last executing test programs: 3.552638159s ago: executing program 0 (id=6808): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e40)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0x2, 0xffff}, {}, {0xa, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x8}}, @TCA_MATCHALL_FLAGS={0x4, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x60000080}, 0x8004) 3.430835848s ago: executing program 0 (id=6816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.382939532s ago: executing program 1 (id=6822): sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x8c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf040000000000000000130000000800", @ANYRES32=r3, @ANYBLOB="05001300840000000a000600080211000001000006001000800500000600120001000000100011"], 0x50}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 2.303218469s ago: executing program 1 (id=6823): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0xfff0) 2.243458103s ago: executing program 1 (id=6824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b040180", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000003c0)={0x3, 0x0, [{0x3, 0x1, 0x0, 0x0, @sint={0xa, 0x7}}, {0x3, 0x1, 0x0, 0x0, @msi={0x1, 0x2, 0x0, 0x7}}, {0x3, 0x1, 0x0, 0x0, @sint={0x40, 0x8}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000004000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x8}, 0x0) 1.863694688s ago: executing program 1 (id=6825): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x11, &(0x7f0000000140)=@ringbuf={{}, {}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x1000000}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0}, 0x94) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000001c0)={0x1, 0x20, 0x7dff, 0x6, "a09fc910bb060bdc0d40cfcd10bf99f7a0f207000000000000005c543cf861aa"}) 1.763683972s ago: executing program 0 (id=6827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 1.763219096s ago: executing program 3 (id=6828): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x157}, &(0x7f0000000100)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x5, 0x379}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x8b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x200000, 0x4000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r4, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x1035, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0x3}}) syz_ublk_setup_io_uring(0x46bc, 0x0, &(0x7f0000000600), 0x0, 0x0) 1.703399056s ago: executing program 0 (id=6830): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)}], 0x1}, 0x45) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000680)='4', 0x1}], 0x1}, 0x11) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x0) 1.702991839s ago: executing program 2 (id=6831): sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x8c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf040000000000000000130000000800", @ANYRES32=r3, @ANYBLOB="05001300840000000a000600080211000001000006001000800500000600120001000000100011"], 0x50}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 1.702469351s ago: executing program 2 (id=6832): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0xfff0) 1.65197041s ago: executing program 3 (id=6833): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000003c0)={0x3, 0x0, [{0x3, 0x1, 0x0, 0x0, @sint={0xa, 0x7}}, {0x3, 0x1, 0x0, 0x0, @msi={0x1, 0x2, 0x0, 0x7}}, {0x3, 0x1, 0x0, 0x0, @sint={0x40, 0x8}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000004000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x8}, 0x0) 1.651640417s ago: executing program 2 (id=6834): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x60000000}, 0xc) 1.573594956s ago: executing program 3 (id=6835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 1.573336003s ago: executing program 2 (id=6836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.333593572s ago: executing program 1 (id=6837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcebc}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xb}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 843.973898ms ago: executing program 0 (id=6838): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x7, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x1}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x2000000000000205) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x40880) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x20000844) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x4, [{{0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00', 0xffe}}, {{0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e20, 0x1ff, @private0}}, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd6}}]}, 0x290) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 83.936194ms ago: executing program 3 (id=6839): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "00e1ffffff00", "5985e81ad0d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c85bde06fbf19", '\x00', '\x00\x00\x00\f\x00'}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x4, &(0x7f00000000c0)=@gcm_128={{0x304}, "cdbef90c18b633a0", "fa07b3a2d40586d364f360be6df53598", "7eb00b44", "e598980949a58c71"}, 0x28) 83.751392ms ago: executing program 3 (id=6840): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6a) 1.946565ms ago: executing program 2 (id=6841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000000b00000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, 0x0, &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f00000009c0)}, 0x20) writev(r2, &(0x7f0000000300)=[{0x0}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYRESOCT=r4, @ANYRES64], 0x0, 0x52, 0x0, 0x0, 0x9}, 0x28) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x82}}]}, 0x3c}}, 0x0) 1.437231ms ago: executing program 3 (id=6842): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r2, 0x851, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0x0) io_setup(0x25dc, &(0x7f0000000040)=0x0) io_submit(r3, 0x0, 0x0) sendto$packet(r0, &(0x7f00000002c0)="05033900d3fcbabe0000478886dd", 0x50, 0x4, &(0x7f0000000000)={0x11, 0x86dd, r1, 0x1, 0x10, 0x6, @multicast}, 0x14) ustat(0x5, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x1, 0x84) fdatasync(0xffffffffffffffff) mremap(&(0x7f0000fc4000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000fc5000/0x1000)=nil) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) 819.081µs ago: executing program 1 (id=6843): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af25, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x189002, 0x40) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 507.957µs ago: executing program 0 (id=6844): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025b57000fddbdf2511000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 0s ago: executing program 2 (id=6845): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000048882, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002000010027bd7000fbdbdf250a000040000000070600000008000e00ff00000108000d"], 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = dup(r0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x40010, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="09022000", @ANYRES16=r5, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0x0) io_setup(0xc, &(0x7f0000000140)=0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$addseals(r7, 0x409, 0x8) io_submit(r6, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x1000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): 17000] syzkaller1: entered promiscuous mode [ 313.331955][T17000] syzkaller1: entered allmulticast mode [ 313.527913][T17004] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4612'. [ 313.623713][T11058] page_pool_release_retry() stalled pool shutdown: id 53, 1 inflight 60 sec [ 313.813651][ T5855] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 313.943323][ T5750] Bluetooth: hci4: command 0x0406 tx timeout [ 313.963259][ T5855] usb 6-1: Using ep0 maxpacket: 8 [ 313.968125][ T5855] usb 6-1: unable to get BOS descriptor or descriptor too short [ 313.972679][ T5855] usb 6-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 313.977220][ T5855] usb 6-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 313.983338][ T5855] usb 6-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 313.986989][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.990136][ T5855] usb 6-1: Product: syz [ 313.991936][ T5855] usb 6-1: Manufacturer: syz [ 313.994268][ T5855] usb 6-1: SerialNumber: syz [ 314.334180][T17031] syzkaller0: entered promiscuous mode [ 314.336111][T17031] syzkaller0: entered allmulticast mode [ 314.487827][T17033] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4624'. [ 314.601847][T17047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4631'. [ 314.618954][T17049] syzkaller0: entered promiscuous mode [ 314.621329][T17049] syzkaller0: entered allmulticast mode [ 314.864728][ T5855] usb 6-1: reset high-speed USB device number 78 using dummy_hcd [ 315.026973][T17011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.031605][T17011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.037550][ T5855] usb 6-1: unable to get BOS descriptor or descriptor too short [ 315.046653][ T5855] usb 6-1: device firmware changed [ 315.050707][ T5855] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 315.056313][ T5855] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 315.060414][T11058] usb 6-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 315.064598][T11058] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 315.067988][ T5855] usb 6-1: USB disconnect, device number 78 [ 315.621190][T17066] syzkaller0: entered promiscuous mode [ 315.624593][T17066] syzkaller0: entered allmulticast mode [ 315.703083][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 316.744726][ T5106] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 316.749398][ T5106] Bluetooth: hci2: Injecting HCI hardware error event [ 316.773163][ T5750] Bluetooth: hci2: hardware error 0x00 [ 316.987328][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.990205][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.156554][T17104] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4652'. [ 317.301212][T17120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4654'. [ 317.339478][T17118] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4658'. [ 317.472021][T17129] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4663'. [ 317.490169][T17131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4662'. [ 317.617990][T17139] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4667'. [ 317.801694][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4669'. [ 318.247468][T17159] openvswitch: netlink: Missing valid actions attribute. [ 318.254903][T17159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.384288][T17159] block nbd0: server does not support multiple connections per device. [ 318.395236][T17159] block nbd0: shutting down sockets [ 319.063273][ T5750] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 319.244763][T17201] __nla_validate_parse: 1 callbacks suppressed [ 319.244778][T17201] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.4694'. [ 319.268627][T17201] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.4694'. [ 319.276523][T17201] netlink: 508 bytes leftover after parsing attributes in process `syz.1.4694'. [ 319.290650][T17202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4693'. [ 319.775164][T17224] binder: 17222:17224 ioctl c0306201 0 returned -14 [ 319.779434][T17223] openvswitch: netlink: Missing valid actions attribute. [ 319.785076][T17223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.870844][T17237] openvswitch: netlink: Missing valid actions attribute. [ 319.873726][T17237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.362762][T17263] openvswitch: netlink: Missing valid actions attribute. [ 320.366042][T17263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.893070][T17282] openvswitch: netlink: Missing valid actions attribute. [ 320.895366][T17282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.921439][T17287] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4732'. [ 320.945771][T17291] binder: 17290:17291 ioctl c0306201 0 returned -14 [ 320.958279][T17293] syzkaller0: entered promiscuous mode [ 320.960285][T17293] syzkaller0: entered allmulticast mode [ 321.026847][T17296] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4736'. [ 321.176919][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4740'. [ 321.903711][T17343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4752'. [ 322.268752][T17363] binder: 17361:17363 ioctl c0306201 0 returned -14 [ 323.255645][T17385] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4770'. [ 323.273094][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4769'. [ 323.385764][T17393] net_ratelimit: 6 callbacks suppressed [ 323.385783][T17393] openvswitch: netlink: Missing valid actions attribute. [ 323.391553][T17393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.710663][T17423] openvswitch: netlink: Missing valid actions attribute. [ 323.714151][T17423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.748207][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.754104][ T5106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.762393][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.765927][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.769448][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.800282][T17430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.863570][T13981] bridge0: port 1(syz_tun) entered disabled state [ 323.879009][T13981] syz_tun (unregistering): left allmulticast mode [ 323.881543][T13981] syz_tun (unregistering): left promiscuous mode [ 323.885816][T13981] bridge0: port 1(syz_tun) entered disabled state [ 324.094383][ T5828] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.237491][ T5828] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.347464][ T5828] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.436960][ T5828] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.541270][T17424] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.545327][T17424] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.547687][T17424] bridge_slave_0: entered allmulticast mode [ 324.551387][T17424] bridge_slave_0: entered promiscuous mode [ 324.560928][T17424] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.565116][T17424] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.568265][T17424] bridge_slave_1: entered allmulticast mode [ 324.573048][T17424] bridge_slave_1: entered promiscuous mode [ 324.602656][T17424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.609169][T17424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.635083][T17424] team0: Port device team_slave_0 added [ 324.640822][T17424] team0: Port device team_slave_1 added [ 