071067][ T5247] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 168.075894][ T5247] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 168.079874][ T5247] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.149779][ T4638] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3 [ 168.405627][ T5247] usb 7-1: string descriptor 0 read error: -71 [ 168.421515][ T5247] hub 7-1:32.0: USB hub found [ 168.424765][ T5247] hub 7-1:32.0: config failed, can't read hub descriptor (err -22) [ 168.500107][ T5247] usb 7-1: USB disconnect, device number 10 [ 168.734047][ T9436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.740318][ T9436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.854478][ T9436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.995056][ T9443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1535'. [ 169.000661][ T9443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.022042][ T9443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.106288][ T8] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 170.290151][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.294536][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.298849][ T8] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 170.302796][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.312182][ T8] usb 6-1: config 0 descriptor?? [ 170.374671][ T9479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1549'. [ 170.382804][ T9475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.418565][ T9475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.727834][ T8] dragonrise 0003:0079:0011.0007: item fetching failed at offset 3/5 [ 170.739114][ T8] dragonrise 0003:0079:0011.0007: parse failed [ 170.745364][ T8] dragonrise 0003:0079:0011.0007: probe with driver dragonrise failed with error -22 [ 170.927366][ T8] usb 6-1: USB disconnect, device number 11 [ 171.208025][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1557'. [ 172.413064][ T9545] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 172.457659][ T9547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.528995][ T9548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.966201][ T4638] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 173.171301][ T4638] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3 [ 173.972900][ T9590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.995715][ T9590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.349467][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1598'. [ 174.639190][ T9604] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1601'. [ 174.706342][ T30] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 174.908624][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.913960][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.918115][ T30] usb 7-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 174.922194][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.926372][ T30] usb 7-1: config 0 descriptor?? [ 175.352842][ T30] dragonrise 0003:0079:0011.0008: item fetching failed at offset 3/5 [ 175.356771][ T30] dragonrise 0003:0079:0011.0008: parse failed [ 175.359667][ T30] dragonrise 0003:0079:0011.0008: probe with driver dragonrise failed with error -22 [ 175.555121][ T30] usb 7-1: USB disconnect, device number 11 [ 175.891485][ T9621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.914637][ T9621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.366247][ T5250] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 176.478293][ T9630] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1611'. [ 176.582256][ T5250] usb 7-1: Using ep0 maxpacket: 8 [ 176.588113][ T5250] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 176.592587][ T5250] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 176.596580][ T5250] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.781400][ T9648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1620'. [ 176.916238][ T5250] usb 7-1: string descriptor 0 read error: -71 [ 176.919356][ T5250] hub 7-1:32.0: USB hub found [ 176.926937][ T5250] hub 7-1:32.0: config failed, can't read hub descriptor (err -22) [ 176.986275][ T2677] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 177.016778][ T5250] usb 7-1: USB disconnect, device number 12 [ 177.176221][ T2677] usb 5-1: Using ep0 maxpacket: 16 [ 177.182862][ T2677] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 177.186031][ T2677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.188840][ T2677] usb 5-1: Product: syz [ 177.190400][ T2677] usb 5-1: Manufacturer: syz [ 177.192413][ T2677] usb 5-1: SerialNumber: syz [ 177.196565][ T2677] usb 5-1: config 0 descriptor?? [ 177.202767][ T2677] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 177.493311][ T9647] input: syz0 as /devices/virtual/input/input13 [ 178.141142][ T2677] gp8psk: usb in 128 operation failed. [ 178.144647][ T2677] gp8psk: usb in 137 operation failed. [ 178.147058][ T2677] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 178.150964][ T2677] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 178.155299][ T2677] usb 5-1: media controller created [ 178.169989][ T2677] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.183717][ T2677] gp8psk_fe: Frontend revision 1 attached [ 178.186462][ T2677] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 178.191725][ T2677] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 178.226288][ T2677] gp8psk: usb in 138 operation failed. [ 178.228625][ T2677] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 178.243060][ T2677] gp8psk: found Genpix USB device pID = 201 (hex) [ 178.246715][ T2677] usb 5-1: USB disconnect, device number 13 [ 178.299690][ T2677] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 178.362889][ T9673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1628'. [ 178.745582][ T9680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.870793][ T9680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.317023][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1634'. [ 179.824190][ T4638] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3 [ 179.916264][ T2677] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 180.098510][ T2677] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.102932][ T2677] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.108375][ T2677] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 180.112135][ T2677] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 180.116410][ T2677] usb 7-1: SerialNumber: syz [ 180.293912][ T9727] can0: slcan on ptm0. [ 180.344831][ T2677] usb 7-1: 0:2 : does not exist [ 180.365997][ T2677] usb 7-1: USB disconnect, device number 13 [ 180.626860][ T5209] udevd[5209]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.912197][ T9746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.939063][ T9746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.073527][ T9726] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 181.137668][ T9724] can0 (unregistered): slcan off ptm0. [ 181.556326][ T1272] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 181.739692][ T1272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 181.748299][ T1272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 181.764331][ T1272] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.775512][ T1272] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.786205][ T1272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.795786][ T1272] usb 5-1: config 0 descriptor?? [ 181.798596][ T9763] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.857389][ T4638] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 181.859848][ T5208] Bluetooth: hci1: command 0x2046 tx timeout [ 181.930218][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1663'. [ 182.036512][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'. [ 182.219123][ T1272] usbhid 5-1:0.0: can't add hid device: -71 [ 182.221566][ T1272] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 182.226728][ T1272] usb 5-1: USB disconnect, device number 14 [ 182.248329][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'. [ 182.979169][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1676'. [ 183.146179][ T5218] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 183.160510][ T5218] Bluetooth: hci1: unexpected event for opcode 0x200c [ 183.492245][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1684'. [ 183.516282][ T55] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 183.559991][ T9852] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1685'. [ 183.720782][ T55] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.725358][ T55] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.730440][ T55] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 183.733649][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 183.736631][ T55] usb 6-1: SerialNumber: syz [ 183.921484][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1688'. [ 183.963379][ T55] usb 6-1: 0:2 : does not exist [ 183.984885][ T55] usb 6-1: USB disconnect, device number 12 [ 184.002225][ T9861] netlink: 'syz.0.1689': attribute type 9 has an invalid length. [ 184.096225][ T5268] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 184.224938][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'. [ 184.237080][ T5209] udevd[5209]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.282946][ T5268] usb 7-1: Using ep0 maxpacket: 16 [ 184.289710][ T5268] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 184.293559][ T5268] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.297001][ T5268] usb 7-1: Product: syz [ 184.301362][ T5268] usb 7-1: Manufacturer: syz [ 184.303000][ T5268] usb 7-1: SerialNumber: syz [ 184.306147][ T5268] usb 7-1: config 0 descriptor?? [ 184.309882][ T5268] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 184.510652][ T9888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.535302][ T9888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.555292][ T9857] input: syz0 as /devices/virtual/input/input14 [ 184.568250][ T9891] can0: slcan on ptm0. [ 185.189463][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'. [ 185.193610][ T9905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.197302][ T9905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.202687][ T5268] gp8psk: usb in 128 operation failed. [ 185.205383][ T9905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.209043][ T5268] gp8psk: usb in 137 operation failed. [ 185.212392][ T5268] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.217498][ T5268] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 185.221682][ T5268] usb 7-1: media controller created [ 185.242716][ T5268] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.259862][ T5268] gp8psk_fe: Frontend revision 1 attached [ 185.261933][ T5268] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 185.264759][ T5268] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 185.291434][ T5268] gp8psk: usb in 138 operation failed. [ 185.293311][ T5268] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 185.296765][ T5268] gp8psk: found Genpix USB device pID = 201 (hex) [ 185.300662][ T5268] usb 7-1: USB disconnect, device number 14 [ 185.355394][ T5268] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 185.420965][ T9890] can0 (unregistered): slcan off ptm0. [ 185.474665][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1707'. [ 185.786386][ T9951] netlink: 'syz.3.1720': attribute type 9 has an invalid length. [ 185.791984][ T5218] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 187.417242][T10015] __nla_validate_parse: 5 callbacks suppressed [ 187.417292][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'. [ 187.477202][T10015] team_slave_0: entered promiscuous mode [ 187.481205][T10015] team_slave_0: entered allmulticast mode [ 187.514936][T10015] team0: Port device team_slave_0 removed [ 188.554293][ T5268] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 188.724121][ T5218] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 188.766243][ T5268] usb 6-1: Using ep0 maxpacket: 32 [ 188.772321][ T5268] usb 6-1: config 0 has an invalid descriptor of length 125, skipping remainder of the config [ 188.777875][ T5268] usb 6-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 188.783748][ T5268] usb 6-1: config 0 interface 0 has no altsetting 0 [ 188.787095][ T5268] usb 6-1: New USB device found, idVendor=046d, idProduct=431c, bcdDevice= 0.40 [ 188.789534][T10048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.791107][ T5268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.807546][ T5268] usb 6-1: config 0 descriptor?? [ 188.815979][ T5268] hub 6-1:0.0: bad descriptor, ignoring hub [ 188.824350][ T5268] hub 6-1:0.0: probe with driver hub failed with error -5 [ 188.844488][T10048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.146360][ T25] usb 6-1: USB disconnect, device number 13 [ 189.985104][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1772'. [ 190.100356][T10087] netlink: 'syz.2.1775': attribute type 9 has an invalid length. [ 190.360638][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1784'. [ 190.406754][T10115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.432937][T10115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.596273][ T5268] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 190.793435][ T5268] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.797820][ T5268] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.803109][ T5268] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.806999][ T5268] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.812271][ T5268] usb 7-1: config 0 descriptor?? [ 190.818659][ T5268] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 190.997546][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1795'. [ 191.001331][T10133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.004429][T10133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.011959][T10133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.503556][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'. [ 191.508430][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1802'. [ 191.943670][T10164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.065981][T10164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.496441][ T5268] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 192.645442][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 192.649287][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 192.676243][ T5268] usb 6-1: Using ep0 maxpacket: 8 [ 192.680690][ T5268] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 192.684167][ T5268] usb 6-1: config 179 has no interface number 0 [ 192.686710][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1817'. [ 192.686906][ T5268] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 192.694423][ T5268] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 192.699031][ T5268] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 192.703667][ T5268] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 192.708090][ T5268] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 192.713254][ T5268] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 192.716726][ T5268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.722719][T10181] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 192.736596][ T5218] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 192.740588][ T5218] Bluetooth: hci1: Injecting HCI hardware error event [ 192.746048][ T5218] Bluetooth: hci1: hardware error 0x00 [ 192.938852][ T5208] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3 [ 192.944431][ T5268] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input15 [ 193.341445][ T5268] usb 6-1: USB disconnect, device number 14 [ 193.344110][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 193.344148][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 193.347181][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1826'. [ 193.348014][ T25] usb 7-1: USB disconnect, device number 15 [ 193.393276][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1827'. [ 193.397463][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1827'. [ 193.430438][T10212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.459932][T10212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.921677][T10228] netlink: 'syz.1.1835': attribute type 9 has an invalid length. [ 194.187288][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.190342][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.276279][ T55] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 194.471628][ T55] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 194.475684][ T55] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.486213][ T55] usb 7-1: Product: syz [ 194.488193][ T55] usb 7-1: Manufacturer: syz [ 194.490278][ T55] usb 7-1: SerialNumber: syz [ 194.495206][ T55] usb 7-1: config 0 descriptor?? [ 194.500904][ T55] usb 7-1: Waiting for MOTU Microbook II to boot up... [ 194.503626][ T55] usb 7-1: failed setting the sample rate for Motu MicroBook II: -22 [ 194.516339][ T55] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 194.704149][ T25] usb 7-1: USB disconnect, device number 16 [ 194.816885][ T5218] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 194.936372][ T5208] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.947920][ T5208] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.956297][ T5208] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.962785][ T5208] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.967531][ T5208] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 194.970687][ T5208] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.105466][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.110974][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.206258][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.210386][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.252573][T10257] chnl_net:caif_netlink_parms(): no params data found [ 195.329290][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.333180][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.395273][T10282] netlink: 'syz.3.1853': attribute type 9 has an invalid length. [ 195.440315][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.444742][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.483002][T10257] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.483909][T10290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.485961][T10257] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.492618][T10257] bridge_slave_0: entered allmulticast mode [ 195.495764][T10257] bridge_slave_0: entered promiscuous mode [ 