324.679154][T17424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.683123][T17424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.693485][T17424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.718715][T17424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.721394][T17424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.730739][T17424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.810810][T17424] hsr_slave_0: entered promiscuous mode [ 324.814233][T17424] hsr_slave_1: entered promiscuous mode [ 324.817528][T17424] debugfs: 'hsr0' already exists in 'hsr' [ 324.819713][T17424] Cannot create hsr debugfs directory [ 325.030678][ T5828] bond0 (unregistering): Released all slaves [ 325.061514][ T5458] 8021q: adding VLAN 0 to HW filter on device eth2 [ 325.091434][T17498] syzkaller0: entered promiscuous mode [ 325.096265][T17498] syzkaller0: entered allmulticast mode [ 325.398540][T17506] __nla_validate_parse: 2 callbacks suppressed [ 325.398561][T17506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4805'. [ 325.480475][ T5458] 8021q: adding VLAN 0 to HW filter on device eth3 [ 325.576735][T17517] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4810'. [ 325.801010][ T5828] hsr_slave_0: left promiscuous mode [ 325.812679][ T5828] hsr_slave_1: left promiscuous mode [ 325.828418][ T5828] veth1_macvtap: left promiscuous mode [ 325.830965][ T5828] veth0_macvtap: left promiscuous mode [ 325.834557][ T5828] veth1_vlan: left promiscuous mode [ 325.836459][ T5828] veth0_vlan: left promiscuous mode [ 325.878172][ T5106] Bluetooth: hci3: command tx timeout [ 326.083898][ T41] smc: removing ib device syz1 [ 326.149891][T17532] syzkaller0: entered promiscuous mode [ 326.151791][T17532] syzkaller0: entered allmulticast mode [ 326.156585][ T1492] syz1: Port: 1 Link DOWN [ 326.255200][ T41] smbdirect: ib_dev[syz1] removed [ 326.485903][T17559] syzkaller0: entered promiscuous mode [ 326.490198][T17559] syzkaller0: entered allmulticast mode [ 326.504644][T17424] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 326.533205][T17424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.568611][T17424] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 326.611527][T17424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.619959][T17424] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 326.641582][T17424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 326.647512][T17424] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 326.672672][T17424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.731285][T17581] syzkaller0: entered promiscuous mode [ 326.741831][T17581] syzkaller0: entered allmulticast mode [ 326.748443][T17577] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4825'. [ 326.895533][T17424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.910551][T17424] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.940825][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.943869][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.978686][T17599] syzkaller0: entered promiscuous mode [ 326.981134][T17599] syzkaller0: entered allmulticast mode [ 326.986714][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.989712][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.166857][T17610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4835'. [ 327.271895][T17617] process 'syz.0.4837' launched './file2' with NULL argv: empty string added [ 327.368624][T17627] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4842'. [ 327.609307][T17424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.674658][T17424] veth0_vlan: entered promiscuous mode [ 327.694292][T17424] veth1_vlan: entered promiscuous mode [ 327.746933][T17424] veth0_macvtap: entered promiscuous mode [ 327.756757][T17424] veth1_macvtap: entered promiscuous mode [ 327.785680][T17424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.794231][T17657] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4851'. [ 327.806155][T17424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.816308][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.821274][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.825446][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.830360][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.847177][T17660] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4852'. [ 327.941574][ T5106] Bluetooth: hci3: command tx timeout [ 327.971856][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.975361][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.030466][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.034317][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.103861][ T5106] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 328.651754][T17675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.653988][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4857'. [ 328.656299][T17675] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.680432][T17675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.728258][T17675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.735134][T17675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.739041][T17675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.773115][T17675] veth1_vlan: left promiscuous mode [ 328.776667][T17675] veth0_vlan: left promiscuous mode [ 328.783029][T17675] veth0_vlan: entered promiscuous mode [ 328.790321][T17675] veth1_vlan: entered promiscuous mode [ 328.804807][T17675] veth1_macvtap: left promiscuous mode [ 328.813853][T17675] veth0_macvtap: left promiscuous mode [ 328.822050][T17675] veth0_macvtap: entered promiscuous mode [ 328.834589][T17675] veth1_macvtap: entered promiscuous mode [ 328.840558][T17675] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.860584][T17675] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 328.870199][T17675] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.875234][T17675] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.924304][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.927349][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.951976][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.955169][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.979208][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 328.985715][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 328.990535][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 328.999658][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 329.002963][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 329.089831][T17689] syzkaller0: entered promiscuous mode [ 329.094936][T17689] syzkaller0: entered allmulticast mode [ 329.202323][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4866'. [ 330.031670][ T5106] Bluetooth: hci3: command tx timeout [ 330.949096][ T5828] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.067818][ T5106] Bluetooth: hci2: command tx timeout [ 331.075716][ T5828] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.079143][ T5106] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 331.174124][ T5828] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.256421][T17690] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.259138][T17690] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.261859][T17690] bridge_slave_0: entered allmulticast mode [ 331.265027][T17690] bridge_slave_0: entered promiscuous mode [ 331.285945][ T5828] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.299259][T17690] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.302287][T17690] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.306170][T17690] bridge_slave_1: entered allmulticast mode [ 331.312299][T17690] bridge_slave_1: entered promiscuous mode [ 331.339213][T17690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.345769][T17690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.369491][T17690] team0: Port device team_slave_0 added [ 331.395100][T17690] team0: Port device team_slave_1 added [ 331.441602][T17732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4872'. [ 331.465637][T17690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.468887][T17690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.478255][T17690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.484631][T17690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.487283][T17690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.498313][T17690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.524477][ T5828] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 331.529477][ T5828] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 331.533170][ T5828] bridge0: port 3(wlan1) entered disabled state [ 331.539244][ T5828] bridge_slave_1: left allmulticast mode [ 331.543959][ T5828] bridge_slave_1: left promiscuous mode [ 331.546522][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.584022][ T5828] bridge_slave_0: left allmulticast mode [ 331.586145][ T5828] bridge_slave_0: left promiscuous mode [ 331.588362][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.755069][ T5828] bond0 (unregistering): (slave 30): Releasing backup interface [ 331.759596][ T5828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.767288][ T5828] bond0 (unregistering): Released all slaves [ 331.821465][T17690] hsr_slave_0: entered promiscuous mode [ 331.824915][T17690] hsr_slave_1: entered promiscuous mode [ 331.827502][T17690] debugfs: 'hsr0' already exists in 'hsr' [ 331.829686][T17690] Cannot create hsr debugfs directory [ 331.874441][T17740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4875'. [ 331.886101][T17740] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.094521][ T5458] 8021q: adding VLAN 0 to HW filter on device eth2 [ 332.111268][ T5106] Bluetooth: hci3: command tx timeout [ 332.123839][T17754] syzkaller0: entered promiscuous mode [ 332.126251][T17754] syzkaller0: entered allmulticast mode [ 332.217479][ T5828] hsr_slave_0: left promiscuous mode [ 332.220357][ T5828] hsr_slave_1: left promiscuous mode [ 332.222833][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.225476][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.228828][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.232149][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.249514][ T5828] veth1_vlan: left promiscuous mode [ 332.252361][ T5828] veth0_vlan: left promiscuous mode [ 332.446836][ T5828] team0 (unregistering): Port device team_slave_1 removed [ 332.459875][ T5828] team0 (unregistering): Port device team_slave_0 removed [ 332.587776][ T5458] 8021q: adding VLAN 0 to HW filter on device eth3 [ 332.778047][T17775] syzkaller1: entered promiscuous mode [ 332.780518][T17775] syzkaller1: entered allmulticast mode [ 332.968250][T17690] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 332.974678][T17690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 332.978709][T17690] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 332.997618][T17690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 333.005807][T17690] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 333.011506][T17690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 333.016073][T17690] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 333.025800][T17690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 333.095251][T17798] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4888'. [ 333.116445][T17690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.129242][T17690] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.135920][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.138617][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.143485][ T5106] Bluetooth: hci2: command tx timeout [ 333.150653][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.153780][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.263703][T17813] syzkaller0: entered promiscuous mode [ 333.265881][T17813] syzkaller0: entered allmulticast mode [ 333.648390][T17829] Bluetooth: MGMT ver 1.23 [ 333.729677][T17690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.980120][T17690] veth0_vlan: entered promiscuous mode [ 333.991635][T17690] veth1_vlan: entered promiscuous mode [ 334.019256][T17690] veth0_macvtap: entered promiscuous mode [ 334.024121][T17690] veth1_macvtap: entered promiscuous mode [ 334.034251][T17690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.047323][T17690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.056731][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.071058][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.076028][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.080947][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.136395][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.139800][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.162460][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.165260][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.422281][ T5106] Bluetooth: hci0: command 0x0406 tx timeout [ 334.674523][T17838] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4899'. [ 335.141069][ T5750] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 335.146326][ T5750] Bluetooth: hci0: Injecting HCI hardware error event [ 335.152297][ T5106] Bluetooth: hci0: hardware error 0x00 [ 335.221006][ T5750] Bluetooth: hci2: command tx timeout [ 336.287674][T17870] syzkaller0: entered promiscuous mode [ 336.290095][T17870] syzkaller0: entered allmulticast mode [ 336.513934][T17879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4916'. [ 336.520250][T17879] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.224249][ T5106] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 337.300579][ T5106] Bluetooth: hci2: command tx timeout [ 337.656286][T17897] syzkaller0: entered promiscuous mode [ 337.660087][T17897] syzkaller0: entered allmulticast mode [ 338.359821][T17933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4935'. [ 338.366871][T17933] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.437585][T17938] syzkaller0: entered promiscuous mode [ 338.440134][T17938] syzkaller0: entered allmulticast mode [ 338.596265][T17942] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4939'. [ 338.855003][T17962] syzkaller0: entered promiscuous mode [ 338.857096][T17962] syzkaller0: entered allmulticast mode [ 339.174388][T17971] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4951'. [ 339.702162][ T5106] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 339.709487][ T5106] Bluetooth: hci1: Injecting HCI hardware error event [ 339.726287][ T5106] Bluetooth: hci1: hardware error 0x00 [ 341.431593][T18026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4969'. [ 341.601491][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.604467][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.779950][ T6753] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 341.793516][T18038] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4976'. [ 341.870033][ T5106] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 