195.501638][T10257] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.504517][T10257] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.507784][T10257] bridge_slave_1: entered allmulticast mode [ 195.511693][T10257] bridge_slave_1: entered promiscuous mode [ 195.559658][T10257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.564503][T10257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.597427][T10290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.621620][T10257] team0: Port device team_slave_0 added [ 195.632497][T10257] team0: Port device team_slave_1 added [ 195.688295][T10257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.691404][T10257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.702584][T10257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.709094][T10257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.711754][T10257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.722930][T10257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.728670][ T11] bridge_slave_1: left allmulticast mode [ 195.731007][ T11] bridge_slave_1: left promiscuous mode [ 195.733172][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.738507][ T11] bridge_slave_0: left allmulticast mode [ 195.740987][ T11] bridge_slave_0: left promiscuous mode [ 195.743568][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.746289][ T2677] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 195.926332][ T2677] usb 5-1: Using ep0 maxpacket: 16 [ 195.931449][ T2677] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 195.935132][ T2677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.938374][ T2677] usb 5-1: Product: syz [ 195.940091][ T2677] usb 5-1: Manufacturer: syz [ 195.942003][ T2677] usb 5-1: SerialNumber: syz [ 195.945086][ T2677] usb 5-1: config 0 descriptor?? [ 195.950124][ T2677] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 196.078209][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.087287][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.091931][ T11] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 196.098328][ T11] bond0 (unregistering): Released all slaves [ 196.188738][ T11] tipc: Left network mode [ 196.190513][T10292] input: syz0 as /devices/virtual/input/input16 [ 196.194539][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1860'. [ 196.244378][T10257] hsr_slave_0: entered promiscuous mode [ 196.248939][T10257] hsr_slave_1: entered promiscuous mode [ 196.252223][T10257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.255610][T10257] Cannot create hsr debugfs directory [ 196.483756][ T11] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 196.581182][T10324] netlink: 'syz.2.1866': attribute type 9 has an invalid length. [ 196.632880][ T11] team0: left promiscuous mode [ 196.635013][ T11] team_slave_1: left promiscuous mode [ 196.640062][ T11] dummy0: left promiscuous mode [ 196.649148][ T11] hsr_slave_0: left promiscuous mode [ 196.652715][ T11] hsr_slave_1: left promiscuous mode [ 196.691399][ T11] veth1_macvtap: left promiscuous mode [ 196.693880][ T11] veth0_macvtap: left promiscuous mode [ 196.696968][ T11] veth1_vlan: left promiscuous mode [ 196.699582][ T11] veth0_vlan: left promiscuous mode [ 196.818437][ T11] pimreg (unregistering): left allmulticast mode [ 196.846041][ T2677] gp8psk: usb in 128 operation failed. [ 196.849474][ T2677] gp8psk: usb in 137 operation failed. [ 196.851845][ T2677] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 196.856686][ T2677] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 196.861018][ T2677] usb 5-1: media controller created [ 196.880347][ T2677] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.899976][ T2677] gp8psk_fe: Frontend revision 1 attached [ 196.902497][ T2677] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 196.907314][ T2677] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 196.951989][ T2677] gp8psk: usb in 138 operation failed. [ 196.954423][ T2677] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 196.959588][ T2677] gp8psk: found Genpix USB device pID = 201 (hex) [ 196.966025][ T2677] usb 5-1: USB disconnect, device number 15 [ 197.046088][ T2677] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 197.066905][ T5218] Bluetooth: hci4: command tx timeout [ 197.612182][ T11] team0 (unregistering): Port device team_slave_1 removed [ 198.290068][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1875'. [ 198.383302][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1878'. [ 198.818418][T10257] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 198.849864][T10257] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 198.857583][T10257] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 198.864865][T10257] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 198.973962][T10257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.019000][T10257] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.028472][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.031848][ T5250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.044729][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.047986][ T5250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.136280][ T5218] Bluetooth: hci4: command tx timeout [ 199.297696][ T5218] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 199.426511][T10257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.479936][T10257] veth0_vlan: entered promiscuous mode [ 199.490833][T10257] veth1_vlan: entered promiscuous mode [ 199.518210][T10257] veth0_macvtap: entered promiscuous mode [ 199.524961][T10257] veth1_macvtap: entered promiscuous mode [ 199.545042][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.550601][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.555063][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.560775][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.569163][T10257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.580739][T10257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.592716][T10257] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.597870][T10257] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.601790][T10257] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.605732][T10257] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.669377][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.672920][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.697780][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.701057][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.808829][T10421] can0: slcan on pts0. [ 200.066262][ T1272] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 200.248424][ T1272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.254042][ T1272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.260083][ T1272] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.264741][ T1272] usb 5-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 200.268525][ T1272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.273593][ T1272] usb 5-1: config 0 descriptor?? [ 200.666760][T10414] can0 (unregistered): slcan off pts0. [ 200.690711][ T1272] wacom 0003:056A:0314.0009: unbalanced collection at end of report description [ 200.695410][ T1272] wacom 0003:056A:0314.0009: parse failed [ 200.716349][ T1272] wacom 0003:056A:0314.0009: probe with driver wacom failed with error -22 [ 200.887625][ T1272] usb 5-1: USB disconnect, device number 16 [ 201.216405][ T5218] Bluetooth: hci4: command tx timeout [ 201.491385][T10472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.515347][T10472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.825596][T10478] syzkaller0: entered promiscuous mode [ 201.828012][T10478] syzkaller0: entered allmulticast mode [ 202.366252][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 202.566326][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 202.570769][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 202.574209][ T8] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 202.578489][ T8] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 202.582655][ T8] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 202.586516][ T8] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 202.590231][ T8] usb 5-1: config 1 interface 0 has no altsetting 0 [ 202.593133][ T8] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 202.597270][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.605220][ T8] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 202.812109][ T8] scsi host6: usb-storage 5-1:1.0 [ 203.015269][ T2677] usb 5-1: USB disconnect, device number 17 [ 203.173050][T10500] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1919'. [ 203.178347][T10500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.207968][T10500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.296745][ T5218] Bluetooth: hci4: command tx timeout [ 203.376489][T10519] netlink: 'syz.2.1929': attribute type 1 has an invalid length. [ 203.379953][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1929'. [ 203.510123][T10523] syzkaller0: entered promiscuous mode [ 203.512200][T10523] syzkaller0: entered allmulticast mode [ 203.515480][T10527] netlink: 'syz.3.1933': attribute type 10 has an invalid length. [ 204.787129][T10552] ax25_connect(): syz.1.1943 uses autobind, please contact jreuter@yaina.de [ 204.922002][T10561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.952577][T10561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.012412][T10577] veth0_macvtap: left promiscuous mode [ 205.220125][T10582] ax25_connect(): syz.3.1953 uses autobind, please contact jreuter@yaina.de [ 205.345985][T10586] syzkaller0: entered promiscuous mode [ 205.349599][T10586] syzkaller0: entered allmulticast mode [ 205.897162][T10595] netlink: 'syz.0.1959': attribute type 29 has an invalid length. [ 206.785261][T10588] veth0_macvtap: left promiscuous mode [ 206.818296][T10599] team0: entered promiscuous mode [ 206.820323][T10599] team_slave_1: entered promiscuous mode [ 206.822922][T10599] team0: left promiscuous mode [ 206.824857][T10599] team_slave_1: left promiscuous mode [ 206.889805][T10606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.916739][T10606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.053105][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1968'. [ 207.118695][T10623] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1970'. [ 207.147917][T10625] team0: entered promiscuous mode [ 207.149984][T10625] team_slave_1: entered promiscuous mode [ 207.169199][T10627] netlink: 'syz.1.1972': attribute type 1 has an invalid length. [ 207.236212][ T5253] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 207.243429][T10633] TCP: TCP_TX_DELAY enabled [ 207.440104][ T5253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.446685][ T5253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.449831][ T5253] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 207.452472][ T5253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.459641][ T5253] usb 5-1: config 0 descriptor?? [ 207.490024][T10645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1979'. [ 207.591306][ T5218] Bluetooth: hci4: unexpected event 0x06 length: 23 > 3 [ 207.594104][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1981'. [ 207.759483][T10624] team0: left promiscuous mode [ 207.761692][T10624] team_slave_1: left promiscuous mode [ 208.017101][T10666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.031169][ T5253] kye 0003:0458:5013.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 208.037335][ T5253] kye 0003:0458:5013.000A: unknown main item tag 0x0 [ 208.039978][ T5253] kye 0003:0458:5013.000A: unknown main item tag 0x0 [ 208.042713][ T5253] kye 0003:0458:5013.000A: item fetching failed at offset 4/5 [ 208.044980][T10666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.046334][ T5253] kye 0003:0458:5013.000A: parse failed [ 208.053459][ T5253] kye 0003:0458:5013.000A: probe with driver kye failed with error -22 [ 208.158949][T10671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.182146][T10671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.251285][ T30] usb 5-1: USB disconnect, device number 18 [ 208.337398][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1989'. [ 208.610195][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1991'. [ 208.614924][T10681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.618325][T10681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.629544][T10681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.633028][T10681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.779545][T10685] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1993'. [ 208.783886][T10685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1993'. [ 208.954433][T10696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.095306][T10696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.145187][T10705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.210922][T10705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.271072][T10709] ax25_connect(): syz.2.2001 uses autobind, please contact jreuter@yaina.de [ 209.825464][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2005'. [ 209.916210][ T2677] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 210.081043][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'. [ 210.118250][ T2677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.122723][ T2677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.127008][ T2677] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 210.131062][ T2677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.136971][ T2677] usb 6-1: config 0 descriptor?? [ 210.617956][ T2677] kye 0003:0458:5013.000B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 210.622299][ T2677] kye 0003:0458:5013.000B: unknown main item tag 0x0 [ 210.624920][ T2677] kye 0003:0458:5013.000B: unknown main item tag 0x0 [ 210.627570][ T2677] kye 0003:0458:5013.000B: item fetching failed at offset 4/5 [ 210.631132][ T2677] kye 0003:0458:5013.000B: parse failed [ 210.633436][ T2677] kye 0003:0458:5013.000B: probe with driver kye failed with error -22 [ 210.820081][ T2677] usb 6-1: USB disconnect, device number 15 [ 211.007264][T10740] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2013'. [ 211.137697][T10746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.646337][ T967] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 211.780771][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2020'. [ 211.836215][ T967] usb 6-1: Using ep0 maxpacket: 8 [ 211.841714][ T967] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 211.845718][ T967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.852149][ T967] usb 6-1: config 0 descriptor?? [ 212.441696][T10767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.544625][T10767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.992051][T10775] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2027'. [ 213.070208][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2029'. [ 213.227279][T10796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2037'. [ 213.280177][T10802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.332610][T10812] ax25_connect(): syz.3.2042 uses autobind, please contact jreuter@yaina.de [ 213.374270][T10802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.646244][ T1272] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 213.849514][ T1272] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 213.854341][ T1272] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 213.859153][ T1272] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.864679][ T1272] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.868767][ T1272] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.874769][ T1272] usb 7-1: config 0 descriptor?? [ 213.878895][T10818] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 214.016398][T10824] __nla_validate_parse: 1 callbacks suppressed [ 214.016414][T10824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2047'. [ 214.309868][ T1272] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 214.313094][ T1272] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 214.316330][ T1272] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 214.319565][ T1272] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 214.322746][ T1272] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 214.325930][ T1272] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 214.329906][ T1272] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 214.338911][ T1272] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 214.591519][ T30] usb 7-1: USB disconnect, device number 17 [ 214.704202][ T967] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 214.708718][ T967] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 214.713352][ T967] asix 6-1:0.0: probe with driver asix failed with error -71 [ 214.717998][ T967] usb 6-1: USB disconnect, device number 16 [ 215.036715][T10831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2050'. [ 215.071832][T10832] delete_channel: no stack [ 215.248451][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'. [ 215.279379][ T39] audit: type=1326 audit(2000000151.181:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.1.2061" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741f579 code=0x0 [ 215.297130][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2062'. [ 215.363553][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'. [ 215.706234][ T967] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 215.899518][ T967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.904095][ T967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.908315][ T967] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.913552][ T967] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 215.917340][ T967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.923437][ T967] usb 5-1: config 0 descriptor?? [ 216.490279][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2074'. [ 216.604130][ T967] usbhid 5-1:0.0: can't add hid device: -71 [ 216.606912][ T967] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 216.612382][ T967] usb 5-1: USB disconnect, device number 19 [ 217.044669][T10909] ax25_connect(): syz.3.2080 uses autobind, please contact jreuter@yaina.de [ 217.101828][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2082'. [ 217.245418][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2083'. [ 217.302873][T10930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.324720][T10930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.414798][ C2] [ 217.415822][ C2] ================================ [ 217.417917][ C2] WARNING: inconsistent lock state [ 217.419986][ C2] 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 Not tainted [ 217.423673][ C2] -------------------------------- [ 217.426469][ C2] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 217.429238][ C2] syz.0.2091/10938 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 217.431834][ C2] ffff88802c238a80 (lock#14){?.