341.943941][ T6753] usb 7-1: unable to get BOS descriptor or descriptor too short [ 341.948614][ T6753] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 341.955946][ T6753] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 341.959693][ T6753] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.964012][ T6753] usb 7-1: Product: syz [ 341.965857][ T6753] usb 7-1: Manufacturer: syz [ 341.967638][ T6753] usb 7-1: SerialNumber: syz [ 342.186507][ T6753] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 342.387811][ T6753] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 342.391917][ T6753] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 342.589278][ T6753] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 342.624528][ T6753] usb 7-1: USB disconnect, device number 60 [ 342.664193][T18068] udevd[18068]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.135474][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 343.135493][ T42] audit: type=1326 audit(1783948201.699:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.1.4991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 343.159869][ T42] audit: type=1326 audit(1783948201.699:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.1.4991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 343.167930][ T42] audit: type=1326 audit(1783948201.699:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.1.4991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 343.178572][ T42] audit: type=1326 audit(1783948201.699:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.1.4991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 343.187402][ T42] audit: type=1326 audit(1783948201.699:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.1.4991" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 343.195931][ T42] audit: type=1326 audit(1783948201.699:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.1.4991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 343.204950][ T42] audit: type=1326 audit(1783948201.699:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.1.4991" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 343.208916][T18088] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4994'. [ 343.213890][ T42] audit: type=1326 audit(1783948201.699:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.1.4991" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 343.590529][T18118] syzkaller0: entered promiscuous mode [ 343.778008][T18133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5012'. [ 345.178000][T18189] syzkaller1: entered promiscuous mode [ 345.181058][T18189] syzkaller1: entered allmulticast mode [ 345.309993][ T5856] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 345.465521][ T5856] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x53, changing to 0x3 [ 345.483034][ T5856] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 35703, setting to 64 [ 345.490749][T18199] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5038'. [ 345.493553][ T5856] usb 7-1: New USB device found, idVendor=0e9c, idProduct=4000, bcdDevice=5b.1e [ 345.498910][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.502891][ T5856] usb 7-1: Product: syz [ 345.504623][ T5856] usb 7-1: Manufacturer: syz [ 345.510321][ T5856] usb 7-1: SerialNumber: syz [ 345.522364][ T5856] usb 7-1: config 0 descriptor?? [ 345.525572][T18183] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 345.671259][T17270] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.674002][T17270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.700850][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5041'. [ 345.924573][ T1044] usb 7-1: USB disconnect, device number 61 [ 345.951730][T18229] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5052'. [ 347.875940][T18279] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5068'. [ 348.158287][T18291] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5073'. [ 348.310362][T18298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5076'. [ 348.401725][T18302] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5078'. [ 348.466735][T18306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5080'. [ 348.686316][T18311] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5083'. [ 348.720870][ T5750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.731426][ T5750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.741054][ T5750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.746574][ T5750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.751042][ T5750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.819857][T13304] syz_tun (unregistering): left allmulticast mode [ 348.867194][T18325] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5087'. [ 349.130411][T18344] macvtap1: entered allmulticast mode [ 349.132857][T18344] dummy0: entered allmulticast mode [ 349.136558][T18344] dummy0: entered promiscuous mode [ 349.277503][T18344] dummy0: left allmulticast mode [ 349.314598][ T1044] dummy0: left promiscuous mode [ 349.524111][T18313] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.527077][T18313] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.530383][T18313] bridge_slave_0: entered allmulticast mode [ 349.534664][T18313] bridge_slave_0: entered promiscuous mode [ 349.540008][T18313] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.542989][T18313] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.546637][T18313] bridge_slave_1: entered allmulticast mode [ 349.550864][T18313] bridge_slave_1: entered promiscuous mode [ 349.584734][T18313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.591474][T18313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.618112][T18313] team0: Port device team_slave_0 added [ 349.624570][T18313] team0: Port device team_slave_1 added [ 349.645662][T18313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.648455][T18313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.661240][T18313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.669266][T18313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.672563][T18313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.683991][T18313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.724414][T18313] hsr_slave_0: entered promiscuous mode [ 349.727551][T18313] hsr_slave_1: entered promiscuous mode [ 349.730859][T18313] debugfs: 'hsr0' already exists in 'hsr' [ 349.733087][T18313] Cannot create hsr debugfs directory [ 349.743131][T18369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5102'. [ 349.884611][T18313] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.908767][T18374] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5104'. [ 350.035325][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.037928][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.058272][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5108'. [ 350.109547][T18313] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.233429][T18313] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.347897][T18313] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.736089][T18313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 350.749317][T18313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 350.755247][T18313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 350.770145][T18313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 350.781231][T18313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 350.799292][T18313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 350.805686][T18313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 350.818960][ T5750] Bluetooth: hci4: command tx timeout [ 350.830057][T18313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 350.948037][T18313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.010298][T18313] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.016112][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.019319][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.042622][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.045530][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.303527][ T1492] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 351.503189][ T1492] usb 7-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 351.513504][ T1492] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.526117][ T1492] usb 7-1: config 0 descriptor?? [ 351.614675][T18428] netlink: 'syz.1.5122': attribute type 1 has an invalid length. [ 351.734287][ T1492] usb 7-1: string descriptor 0 read error: -71 [ 351.738182][T18313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.739490][ T1492] ldusb 7-1:0.0: Interrupt in endpoint not found [ 351.761231][ T1492] usb 7-1: USB disconnect, device number 62 [ 351.774245][T18313] veth0_vlan: entered promiscuous mode [ 351.807755][T18313] veth1_vlan: entered promiscuous mode [ 351.846704][T18313] veth0_macvtap: entered promiscuous mode [ 351.852336][T18313] veth1_macvtap: entered promiscuous mode [ 351.872026][T18313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.886976][T18313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.905536][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.911404][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.915731][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.921858][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.989736][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.008469][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.046314][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.049831][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.898792][ T5750] Bluetooth: hci4: command tx timeout [ 352.904832][T18473] __nla_validate_parse: 5 callbacks suppressed [ 352.904852][T18473] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5138'. [ 353.056117][T18486] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5144'. [ 353.360367][T18492] capability: warning: `syz.1.5145' uses 32-bit capabilities (legacy support in use) [ 353.894978][T18501] binder: 18500:18501 ioctl c0306201 0 returned -14 [ 354.476156][T18512] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5155'. [ 354.820144][T18521] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5159'. [ 354.978513][ T5750] Bluetooth: hci4: command tx timeout [ 355.596229][T18537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5165'. [ 355.774438][ T1044] kernel write not supported for file /input/event0 (pid: 1044 comm: kworker/0:2) [ 355.853548][T18557] syzkaller0: entered promiscuous mode [ 355.856060][T18557] syzkaller0: entered allmulticast mode [ 356.791878][T18589] overlayfs: overlapping lowerdir path [ 356.898333][T18593] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 356.905451][T18593] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5189'. [ 356.911777][T18593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5189'. [ 356.916182][T18593] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 357.584796][T18613] syzkaller0: entered promiscuous mode [ 357.587374][T18613] syzkaller0: entered allmulticast mode [ 358.403048][T18627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5203'. [ 358.484913][T18630] serio: Serial port ptm0 [ 358.561638][T18635] syzkaller0: entered promiscuous mode [ 358.564003][T18635] syzkaller0: entered allmulticast mode [ 359.692089][T18683] comedi comedi0: comedi_config --init_data is deprecated [ 361.016363][T18716] syzkaller0: entered promiscuous mode [ 361.019164][T18716] syzkaller0: entered allmulticast mode [ 361.390376][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5250'. [ 361.399353][T18734] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.408067][T18734] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.857554][ T5750] Bluetooth: hci3: command tx timeout [ 362.012688][T18768] syzkaller0: entered promiscuous mode [ 362.014979][T18768] syzkaller0: entered allmulticast mode [ 362.162125][T18770] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5266'. [ 362.473223][T18779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5269'. [ 362.477478][ T5757] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 362.679225][ T5757] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.683173][ T5757] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.686193][ T5757] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 362.696860][ T5757] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.703708][ T5757] usb 7-1: config 0 descriptor?? [ 362.818519][ T5750] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 362.822124][ T5750] Bluetooth: hci3: Injecting HCI hardware error event [ 362.827856][ T5106] Bluetooth: hci3: hardware error 0x00 [ 363.607369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 363.658669][ T5757] hid-led 0003:27B8:01ED.0006: probe with driver hid-led failed with error -71 [ 363.669635][ T5757] usb 7-1: USB disconnect, device number 63 [ 363.827159][T18795] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5276'. [ 364.300903][T18806] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 364.338686][T18805] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 364.899345][ T5106] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 365.300081][ T5106] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 365.304185][ T5106] Bluetooth: hci2: Injecting HCI hardware error event [ 365.308496][ T5106] Bluetooth: hci2: hardware error 0x00 [ 365.472538][T18835] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5289'. [ 365.620493][ T5750] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 365.625700][ T5750] Bluetooth: hci4: Injecting HCI hardware error event [ 365.630407][ T5750] Bluetooth: hci4: hardware error 0x00 [ 367.377011][ T5106] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 367.702587][ T5750] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 367.856592][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5323'. [ 367.897045][T18913] geneve0: entered promiscuous mode [ 368.291535][ T42] audit: type=1326 audit(1783948226.862:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.1.5336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 368.300589][ T42] audit: type=1326 audit(1783948226.862:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.1.5336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 368.309234][ T42] audit: type=1326 audit(1783948226.862:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.1.5336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 368.317475][ T42] audit: type=1326 audit(1783948226.862:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.1.5336" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 368.325961][ T42] audit: type=1326 audit(1783948226.862:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.1.5336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 368.335247][ T42] audit: type=1326 audit(1783948226.862:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.1.5336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 368.343029][ T42] audit: type=1326 audit(1783948226.862:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.1.5336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 368.351447][ T42] audit: type=1326 audit(1783948226.862:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.1.5336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 368.359301][ T42] audit: type=1326 audit(1783948226.862:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.1.5336" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 368.367670][ T42] audit: type=1326 audit(1783948226.862:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.1.5336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 368.460479][T18940] syzkaller0: entered promiscuous mode [ 368.462631][T18940] syzkaller0: entered allmulticast mode [ 368.686992][T18946] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5340'. [ 369.086306][T18963] macvtap1: entered allmulticast mode [ 369.088983][T18963] dummy0: entered allmulticast mode [ 369.093653][T18963] dummy0: entered promiscuous mode [ 369.166042][T18971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5350'. [ 369.176625][T18971] l2tp_ppp: sess 2/0: no socket in recv [ 369.200526][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5345'. [ 369.604842][T18987] pim6reg: entered allmulticast mode [ 369.615642][T18987] pim6reg: left allmulticast mode [ 369.888551][T18990] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5356'. [ 369.994095][T18997] netlink: 'syz.0.5360': attribute type 39 has an invalid length. [ 370.312776][T19015] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5368'. [ 370.313090][T19016] overlayfs: overlapping lowerdir path [ 370.916074][T19035] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5377'. [ 371.676459][T19053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5384'. [ 371.954148][T19057] netlink: 'syz.1.5386': attribute type 10 has an invalid length. [ 371.967917][T19057] team0: Device wg2 is of different type [ 372.112935][T19062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5388'. [ 372.190618][T19064] futex_wake_op: syz.1.5388 tries to shift op by -1; fix this program [ 372.759711][T19082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5395'. [ 372.841453][T19090] netlink: 'syz.3.5400': attribute type 10 has an invalid length. [ 372.855874][T19090] team0: Device wg2 is of different type [ 372.928930][T19097] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5403'. [ 373.342956][T19119] syzkaller0: entered promiscuous mode [ 373.344818][T19119] syzkaller0: entered allmulticast mode [ 373.506761][T19121] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5414'. [ 373.974896][T19149] netlink: 'syz.2.5427': attribute type 10 has an invalid length. [ 373.982704][T19149] team0: Device wg2 is of different type [ 377.360210][T19219] pim6reg: entered allmulticast mode [ 377.370211][T19219] pim6reg: left allmulticast mode [ 377.412951][T19221] netlink: 'syz.1.5456': attribute type 10 has an invalid length. [ 377.421601][T19221] team0: Device wg2 is of different type [ 377.593885][T19225] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5457'. [ 378.214001][T19243] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5464'. [ 378.417794][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.420499][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.458058][T11058] usb 6-1: [UEAGLE-ATM] firmware is not available [ 378.899074][T19262] syz.3.5471 (19262) used greatest stack depth: 18952 bytes left [ 379.681346][T19287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5479'. [ 379.689698][T19287] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5479'. [ 380.232634][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5485'. [ 380.331424][T19304] netlink: 'syz.1.5486': attribute type 10 has an invalid length. [ 380.347073][T19304] team0: Device wg2 is of different type [ 380.471455][T19307] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5487'. [ 381.433630][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5498'. [ 381.440591][T19332] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5498'. [ 382.043135][T19353] netlink: 'syz.1.5508': attribute type 10 has an invalid length. [ 382.058594][T19353] team0: Device wg2 is of different type [ 382.334738][T19364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5513'. [ 382.410569][T19370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5516'. [ 382.536520][T19376] netlink: 'syz.1.5519': attribute type 5 has an invalid length. [ 382.661145][T19378] __nla_validate_parse: 1 callbacks suppressed [ 382.661169][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5520'. [ 382.670724][T19378] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5520'. [ 383.067372][T19395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5526'. [ 383.123936][T19399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5528'. [ 383.237573][T19409] netlink: 'syz.1.5533': attribute type 10 has an invalid length. [ 383.252309][T19409] team0: Device wg2 is of different type [ 383.510449][T19421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5535'. [ 383.531426][T19419] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 383.752504][T19430] syzkaller0: entered promiscuous mode [ 383.754795][T19430] syzkaller0: entered allmulticast mode [ 383.847324][T19438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5544'. [ 383.869799][T19440] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5545'. [ 383.984144][T19450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5550'. [ 384.021061][T19452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5551'. [ 384.067865][T19457] sctp: [Deprecated]: syz.0.5553 (pid 19457) Use of int in max_burst socket option. [ 384.067865][T19457] Use struct sctp_assoc_value instead [ 384.125875][T19463] syzkaller0: entered promiscuous mode [ 384.131539][T19463] syzkaller0: entered allmulticast mode [ 384.337447][T19469] netlink: 'syz.3.5558': attribute type 10 has an invalid length. [ 384.344186][T19469] team0: Device wg2 is of different type [ 384.389096][T19472] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5559'. [ 385.109342][T19487] overlayfs: overlapping lowerdir path [ 385.223377][T19494] netlink: 'syz.2.5568': attribute type 10 has an invalid length. [ 385.236380][T19494] team0: Device wg2 is of different type [ 385.394559][T19501] syzkaller0: entered promiscuous mode [ 385.398298][T19501] syzkaller0: entered allmulticast mode [ 386.085308][T19520] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 386.098009][T19522] netlink: 'syz.0.5579': attribute type 10 has an invalid length. [ 386.122979][T19522] team0: Device wg2 is of different type [ 387.583365][T19580] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 388.081746][T19604] syzkaller0: entered promiscuous mode [ 388.084145][T19604] syzkaller0: entered allmulticast mode [ 388.169491][T19606] netlink: 'syz.0.5616': attribute type 10 has an invalid length. [ 388.176676][T19606] team0: Device wg2 is of different type [ 388.240839][T19610] __nla_validate_parse: 6 callbacks suppressed [ 388.240861][T19610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5618'. [ 388.247613][T19610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.295702][T19610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.620319][T19631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5625'. [ 389.798267][T19639] syzkaller0: entered promiscuous mode [ 389.800405][T19639] syzkaller0: entered allmulticast mode [ 390.177362][T19662] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 390.213176][T19662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5632'. [ 390.451700][T19686] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5651'. [ 390.574418][ T50] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 390.748244][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 390.753194][ T50] usb 6-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 390.756861][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.762501][ T50] usb 6-1: config 0 descriptor?? [ 390.765498][T19679] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 391.175074][T19679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.183343][T19679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.186478][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5656'. [ 391.197392][ T50] hid_parser_main: 5 callbacks suppressed [ 391.197407][ T50] logitech-djreceiver 0003:046D:C51B.0007: unknown main item tag 0x0 [ 391.202682][ T50] logitech-djreceiver 0003:046D:C51B.0007: unknown main item tag 0x0 [ 391.206826][ T50] logitech-djreceiver 0003:046D:C51B.0007: collection stack underflow [ 391.210260][ T50] logitech-djreceiver 0003:046D:C51B.0007: item 0 0 0 12 parsing failed [ 391.213891][ T50] logitech-djreceiver 0003:046D:C51B.0007: logi_dj_probe: parse failed [ 391.218174][ T50] logitech-djreceiver 0003:046D:C51B.0007: probe with driver logitech-djreceiver failed with error -22 [ 391.389883][ T50] usb 6-1: USB disconnect, device number 79 [ 392.051680][T19717] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 392.065411][T19717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5660'. [ 392.072783][T19721] syzkaller0: entered promiscuous mode [ 392.077645][T19721] syzkaller0: entered allmulticast mode [ 392.232286][T19727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5666'. [ 392.621127][T19752] syzkaller0: entered promiscuous mode [ 392.623393][T19752] syzkaller0: entered allmulticast mode [ 392.768751][T19756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5676'. [ 392.843954][ T50] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 393.003944][ T50] usb 7-1: Using ep0 maxpacket: 32 [ 393.007152][ T50] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 393.012885][ T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.018922][ T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.024964][ T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.030330][ T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.036062][ T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.043212][ T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.048778][ T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.056007][ T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.062859][ T50] usb 7-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 393.067176][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.070697][ T50] usb 7-1: Product: syz [ 393.072289][ T50] usb 7-1: Manufacturer: syz [ 393.074359][ T50] usb 7-1: SerialNumber: syz [ 393.078402][ T50] usb 7-1: config 0 descriptor?? [ 393.084984][ T50] etas_es58x 7-1:0.0: Starting syz syz (Serial Number syz) [ 393.287016][ T5855] usb 7-1: USB disconnect, device number 64 [ 393.883527][T19788] overlay: Unknown parameter '/' [ 394.021339][T19802] syzkaller0: entered promiscuous mode [ 394.033793][T19802] syzkaller0: entered allmulticast mode [ 394.361518][T19822] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5704'. [ 394.943724][T19866] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5725'. [ 396.364310][T19914] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 396.368827][T19914] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 396.590481][ T50] IPVS: starting estimator thread 0... [ 396.703453][T19937] IPVS: using max 23 ests per chain, 55200 per kthread [ 397.449928][T19954] binder: 19951:19954 ioctl c0306201 0 returned -14 [ 397.656338][T19966] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.853576][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5771'. [ 397.864768][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5771'. [ 397.880913][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5771'. [ 397.908342][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5771'. [ 397.915376][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5771'. [ 400.402141][T20020] netlink: 'syz.0.5783': attribute type 10 has an invalid length. [ 400.448934][T20020] team0: Device wg2 is of different type [ 400.455254][T20024] netlink: 'syz.2.5784': attribute type 1 has an invalid length. [ 400.539079][T20024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.603436][T20027] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 400.664583][T17735] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 400.827912][T17735] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 400.891533][T20034] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5788'. [ 402.299003][T20057] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5794'. [ 402.524916][T20059] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5795'. [ 404.274903][T20086] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5807'. [ 405.417849][T20106] syzkaller0: entered promiscuous mode [ 405.426868][T20106] syzkaller0: entered allmulticast mode [ 405.830522][T20127] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 405.991840][ T848] IPVS: starting estimator thread 0... [ 406.063447][T20144] random: crng reseeded on system resumption [ 406.102820][T20140] IPVS: using max 42 ests per chain, 100800 per kthread [ 406.157896][T20149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5828'. [ 406.563773][T20170] syzkaller0: entered promiscuous mode [ 406.566198][T20170] syzkaller0: entered allmulticast mode [ 406.678230][T20174] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5838'. [ 406.957801][T20193] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5847'. [ 407.218248][T20219] syzkaller0: entered promiscuous mode [ 407.220308][T20219] syzkaller0: entered allmulticast mode [ 407.422176][ T50] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 407.435267][T20235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5865'. [ 407.438524][T20235] netlink: 'syz.3.5865': attribute type 10 has an invalid length. [ 407.441714][T20235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5865'. [ 407.454718][T20235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5865'. [ 407.458337][T20235] netlink: 'syz.3.5865': attribute type 10 has an invalid length. [ 407.461243][T20235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5865'. [ 407.584101][ T50] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.586409][T20252] tipc: Started in network mode [ 407.590718][T20252] tipc: Node identity be6dc0851b3d, cluster identity 4711 [ 407.591790][ T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 407.596212][T20252] tipc: Enabled bearer , priority 0 [ 407.602388][ T50] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 407.606352][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.616129][ T50] usb 5-1: config 0 descriptor?? [ 407.624051][ T50] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 407.631808][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 407.645115][ T50] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 407.645167][T20257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5873'. [ 407.649584][ T50] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 407.655866][ T50] usb 5-1: media controller created [ 407.655942][T20252] syzkaller0: entered promiscuous mode [ 407.658628][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.660415][T20252] syzkaller0: entered allmulticast mode [ 407.668532][T20252] tipc: Resetting bearer [ 407.693229][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 407.698653][ T50] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 407.704910][ T50] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input60 [ 407.725908][ T50] dvb-usb: schedule remote query interval to 150 msecs. [ 407.728824][ T50] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 407.799560][ T72] tipc: Resetting bearer [ 407.814307][T20249] tipc: Resetting bearer [ 407.831566][ T5841] usb 5-1: USB disconnect, device number 71 [ 407.857612][ T5841] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 408.168274][T20276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5879'. [ 409.600804][T20249] tipc: Disabling bearer [ 409.616388][ T5841] tipc: Node number set to 2773532805 [ 409.861043][T20307] netlink: 'syz.1.5889': attribute type 1 has an invalid length. [ 411.331742][ T6753] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 411.481704][ T6753] usb 6-1: Using ep0 maxpacket: 8 [ 411.485475][ T6753] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 411.489243][ T6753] usb 6-1: config 179 has no interface number 0 [ 411.492011][ T6753] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 411.496838][ T6753] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 411.501032][ T6753] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 411.505900][ T6753] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 411.509853][ T6753] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 411.516459][ T6753] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 411.522913][ T6753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.542326][T20366] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 411.601057][T20389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 411.604600][T20389] IPv6: NLM_F_CREATE should be set when creating new route [ 411.644951][T20389] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5921'. [ 411.648701][T20389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 411.651086][T20389] IPv6: NLM_F_CREATE should be set when creating new route [ 411.745420][T20393] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5923'. [ 411.835476][ T6753] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input61 [ 412.025135][ T50] usb 6-1: USB disconnect, device number 80 [ 412.025191][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 412.031423][ C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 412.292901][T20400] futex_wake_op: syz.3.5922 tries to shift op by 36; fix this program [ 413.267725][T20443] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5937'. [ 414.949846][T20455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5942'. [ 414.996178][T20461] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5945'. [ 415.073875][T20470] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5949'. [ 415.203889][T20482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5954'. [ 415.397633][T20496] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5961'. [ 415.747469][T20518] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 416.662285][T20557] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.665398][T20557] bridge0: port 2(bridge_slave_1) entered listening state [ 416.668345][T20557] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.671160][T20557] bridge0: port 1(bridge_slave_0) entered listening state [ 416.689386][T20560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5987'. [ 416.699045][T20557] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 416.955310][T20582] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 417.269799][T20603] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6009'. [ 417.884633][T20634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.887527][T20634] IPv6: NLM_F_CREATE should be set when creating new route [ 417.897201][T20634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.983869][T20640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6023'. [ 417.987410][T20640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6023'. [ 418.167984][T20655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 418.174427][T20655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 418.365906][T20677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 418.612806][T20700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 418.615476][T20700] IPv6: NLM_F_CREATE should be set when creating new route [ 418.687455][T20704] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 418.711199][T20704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6051'. [ 421.117911][T20804] tipc: Started in network mode [ 421.119918][T20804] tipc: Node identity 2007ff, cluster identity 4711 [ 421.123380][T20804] tipc: Node number set to 2099199 [ 421.141994][T20806] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6098'. [ 421.316370][T20818] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6103'. [ 421.549493][T20842] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6115'. [ 421.589627][T20844] syzkaller1: entered promiscuous mode [ 421.592197][T20844] syzkaller1: entered allmulticast mode [ 421.740699][T20853] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6120'. [ 421.835668][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6125'. [ 421.838684][T20864] netlink: 'syz.0.6125': attribute type 10 has an invalid length. [ 421.841630][T20864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6125'. [ 421.850190][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6125'. [ 421.853255][T20864] netlink: 'syz.0.6125': attribute type 10 has an invalid length. [ 421.855728][T20864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6125'. [ 421.856516][T20866] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6126'. [ 421.863458][T20866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 422.084231][T20884] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6136'. [ 422.202245][T20906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6145'. [ 422.206572][T20906] netlink: 'syz.1.6145': attribute type 10 has an invalid length. [ 422.209677][T20906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6145'. [ 422.211039][T20907] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6147'. [ 422.219502][T20906] netlink: 'syz.1.6145': attribute type 10 has an invalid length. [ 422.280427][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 422.280446][ T42] audit: type=1326 audit(1783948280.848:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20916 comm="syz.3.6151" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f03fec code=0x0 [ 422.690943][ T24] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 422.833254][T20938] netlink: 'syz.1.6158': attribute type 10 has an invalid length. [ 422.860836][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 422.864388][ T24] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 422.867456][ T24] usb 7-1: config 0 has no interface number 0 [ 422.870920][ T24] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 422.875406][ T24] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 422.881115][ T24] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 422.884667][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.887794][ T24] usb 7-1: Product: syz [ 422.889470][ T24] usb 7-1: Manufacturer: syz [ 422.892133][ T24] usb 7-1: SerialNumber: syz [ 422.895311][ T24] usb 7-1: config 0 descriptor?? [ 422.898150][T20929] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 422.901212][T20929] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 423.109719][T20929] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 423.112569][T20929] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 423.316774][ T24] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 423.560340][T11058] usb 6-1: new low-speed USB device number 81 using dummy_hcd [ 423.712469][T11058] usb 6-1: unable to get BOS descriptor or descriptor too short [ 423.716849][T11058] usb 6-1: config 195 has an invalid interface number: 100 but max is 0 [ 423.720419][T11058] usb 6-1: config 195 has no interface number 0 [ 423.723032][T11058] usb 6-1: config 195 interface 100 has no altsetting 0 [ 423.728932][T11058] usb 6-1: string descriptor 0 read error: -22 [ 423.731736][T11058] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=f7.52 [ 423.735305][T11058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.744123][T11058] usb 6-1: NFC: intf ffff888023789000 id ffffffff8fc68740 [ 423.955654][ T5841] usb 6-1: USB disconnect, device number 81 [ 424.108901][T20999] netlink: 'syz.0.6186': attribute type 10 has an invalid length. [ 424.113870][T20999] netlink: 'syz.0.6186': attribute type 10 has an invalid length. [ 424.168153][T21001] syzkaller1: entered promiscuous mode [ 424.171376][T21001] syzkaller1: entered allmulticast mode [ 424.323935][ T24] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 424.335448][ T24] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 424.339329][ T24] asix 7-1:0.34: probe with driver asix failed with error -71 [ 424.346766][ T24] usb 7-1: USB disconnect, device number 65 [ 424.491318][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.900926][ T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 425.052819][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 425.057919][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.062737][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.066348][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 425.071348][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 425.074661][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.079352][ T24] usb 5-1: config 0 descriptor?? [ 425.110669][ T1363] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 425.190487][T21067] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 425.280715][ T1363] usb 7-1: Using ep0 maxpacket: 32 [ 425.284303][ T1363] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 425.286974][ T1363] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 425.294022][ T1363] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 425.296894][ T1363] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 425.299873][ T1363] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 425.303428][ T1363] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 425.307479][ T1363] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 425.310749][ T1363] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.314909][ T1363] usb 7-1: config 0 descriptor?? [ 425.497191][ T24] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 425.505262][ T24] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 425.508358][ T24] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 425.511509][ T24] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 425.516686][ T24] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 425.519828][ T24] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 425.523719][ T24] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 425.530989][ T24] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 425.537335][ T1363] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 66 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 425.542076][ T24] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 425.545235][ T24] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 425.548251][ T24] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 425.587202][ T24] microsoft 0003:045E:07DA.0008: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 425.592696][ T24] microsoft 0003:045E:07DA.0008: no inputs found [ 425.595334][ T24] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 425.695376][ T1363] usb 5-1: USB disconnect, device number 72 [ 425.784103][ C1] usblp0: nonzero read bulk status received: -71 [ 425.784449][ T5757] usb 7-1: USB disconnect, device number 66 [ 425.788487][T21055] usblp0: error -71 reading from printer [ 425.950691][T21090] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 425.990006][T21054] usblp0: removed [ 426.021764][ T50] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 426.195198][ T50] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 426.202240][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.207123][ T50] usb 6-1: Product: syz [ 426.208521][ T50] usb 6-1: Manufacturer: syz [ 426.210223][ T50] usb 6-1: SerialNumber: syz [ 426.213567][ T50] usb 6-1: config 0 descriptor?? [ 426.217599][ T50] hub 6-1:0.0: bad descriptor, ignoring hub [ 426.219628][ T50] hub 6-1:0.0: probe with driver hub failed with error -5 [ 426.402454][T21111] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 426.420350][ T50] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 426.425305][ T50] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 426.430811][ T50] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 426.434424][ T50] usb 6-1: media controller created [ 426.448349][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 426.491479][ T50] DVB: Unable to find symbol dib7000p_attach() [ 426.493511][ T50] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 426.549951][ T50] rc_core: IR keymap rc-dib0700-rc5 not found [ 426.552049][ T50] Registered IR keymap rc-empty [ 426.555223][ T50] dvb-usb: could not initialize remote control. [ 426.557826][ T50] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 426.627578][ T50] usb 6-1: USB disconnect, device number 82 [ 426.650587][ T50] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 426.849838][ T1363] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 427.011931][ T1363] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 427.015784][ T1363] usb 7-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 427.018704][ T1363] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.023642][ T1363] usb 7-1: config 0 descriptor?? [ 427.025832][T21129] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 427.215055][T21153] __nla_validate_parse: 18 callbacks suppressed [ 427.215070][T21153] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6259'. [ 427.636434][ T5757] usb 7-1: USB disconnect, device number 67 [ 428.092651][T21170] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 428.108073][T21170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6267'. [ 428.171124][T21173] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6268'. [ 428.205657][T21175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6269'. [ 428.219727][ T5855] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 428.237624][T21177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6270'. [ 428.371253][ T5855] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 428.374188][ T5855] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 428.377631][ T5855] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 428.380855][ T5855] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 428.384336][ T5855] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 428.390038][ T5855] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 428.392961][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 428.395508][ T5855] usb 5-1: Product: syz [ 428.396881][ T5855] usb 5-1: Manufacturer: syz [ 428.403345][ T5855] cdc_wdm 5-1:1.0: skipping garbage [ 428.405272][ T5855] cdc_wdm 5-1:1.0: skipping garbage [ 428.409193][ T5855] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 428.411341][ T5855] cdc_wdm 5-1:1.0: Unknown control protocol [ 429.016062][T11058] usb 5-1: USB disconnect, device number 73 [ 429.265829][T21196] cifs: Unknown parameter 'ӭ'4,Zz-#F<]%gC [ 429.265829][T21196] SȘȞZ6' [ 429.270893][T21197] syzkaller1: entered promiscuous mode [ 429.272707][T21197] syzkaller1: entered allmulticast mode [ 429.541350][T21209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6285'. [ 429.548596][T21210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6284'. [ 429.552391][T21210] netlink: 'syz.1.6284': attribute type 10 has an invalid length. [ 429.555352][T21210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6284'. [ 429.561270][T21210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6284'. [ 429.564891][T21210] netlink: 'syz.1.6284': attribute type 10 has an invalid length. [ 429.567869][T21210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6284'. [ 429.940335][ T1363] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 429.979569][ T50] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 430.099481][ T1363] usb 6-1: Using ep0 maxpacket: 32 [ 430.103890][ T1363] usb 6-1: unable to get BOS descriptor or descriptor too short [ 430.107832][ T1363] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 430.109503][ T5855] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 430.113967][ T1363] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 430.117453][ T1363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.121027][ T1363] usb 6-1: Product: syz [ 430.122729][ T1363] usb 6-1: Manufacturer: syz [ 430.124530][ T1363] usb 6-1: SerialNumber: syz [ 430.150949][ T50] usb 7-1: not running at top speed; connect to a high speed hub [ 430.155260][ T50] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 135, changing to 4 [ 430.159814][ T50] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1624, setting to 1023 [ 430.166130][ T50] usb 7-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 430.169929][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.173520][ T50] usb 7-1: Product: syz [ 430.175245][ T50] usb 7-1: Manufacturer: syz [ 430.177202][ T50] usb 7-1: SerialNumber: syz [ 430.259504][ T5855] usb 5-1: Using ep0 maxpacket: 16 [ 430.263006][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.266497][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.269618][ T5855] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 430.273612][ T5855] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 430.276461][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.281351][ T5855] usb 5-1: config 0 descriptor?? [ 430.336009][ T1363] usb 6-1: Limiting number of CPorts to U8_MAX [ 430.340472][ T1363] usb 6-1: Not enough endpoints found in device, aborting! [ 430.391051][ T50] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 430.413088][ T50] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 430.417826][ T50] usb 7-1: selecting invalid altsetting 1 [ 430.419973][ T50] snd-usb-us122l 7-1:1.1: usb_set_interface error [ 430.422179][ T50] snd-usb-us122l 7-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 430.429154][ T50] usb 7-1: USB disconnect, device number 68 [ 430.440799][T20216] udevd[20216]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.539306][T11058] usb 6-1: USB disconnect, device number 83 [ 430.688990][ T5855] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 430.692757][ T5855] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 430.696300][ T5855] microsoft 0003:045E:07DA.000A: unsupported Resolution Multiplier 0 [ 430.700210][ T5855] microsoft 0003:045E:07DA.000A: unsupported Resolution Multiplier 0 [ 430.704262][ T5855] microsoft 0003:045E:07DA.000A: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 430.708656][ T5855] microsoft 0003:045E:07DA.000A: no inputs found [ 430.710865][ T5855] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 430.888453][ T6753] usb 5-1: USB disconnect, device number 74 [ 430.929198][T21239] netlink: 'syz.2.6299': attribute type 10 has an invalid length. [ 430.937827][T21239] netlink: 'syz.2.6299': attribute type 10 has an invalid length. [ 431.650261][ T1363] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 431.737087][T21298] comedi comedi3: adq12b: I/O base address or length out of range [ 431.802364][ T1363] usb 6-1: Using ep0 maxpacket: 16 [ 431.806497][ T1363] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.811005][ T1363] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 431.815147][ T1363] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 431.821869][ T1363] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.827696][ T1363] usb 6-1: config 0 descriptor?? [ 431.836928][ T1363] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 432.036275][ T5855] usb 6-1: USB disconnect, device number 84 [ 432.269245][ T5757] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 432.441533][ T5757] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.444778][ T5757] usb 5-1: config 0 has no interfaces? [ 432.446577][ T5757] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 432.449677][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.454698][ T5757] usb 5-1: config 0 descriptor?? [ 432.604030][T21341] __nla_validate_parse: 8 callbacks suppressed [ 432.604050][T21341] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6340'. [ 432.649036][T21343] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 432.653710][T21343] overlayfs: failed to set xattr on upper [ 432.656217][T21343] overlayfs: ...falling back to redirect_dir=nofollow. [ 432.659166][T21343] overlayfs: ...falling back to index=off. [ 432.670750][ T5757] usb 5-1: USB disconnect, device number 75 [ 432.697733][T21345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6342'. [ 432.966143][T21349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6344'. [ 432.969318][T11058] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 433.120856][T11058] usb 6-1: unable to get BOS descriptor or descriptor too short [ 433.124633][T11058] usb 6-1: language id specifier not provided by device, defaulting to English [ 433.128833][T11058] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 433.132041][T11058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.134615][T11058] usb 6-1: Product: syz [ 433.136319][T11058] usb 6-1: Manufacturer: [ 433.138153][T11058] usb 6-1: SerialNumber: syz [ 433.355240][T11058] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 433.358282][T11058] usb 6-1: MIDIStreaming interface descriptor not found [ 433.409354][T11058] usb 6-1: USB disconnect, device number 85 [ 433.460149][T20268] udevd[20268]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.519102][ T5897] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 433.681264][ T5897] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.685285][ T5897] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 433.688391][ T5897] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 433.691835][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.696501][ T5897] usb 7-1: config 0 descriptor?? [ 433.703436][ T5897] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 433.705947][ T5897] dvb-usb: bulk message failed: -22 (3/0) [ 433.711410][ T5897] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 433.714739][ T5897] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 433.716927][ T5897] usb 7-1: media controller created [ 433.719520][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 433.727935][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 433.730851][ T5897] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 433.736286][ T5897] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input63 [ 433.745098][ T5897] dvb-usb: schedule remote query interval to 150 msecs. [ 433.748066][ T5897] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 433.901131][ T5897] dvb-usb: bulk message failed: -22 (1/0) [ 433.904292][ T5897] dvb-usb: error while querying for an remote control event. [ 433.912693][ T1363] usb 7-1: USB disconnect, device number 69 [ 433.933313][ T1363] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 434.229337][T21402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6369'. [ 434.387861][T21419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6377'. [ 434.414011][T21421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6378'. [ 434.417461][T21421] netlink: 'syz.1.6378': attribute type 10 has an invalid length. [ 434.421263][T21421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6378'. [ 434.430481][T21421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6378'. [ 434.433410][T21421] netlink: 'syz.1.6378': attribute type 10 has an invalid length. [ 434.436036][T21421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6378'. [ 434.643713][T21444] comedi comedi1: 8255: I/O base address not correctly aligned [ 434.689332][ T1363] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 434.849854][ T1363] usb 5-1: Using ep0 maxpacket: 8 [ 434.855991][ T1363] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 434.862196][ T1363] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 434.865173][ T1363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.868010][ T1363] usb 5-1: Product: syz [ 434.869981][ T1363] usb 5-1: Manufacturer: syz [ 434.871342][ T1363] usb 5-1: SerialNumber: syz [ 434.875570][ T1363] usb 5-1: config 0 descriptor?? [ 434.883290][ T1363] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 434.886724][ T1363] usb 5-1: setting power ON [ 434.888308][ T1363] dvb-usb: bulk message failed: -22 (2/0) [ 434.896522][ T1363] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 434.900582][ T1363] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 434.902987][ T1363] usb 5-1: media controller created [ 434.913059][ T1363] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 434.923806][ T1363] usb 5-1: selecting invalid altsetting 6 [ 434.925837][ T1363] usb 5-1: digital interface selection failed (-22) [ 434.927702][ T1363] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 434.931670][ T1363] usb 5-1: setting power OFF [ 434.933282][ T1363] dvb-usb: bulk message failed: -22 (2/0) [ 434.935429][ T1363] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 434.938342][ T1363] (NULL device *): no alternate interface [ 434.976132][ T1363] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 435.087230][ T6753] usb 5-1: USB disconnect, device number 76 [ 435.379544][T21481] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 435.392096][T21481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6407'. [ 435.484133][T21486] netlink: 'syz.2.6409': attribute type 10 has an invalid length. [ 435.488235][T21486] netlink: 'syz.2.6409': attribute type 10 has an invalid length. [ 435.850236][T21507] netlink: 'syz.2.6419': attribute type 10 has an invalid length. [ 435.854880][T21507] netlink: 'syz.2.6419': attribute type 10 has an invalid length. [ 436.844381][T21557] netlink: 'syz.0.6440': attribute type 10 has an invalid length. [ 436.849659][T21557] netlink: 'syz.0.6440': attribute type 10 has an invalid length. [ 437.685900][T21595] __nla_validate_parse: 15 callbacks suppressed [ 437.685914][T21595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6457'. [ 437.692987][T21595] netlink: 'syz.0.6457': attribute type 10 has an invalid length. [ 437.695646][T21595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6457'. [ 437.700905][T21595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6457'. [ 437.703996][T21595] netlink: 'syz.0.6457': attribute type 10 has an invalid length. [ 437.707375][T21595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6457'. [ 438.058853][T21620] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6469'. [ 438.338819][ T24] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 438.502477][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.506394][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 438.512763][ T24] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 438.518252][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.523827][ T24] usb 5-1: config 0 descriptor?? [ 438.540543][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 438.543580][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 438.551039][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 438.556908][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 438.560181][ T24] usb 5-1: media controller created [ 438.564468][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 438.567565][T21653] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6485'. [ 438.569403][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 438.573168][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 438.576753][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input64 [ 438.581533][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 438.584281][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 438.599934][T21656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6486'. [ 438.606364][T21656] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6486'. [ 438.732867][ T24] usb 5-1: USB disconnect, device number 77 [ 438.755552][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 439.768621][ T6753] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 439.855202][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.857966][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.929076][ T6753] usb 7-1: Using ep0 maxpacket: 32 [ 439.938663][ T6753] usb 7-1: unable to get BOS descriptor or descriptor too short [ 439.942023][ T6753] usb 7-1: config 165 has an invalid interface number: 162 but max is 0 [ 439.944527][ T6753] usb 7-1: config 165 has no interface number 0 [ 439.946402][ T6753] usb 7-1: config 165 interface 162 has no altsetting 0 [ 439.953048][ T6753] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 439.955971][ T6753] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.956390][T21706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6510'. [ 439.959298][ T6753] usb 7-1: Product: syz [ 439.971509][ T6753] usb 7-1: Manufacturer: syz [ 439.973349][ T6753] usb 7-1: SerialNumber: syz [ 440.184679][ T6753] usb 7-1: USB disconnect, device number 70 [ 440.775851][T21732] fuse: Bad value for 'fd' [ 440.968181][ T6753] usb 7-1: new full-speed USB device number 71 using dummy_hcd [ 441.131819][ T6753] usb 7-1: unable to get BOS descriptor or descriptor too short [ 441.135425][ T6753] usb 7-1: not running at top speed; connect to a high speed hub [ 441.140157][ T6753] usb 7-1: config 53 has an invalid interface number: 154 but max is 0 [ 441.142902][ T6753] usb 7-1: config 53 has no interface number 0 [ 441.145028][ T6753] usb 7-1: config 53 interface 154 has no altsetting 0 [ 441.149634][ T6753] usb 7-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 441.152927][ T6753] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.155736][ T6753] usb 7-1: Product: syz [ 441.157174][ T6753] usb 7-1: Manufacturer: syz [ 441.158859][ T6753] usb 7-1: SerialNumber: syz [ 441.375345][ T6753] go7007 7-1:53.154: probe with driver go7007 failed with error -12 [ 441.380169][ T6753] usb 7-1: USB disconnect, device number 71 [ 441.834782][T21752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6529'. [ 441.979471][T21759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 441.981902][T21759] IPv6: NLM_F_CREATE should be set when creating new route [ 442.069148][T21763] fuse: Bad value for 'fd' [ 443.933425][T21803] __nla_validate_parse: 1 callbacks suppressed [ 443.933469][T21803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6550'. [ 444.917791][ T6753] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 445.080159][ T6753] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.084577][ T6753] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 445.089446][ T6753] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 445.093352][ T6753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.099511][ T6753] usb 5-1: config 0 descriptor?? [ 445.106308][ T6753] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 445.109406][ T6753] dvb-usb: bulk message failed: -22 (3/0) [ 445.113744][ T6753] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 445.118107][ T6753] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 445.120845][ T6753] usb 5-1: media controller created [ 445.127289][ T6753] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.133463][ T6753] dvb-usb: bulk message failed: -22 (6/0) [ 445.135410][ T6753] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 445.139630][ T6753] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input65 [ 445.144738][ T6753] dvb-usb: schedule remote query interval to 150 msecs. [ 445.147311][ T6753] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 445.297733][ T6753] dvb-usb: bulk message failed: -22 (1/0) [ 445.300162][ T6753] dvb-usb: error while querying for an remote control event. [ 445.308386][T11058] usb 5-1: USB disconnect, device number 78 [ 445.326869][T11058] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 446.875853][T21877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6582'. [ 446.892348][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 446.895586][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 446.927649][ T6753] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 447.092349][ T6753] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.096437][ T6753] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 447.100964][ T6753] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 447.104584][ T6753] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.108260][T21903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6593'. [ 447.110273][ T6753] usb 7-1: config 0 descriptor?? [ 447.121574][ T6753] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 447.124393][ T6753] dvb-usb: bulk message failed: -22 (3/0) [ 447.131134][ T6753] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 447.135214][ T6753] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 447.138207][ T6753] usb 7-1: media controller created [ 447.141681][ T6753] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 447.153458][ T6753] dvb-usb: bulk message failed: -22 (6/0) [ 447.156901][ T6753] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 447.163500][ T6753] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input66 [ 447.170256][ T6753] dvb-usb: schedule remote query interval to 150 msecs. [ 447.173128][ T6753] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 447.240014][T21911] loop9: detected capacity change from 0 to 7 [ 447.256956][T21911] Dev loop9: unable to read RDB block 7 [ 447.259150][T21911] loop9: unable to read partition table [ 447.261330][T21911] loop9: partition table beyond EOD, truncated [ 447.263544][T21911] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 447.327061][ T24] usb 7-1: USB disconnect, device number 72 [ 447.329542][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 447.348548][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 447.479126][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 447.481496][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 447.484723][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.488471][ T9] usb 5-1: config 0 descriptor?? [ 447.910755][ T9] hid_parser_main: 483 callbacks suppressed [ 447.910772][ T9] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 447.914797][ T9] sony 0003:054C:024B.000B: unknown main item tag 0x1 [ 447.916908][ T9] sony 0003:054C:024B.000B: ignoring exceeding usage max [ 447.928883][ T9] sony 0003:054C:024B.000B: hiddev0,hidraw1: USB HID v0.c1 Device [HID 054c:024b] on usb-dummy_hcd.0-1/input0 [ 447.937531][ T9] sony 0003:054C:024B.000B: failed to claim input [ 448.107918][T11058] usb 5-1: USB disconnect, device number 79 [ 448.268438][ T9] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 448.420252][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.423486][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 448.426334][ T9] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 448.429893][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.440800][ T9] usb 7-1: config 0 descriptor?? [ 448.445603][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 448.448083][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 448.457841][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 448.462182][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 448.467981][ T9] usb 7-1: media controller created [ 448.473456][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 448.484954][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 448.485874][T21999] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6627'. [ 448.486949][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 448.494862][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input67 [ 448.501519][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 448.503947][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 448.647330][ T1363] usb 7-1: USB disconnect, device number 73 [ 448.673757][ T1363] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 449.203113][T22033] fuse: Bad value for 'group_id' [ 449.204664][T22033] fuse: Bad value for 'group_id' [ 449.410246][T22048] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6648'. [ 449.886997][T22080] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6662'. [ 450.533285][T22109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6674'. [ 450.692607][T22111] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6675'. [ 450.784222][T22114] fuse: Bad value for 'group_id' [ 450.785854][T22114] fuse: Bad value for 'group_id' [ 451.156519][T22136] mmap: syz.1.6687 (22136) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 451.704612][T22163] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 451.720120][T22163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6699'. [ 452.536852][ T6753] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 452.697121][ T6753] usb 7-1: Using ep0 maxpacket: 32 [ 452.701402][ T6753] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 452.704095][ T6753] usb 7-1: config 0 has no interface number 0 [ 452.707914][ T6753] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 452.710817][ T6753] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.713532][ T6753] usb 7-1: Product: syz [ 452.715028][ T6753] usb 7-1: Manufacturer: syz [ 452.718131][ T6753] usb 7-1: SerialNumber: syz [ 452.721743][ T6753] usb 7-1: config 0 descriptor?? [ 452.725570][ T6753] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 452.728697][ T6753] usb 7-1: selecting invalid altsetting 1 [ 452.730918][ T6753] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 452.739211][ T6753] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 452.742731][ T6753] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 452.745360][ T6753] usb 7-1: media controller created [ 452.752364][ T6753] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 453.130213][ T6753] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 453.158281][ T6753] usb 7-1: USB disconnect, device number 74 [ 453.447283][ T1363] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 453.618611][ T1363] usb 6-1: unable to get BOS descriptor or descriptor too short [ 453.621750][ T1363] usb 6-1: not running at top speed; connect to a high speed hub [ 453.625506][ T1363] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 453.628976][ T1363] usb 6-1: config 0 has no interface number 0 [ 453.630952][ T1363] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 453.634736][ T1363] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 453.638424][ T1363] usb 6-1: config 0 interface 88 has no altsetting 0 [ 453.643312][ T1363] usb 6-1: language id specifier not provided by device, defaulting to English [ 453.651905][ T1363] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 453.655187][ T1363] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 453.658271][ T1363] usb 6-1: Product: syz [ 453.659834][ T1363] usb 6-1: SerialNumber: syz [ 453.663016][ T1363] usb 6-1: config 0 descriptor?? [ 453.827843][ T24] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 453.874453][ T1363] input: syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.88/input/input68 [ 453.882384][ T1363] usb 6-1: USB disconnect, device number 86 [ 453.979137][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 453.983649][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 453.990520][ T24] usb 5-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 453.994317][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.998325][ T24] usb 5-1: Product: syz [ 454.000194][ T24] usb 5-1: Manufacturer: syz [ 454.002145][ T24] usb 5-1: SerialNumber: syz [ 454.217090][ T24] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 454.376151][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 454.383229][ T24] usb 5-1: USB disconnect, device number 80 [ 454.438130][T20216] udevd[20216]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.151471][T22276] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 455.161224][ T477] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.163604][ T477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.171239][T22276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6748'. [ 455.197544][T11058] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 455.314060][T22280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6752'. [ 455.348492][T11058] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.354159][T11058] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 455.357494][T11058] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 455.360306][T11058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.366137][T11058] usb 5-1: config 0 descriptor?? [ 455.374283][T11058] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 455.379054][T11058] dvb-usb: bulk message failed: -22 (3/0) [ 455.385219][T11058] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 455.391553][T11058] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 455.393780][T11058] usb 5-1: media controller created [ 455.396836][T11058] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.409138][T11058] dvb-usb: bulk message failed: -22 (6/0) [ 455.417237][T11058] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 455.428654][T11058] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input69 [ 455.444164][T11058] dvb-usb: schedule remote query interval to 150 msecs. [ 455.453142][T11058] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 455.544505][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 455.552325][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 455.555530][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 455.559155][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 455.565432][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.582874][T11058] usb 5-1: USB disconnect, device number 81 [ 455.627267][T11058] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 455.915733][ T5828] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.024060][ T5828] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.085648][T22288] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.086007][T22310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6758'. [ 456.092724][T22288] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.095090][T22288] bridge_slave_0: entered allmulticast mode [ 456.097894][T22288] bridge_slave_0: entered promiscuous mode [ 456.102659][T22288] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.104935][T22288] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.107428][T22288] bridge_slave_1: entered allmulticast mode [ 456.110164][T22288] bridge_slave_1: entered promiscuous mode [ 456.141260][ T5828] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.156795][T22314] fuse: Unknown parameter 'grou00000000000000000000' [ 456.174282][T22288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.179859][T22288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.200367][T22288] team0: Port device team_slave_0 added [ 456.205367][T22288] team0: Port device team_slave_1 added [ 456.253363][ T5828] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.264123][T22288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.266267][T22288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.274493][T22288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.284433][T22288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.286795][T22288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.294443][T22288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.342086][T22288] hsr_slave_0: entered promiscuous mode [ 456.345187][T22288] hsr_slave_1: entered promiscuous mode [ 456.348304][T22288] debugfs: 'hsr0' already exists in 'hsr' [ 456.350472][T22288] Cannot create hsr debugfs directory [ 456.438061][T22329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6767'. [ 456.440888][T22329] netlink: 'syz.0.6767': attribute type 10 has an invalid length. [ 456.443324][T22329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6767'. [ 456.452138][ T5828] bridge_slave_1: left promiscuous mode [ 