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x7f/0x790 [ 217.436085][ C2] {HARDIRQ-ON-W} state was registered at: [ 217.438408][ C2] lock_acquire+0x1b1/0x560 [ 217.440308][ C2] __mmap_lock_do_trace_acquire_returned+0x97/0x790 [ 217.442923][ C2] copy_mm+0xddc/0x2680 [ 217.444365][ C2] copy_process+0x3ea8/0x6f50 [ 217.445958][ C2] kernel_clone+0xfd/0x980 [ 217.447483][ C2] __do_compat_sys_ia32_clone+0xb7/0x100 [ 217.449368][ C2] __do_fast_syscall_32+0x73/0x120 [ 217.451099][ C2] do_fast_syscall_32+0x32/0x80 [ 217.452957][ C2] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.455065][ C2] irq event stamp: 14 [ 217.456403][ C2] hardirqs last enabled at (13): [] asm_exc_page_fault+0x26/0x30 [ 217.459745][ C2] hardirqs last disabled at (14): [] irqentry_enter+0x54/0x60 [ 217.463059][ C2] softirqs last enabled at (0): [] copy_process+0x1ee0/0x6f50 [ 217.466279][ C2] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 217.468739][ C2] [ 217.468739][ C2] other info that might help us debug this: [ 217.471465][ C2] Possible unsafe locking scenario: [ 217.471465][ C2] [ 217.473970][ C2] CPU0 [ 217.475092][ C2] ---- [ 217.476260][ C2] lock(lock#14); [ 217.477815][ C2] [ 217.479287][ C2] lock(lock#14); [ 217.480904][ C2] [ 217.480904][ C2] *** DEADLOCK *** [ 217.480904][ C2] [ 217.484030][ C2] 2 locks held by syz.0.2091/10938: [ 217.486208][ C2] #0: ffffffff8dbb4ea0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 217.489979][ C2] #1: ffff88805223cd98 (&mm->mmap_lock){++++}-{3:3}, at: stack_map_get_build_id_offset+0x28a/0x760 [ 217.494138][ C2] [ 217.494138][ C2] stack backtrace: [ 217.496603][ C2] CPU: 2 PID: 10938 Comm: syz.0.2091 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 217.500751][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 217.504620][ C2] Call Trace: [ 217.505901][ C2] [ 217.506898][ C2] dump_stack_lvl+0x116/0x1f0 [ 217.508567][ C2] mark_lock+0x923/0xc60 [ 217.510010][ C2] ? __pfx_mark_lock+0x10/0x10 [ 217.511650][ C2] ? lock_acquire+0x1b1/0x560 [ 217.513439][ C2] ? find_held_lock+0x2d/0x110 [ 217.515175][ C2] ? page_ext_put+0x3e/0xd0 [ 217.516857][ C2] ? hlock_class+0x4e/0x130 [ 217.518602][ C2] ? __lock_acquire+0xc5d/0x3b30 [ 217.520265][ C2] __lock_acquire+0x1359/0x3b30 [ 217.521902][ C2] ? __pfx___lock_acquire+0x10/0x10 [ 217.523516][ C2] ? lock_acquire+0x1b1/0x560 [ 217.525097][ C2] lock_acquire+0x1b1/0x560 [ 217.526765][ C2] ? __mmap_lock_do_trace_acquire_returned+0x7f/0x790 [ 217.529536][ C2] ? __pfx_lock_acquire+0x10/0x10 [ 217.531231][ C2] ? get_segment_base+0x1c6/0x270 [ 217.532921][ C2] ? perf_callchain_user+0x534/0xa20 [ 217.534671][ C2] ? down_read_trylock+0x1ed/0x3f0 [ 217.536355][ C2] ? stack_map_get_build_id_offset+0x28a/0x760 [ 217.538479][ C2] __mmap_lock_do_trace_acquire_returned+0x97/0x790 [ 217.540820][ C2] ? __mmap_lock_do_trace_acquire_returned+0x7f/0x790 [ 217.543077][ C2] stack_map_get_build_id_offset+0x602/0x760 [ 217.545093][ C2] ? __pfx___lock_acquire+0x10/0x10 [ 217.546824][ C2] __bpf_get_stack+0x68a/0x710 [ 217.548633][ C2] ? __pfx___bpf_get_stack+0x10/0x10 [ 217.550390][ C2] ? __pfx_lock_acquire+0x10/0x10 [ 217.552101][ C2] bpf_get_stack_raw_tp+0x124/0x160 [ 217.553841][ C2] bpf_prog_e6cf5f9c69743609+0x42/0x46 [ 217.555894][ C2] bpf_trace_run2+0x231/0x590 [ 217.557932][ C2] ? __pfx_bpf_trace_run2+0x10/0x10 [ 217.560189][ C2] ? flush_tlb_func+0x3d2/0x600 [ 217.562308][ C2] ? __pfx_flush_tlb_func+0x10/0x10 [ 217.564580][ C2] trace_tlb_flush+0xf3/0x170 [ 217.566659][ C2] __flush_smp_call_function_queue+0x27a/0x8c0 [ 217.569359][ C2] __sysvec_call_function_single+0x8c/0x410 [ 217.571870][ C2] sysvec_call_function_single+0x43/0xb0 [ 217.574225][ C2] asm_sysvec_call_function_single+0x1a/0x20 [ 217.576749][ C2] RIP: 0023:0xf7229140 [ 217.578531][ C2] Code: 00 c3 8d b4 26 00 00 00 00 90 e8 2b 67 f4 ff 05 cf 0e 1d 00 c7 c0 d8 ff ff ff 65 03 05 00 00 00 00 c3 8d b4 26 00 00 00 00 90 0b 67 f4 ff 05 af 0e 1d 00 53 c7 c2 ec fe ff ff c7 c3 e0 ff ff [ 217.586816][ C2] RSP: 002b:00000000f5d2768c EFLAGS: 00010246 [ 217.589292][ C2] RAX: 00000000ffffff20 RBX: 00000000f73f9ff4 RCX: 0000000000000058 [ 217.592604][ C2] RDX: 00000000f5d27db4 RSI: 00000000f5d27b40 RDI: 00000000f73f9ff4 [ 217.595832][ C2] RBP: 00000000f5d276e8 R08: 0000000000000000 R09: 0000000000000000 [ 217.599227][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.602682][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.606035][ C2] [ 217.624011][T10938] pimreg: entered allmulticast mode Connection to localhost closed by remote host. [ 217.713809][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2093'. [ 217.943190][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.947930][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.103047][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.107679][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.182299][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.186729][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.274736][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 218.278945][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.282822][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.386451][ T11] bridge_slave_1: left allmulticast mode [ 218.388862][ T11] bridge_slave_1: left promiscuous mode [ 218.390775][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.394167][ T11] bridge_slave_0: left allmulticast mode [ 218.396788][ T11] bridge_slave_0: left promiscuous mode [ 218.399339][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.546626][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.550873][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.554590][ T11] bond0 (unregistering): Released all slaves [ 218.638356][ T11] tipc: Left network mode [ 218.743286][ T11] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 218.839439][ T11] hsr_slave_0: left promiscuous mode [ 218.842464][ T11] hsr_slave_1: left promiscuous mode [ 218.845540][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.851296][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.855845][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.861690][ T11] veth1_macvtap: left promiscuous mode [ 218.864189][ T11] veth1_vlan: left promiscuous mode [ 218.867259][ T11] veth0_vlan: left promiscuous mode [ 219.100186][ T11] team0 (unregistering): Port device team_slave_1 removed [ 219.681795][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.745227][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.822073][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.883973][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 219.888350][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.985192][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.040314][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.123778][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.200725][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.283334][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.331362][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.391744][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.446077][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 220.450410][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.533232][ T11] bridge_slave_1: left allmulticast mode [ 220.535747][ T11] bridge_slave_1: left promiscuous mode [ 220.538382][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.543293][ T11] bridge_slave_0: left allmulticast mode [ 220.545679][ T11] bridge_slave_0: left promiscuous mode [ 220.548735][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.554644][ T11] bridge_slave_1: left allmulticast mode [ 220.557603][ T11] bridge_slave_1: left promiscuous mode [ 220.560080][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.564854][ T11] bridge_slave_0: left allmulticast mode [ 220.567453][ T11] bridge_slave_0: left promiscuous mode [ 220.569932][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.575627][ T11] bridge_slave_1: left allmulticast mode [ 220.578741][ T11] bridge_slave_1: left promiscuous mode [ 220.581231][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.586016][ T11] bridge_slave_0: left allmulticast mode [ 220.588642][ T11] bridge_slave_0: left promiscuous mode [ 220.591029][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.101792][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.105985][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.110514][ T11] bond0 (unregistering): Released all slaves [ 221.118741][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.122702][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.126374][ T11] bond0 (unregistering): Released all slaves [ 221.133872][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.139281][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.143313][ T11] bond0 (unregistering): Released all slaves [ 221.250644][ T11] tipc: Left network mode [ 221.817562][ T11] hsr_slave_0: left promiscuous mode [ 221.820659][ T11] hsr_slave_1: left promiscuous mode [ 221.826893][ T11] hsr_slave_0: left promiscuous mode [ 221.829676][ T11] hsr_slave_1: left promiscuous mode [ 221.834803][ T11] hsr_slave_0: left promiscuous mode [ 221.841076][ T11] hsr_slave_1: left promiscuous mode [ 221.843976][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.847563][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.851267][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.859386][ T11] veth1_macvtap: left promiscuous mode [ 221.861750][ T11] veth0_macvtap: left promiscuous mode [ 221.864194][ T11] veth1_vlan: left promiscuous mode [ 221.867414][ T11] veth0_vlan: left promiscuous mode [ 221.871174][ T11] veth1_macvtap: left promiscuous mode [ 221.873539][ T11] veth0_macvtap: left promiscuous mode [ 221.875964][ T11] veth1_vlan: left promiscuous mode [ 221.878272][ T11] veth0_vlan: left promiscuous mode [ 221.881408][ T11] veth1_macvtap: left promiscuous mode [ 221.883851][ T11] veth1_vlan: left promiscuous mode [ 221.886143][ T11] veth0_vlan: left promiscuous mode [ 222.046794][ T11] pimreg (unregistering): left allmulticast mode [ 222.306889][ T11] team0 (unregistering): Port device team_slave_1 removed [ 222.818944][ T11] team0 (unregistering): Port device team_slave_1 removed [ 222.855403][ T11] team0 (unregistering): Port device team_slave_0 removed [ 223.158664][ T11] team0 (unregistering): Port device team_slave_1 removed VM DIAGNOSIS: 13:35:37 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc90006fafb60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff84b05194 RDI=ffffc90006fafb60 RBP=ffffc90006fafb20 RSP=ffffc90006fafa80 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=ffffc90006fafb60 R14=ffffc90006fafb28 R15=0000000000000000 RIP=ffffffff84b051bd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c000000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000569494c0 CR3=00000000249c4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=1ffff11004e73119 RBX=00000000000000cf RCX=ffffffff81f523bb RDX=0000000000000000 RSI=00000000000000cf RDI=ffff8880273988cc RBP=ffff888026efc680 RSP=ffffc90000e37730 R8 =0000000000000005 R9 =00000000ffffffff R10=00000000000000cf R11=0000000000000000 R12=dffffc0000000000 R13=00000000000000d3 R14=0000000000000000 R15=ffff888027398800 RIP=ffffffff81f522af RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000249c4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84f944d5 RDI=ffffffff94d59e00 RBP=ffffffff94d59dc0 RSP=ffffc90023ef73f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000037 R14=ffffffff84f94470 R15=0000000000000000 RIP=ffffffff84f944ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c200000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7229140 CR3=0000000000b52000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802c246300 RCX=ffffffff818263bb RDX=ffff88801bcda440 RSI=ffffffff81826395 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900079ef910 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000007 R12=ffffed1005848c61 R13=0000000000000001 R14=ffff88802c246308 R15=ffff88802c33fd80 RIP=ffffffff81826397 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c300000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74350e8 CR3=0000000000b52000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000