456.454449][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.460636][ T5828] bridge_slave_0: left allmulticast mode [ 456.462741][ T5828] bridge_slave_0: left promiscuous mode [ 456.464964][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.492977][T22330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6767'. [ 456.495827][T22330] netlink: 'syz.0.6767': attribute type 10 has an invalid length. [ 456.498254][T22330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6767'. [ 456.603601][ T5828] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 456.612170][ T5828] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 456.654023][ T5828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.660431][ T5828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.665033][ T5828] bond0 (unregistering): Released all slaves [ 456.680719][ T5828] bond1 (unregistering): Released all slaves [ 456.830182][ T5828] tipc: Left network mode [ 457.621542][ T5750] Bluetooth: hci0: command tx timeout [ 458.349706][ T5458] 8021q: adding VLAN 0 to HW filter on device eth2 [ 458.403357][T22350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6771'. [ 458.408018][T22350] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 458.410330][T22350] IPv6: NLM_F_CREATE should be set when creating new route [ 458.716814][T22288] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 458.727662][T22288] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 458.731174][T22288] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 458.737179][T22288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 458.740967][T22288] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 458.750734][T22288] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 458.752901][T22374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6777'. [ 458.753590][T22288] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 458.757807][T22374] netlink: 'syz.0.6777': attribute type 10 has an invalid length. [ 458.762101][T22374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6777'. [ 458.765076][T22288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 458.768436][T11058] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 458.783502][T22374] netlink: 'syz.0.6777': attribute type 10 has an invalid length. [ 458.871049][T22288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.930561][T11058] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 458.933529][T11058] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 458.937062][T11058] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 458.940069][T11058] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 458.943423][T11058] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 458.949090][T11058] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 458.951963][T11058] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 458.954441][T11058] usb 6-1: Product: syz [ 458.955975][T11058] usb 6-1: Manufacturer: syz [ 458.961880][T11058] cdc_wdm 6-1:1.0: skipping garbage [ 458.963755][T11058] cdc_wdm 6-1:1.0: skipping garbage [ 458.982311][T11058] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 458.985871][T11058] cdc_wdm 6-1:1.0: Unknown control protocol [ 459.686233][ T5750] Bluetooth: hci0: command tx timeout [ 460.382356][T22288] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.389524][ T5828] hsr_slave_0: left promiscuous mode [ 460.391973][ T5828] hsr_slave_1: left promiscuous mode [ 460.394224][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.396733][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.400592][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.402992][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.417660][ T5828] veth1_macvtap: left promiscuous mode [ 460.419671][ T5828] veth0_macvtap: left promiscuous mode [ 460.421532][ T5828] veth1_vlan: left promiscuous mode [ 460.423257][ T5828] veth0_vlan: left promiscuous mode [ 460.434812][T22391] __nla_validate_parse: 2 callbacks suppressed [ 460.434832][T22391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6780'. [ 460.441364][T22391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 460.620179][ T5828] team0 (unregistering): Port device team_slave_1 removed [ 460.629073][ T5828] team0 (unregistering): Port device team_slave_0 removed [ 460.745153][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.748226][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.765753][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.768095][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.024958][T22288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.059665][T22288] veth0_vlan: entered promiscuous mode [ 461.068990][T22288] veth1_vlan: entered promiscuous mode [ 461.088519][T22288] veth0_macvtap: entered promiscuous mode [ 461.093411][T22288] veth1_macvtap: entered promiscuous mode [ 461.104742][T22288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.112909][T22288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.123492][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.127498][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.130735][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.133438][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.135381][T22415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6785'. [ 461.143050][T22415] netlink: 'syz.0.6785': attribute type 10 has an invalid length. [ 461.145335][T22415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6785'. [ 461.153791][T22415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6785'. [ 461.162413][T22415] netlink: 'syz.0.6785': attribute type 10 has an invalid length. [ 461.163536][ T5828] IPVS: stop unused estimator thread 0... [ 461.169770][T22415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6785'. [ 461.235328][T22418] fuse: Unknown parameter 'grou00000000000000000000' [ 461.258120][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.263385][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.275622][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.278192][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.548228][T11058] usb 6-1: USB disconnect, device number 87 [ 461.566836][ T5855] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 461.716654][ T5855] usb 7-1: Using ep0 maxpacket: 32 [ 461.737049][ T5855] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 461.741810][ T5855] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 461.745430][ T5855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 461.750452][ T5855] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 461.753263][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.755821][ T5855] usb 7-1: Product: syz [ 461.757062][ T5855] usb 7-1: Manufacturer: syz [ 461.758534][ T5855] usb 7-1: SerialNumber: syz [ 461.761911][ T5855] usb 7-1: config 0 descriptor?? [ 461.765926][ T5750] Bluetooth: hci0: command tx timeout [ 462.171553][ T5855] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 462.484190][T22431] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6789'. [ 462.573524][ T5855] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 462.581612][ T5855] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 462.586940][ T5855] usb 7-1: USB disconnect, device number 75 [ 462.810549][T22433] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6790'. [ 462.813336][T22433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 462.919420][T22445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6793'. [ 462.922376][T22445] netlink: 'syz.1.6793': attribute type 10 has an invalid length. [ 462.925453][T22445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6793'. [ 462.929761][T22445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6793'. [ 462.933172][T22445] netlink: 'syz.1.6793': attribute type 10 has an invalid length. [ 462.978809][T22447] fuse: Unknown parameter 'grou00000000000000000000' [ 463.113832][T22459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 463.118059][T22459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 463.848869][ T5750] Bluetooth: hci0: command tx timeout [ 463.985270][T22475] netlink: 'syz.3.6804': attribute type 10 has an invalid length. [ 464.036956][T22476] netlink: 'syz.3.6804': attribute type 10 has an invalid length. [ 464.798824][T22486] fuse: Unknown parameter 'group_i00000000000000000000' [ 464.904796][T22499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 464.907173][T22499] IPv6: NLM_F_CREATE should be set when creating new route [ 464.912939][T22499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 464.918284][T22501] netlink: 'syz.2.6813': attribute type 10 has an invalid length. [ 464.926198][T22501] netlink: 'syz.2.6813': attribute type 10 has an invalid length. [ 465.966344][T22542] fuse: Unknown parameter 'group_i00000000000000000000' [ 466.093434][T22548] __nla_validate_parse: 15 callbacks suppressed [ 466.093451][T22548] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6823'. [ 466.099780][T22548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 466.146657][T22550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6824'. [ 466.149995][T22550] netlink: 'syz.1.6824': attribute type 10 has an invalid length. [ 466.152780][T22550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6824'. [ 466.195091][T22551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6824'. [ 466.197988][T22551] netlink: 'syz.1.6824': attribute type 10 has an invalid length. [ 466.201278][T22551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6824'. [ 466.653740][T22565] fuse: Unknown parameter 'group_i00000000000000000000' [ 466.727585][T22572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6832'. [ 466.730889][T22572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 466.733244][T22572] IPv6: NLM_F_CREATE should be set when creating new route [ 466.739526][T22574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6833'. [ 466.742312][T22574] netlink: 'syz.3.6833': attribute type 10 has an invalid length. [ 466.744715][T22574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6833'. [ 466.752871][T22574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6833'. [ 466.761460][T22574] netlink: 'syz.3.6833': attribute type 10 has an invalid length. [ 466.764321][T22574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6833'. [ 468.429783][T22607] INFO: trying to register non-static key. [ 468.432254][T22607] The code is fine but needs lockdep annotation, or maybe [ 468.436273][T22607] you didn't initialize this object before use? [ 468.439321][T22607] turning off the locking correctness validator. [ 468.441925][T22607] CPU: 3 UID: 0 PID: 22607 Comm: syz.0.6844 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.441958][T22607] Tainted: [L]=SOFTLOCKUP [ 468.441966][T22607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 468.441979][T22607] Call Trace: [ 468.441986][T22607] [ 468.441994][T22607] dump_stack_lvl+0x100/0x190 [ 468.442025][T22607] register_lock_class+0x549/0x560 [ 468.442054][T22607] ? nfsd_nl_unlock_filesystem_doit+0x167/0x3f0 [ 468.442086][T22607] ? genl_family_rcv_msg_doit+0x214/0x300 [ 468.442113][T22607] ? genl_rcv_msg+0x560/0x800 [ 468.442132][T22607] ? netlink_rcv_skb+0x159/0x420 [ 468.442158][T22607] ? genl_rcv+0x28/0x40 [ 468.442175][T22607] __lock_acquire+0x3d7/0x1a40 [ 468.442205][T22607] lock_acquire+0x1b9/0x370 [ 468.442230][T22607] ? nfsd4_cancel_copy_by_sb+0xdd/0x9e0 [ 468.442257][T22607] ? net_generic+0xea/0x2a0 [ 468.442276][T22607] _raw_spin_lock+0x2e/0x40 [ 468.442305][T22607] ? nfsd4_cancel_copy_by_sb+0xdd/0x9e0 [ 468.442329][T22607] nfsd4_cancel_copy_by_sb+0xdd/0x9e0 [ 468.442352][T22607] ? lockdep_hardirqs_on+0x78/0x100 [ 468.442382][T22607] ? putname+0xb1/0x110 [ 468.442401][T22607] ? kmem_cache_free+0x127/0x6b0 [ 468.442430][T22607] ? __pfx_nfsd4_cancel_copy_by_sb+0x10/0x10 [ 468.442459][T22607] nfsd_nl_unlock_filesystem_doit+0x1f1/0x3f0 [ 468.442485][T22607] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 468.442512][T22607] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 468.442533][T22607] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 468.442555][T22607] genl_family_rcv_msg_doit+0x214/0x300 [ 468.442572][T22607] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 468.442591][T22607] ? genl_get_cmd+0x3e7/0x760 [ 468.442621][T22607] ? bpf_lsm_capable+0x9/0x10 [ 468.442640][T22607] ? security_capable+0x80/0x260 [ 468.442670][T22607] genl_rcv_msg+0x560/0x800 [ 468.442688][T22607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.442706][T22607] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 468.442737][T22607] netlink_rcv_skb+0x159/0x420 [ 468.442764][T22607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.442782][T22607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.442815][T22607] ? netlink_deliver_tap+0x1ae/0xcc0 [ 468.442851][T22607] genl_rcv+0x28/0x40 [ 468.442869][T22607] netlink_unicast+0x585/0x850 [ 468.442899][T22607] ? __pfx_netlink_unicast+0x10/0x10 [ 468.442929][T22607] netlink_sendmsg+0x8b0/0xda0 [ 468.442958][T22607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.442987][T22607] ? apparmor_socket_sendmsg+0x15b/0x270 [ 468.443018][T22607] ____sys_sendmsg+0xa4d/0xbe0 [ 468.443044][T22607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.443072][T22607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.443102][T22607] ___sys_sendmsg+0x190/0x1e0 [ 468.443127][T22607] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.443154][T22607] ? futex_wait+0x11e/0x370 [ 468.443180][T22607] ? find_held_lock+0x2b/0x80 [ 468.443207][T22607] __sys_sendmsg+0x160/0x210 [ 468.443229][T22607] ? __pfx___sys_sendmsg+0x10/0x10 [ 468.443255][T22607] __do_fast_syscall_32+0xe7/0x970 [ 468.443276][T22607] do_fast_syscall_32+0x32/0x70 [ 468.443295][T22607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 468.443318][T22607] RIP: 0023:0xf7fd6fec [ 468.443340][T22607] Code: Unable to access opcode bytes at 0xf7fd6fc2. [ 468.443350][T22607] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 468.443372][T22607] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 468.443386][T22607] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.443399][T22607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 468.443411][T22607] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 468.443424][T22607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 468.443443][T22607] [ 468.589802][T22607] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 468.594589][T22607] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 468.597491][T22607] CPU: 3 UID: 0 PID: 22607 Comm: syz.0.6844 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.601510][T22607] Tainted: [L]=SOFTLOCKUP [ 468.603319][T22607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 468.607439][T22607] RIP: 0010:nfsd4_cancel_copy_by_sb+0x136/0x9e0 [ 468.610057][T22607] Code: e8 3f 42 d7 fe 48 8b 44 24 40 80 38 00 0f 85 28 08 00 00 48 8b 44 24 38 4c 89 f5 48 c1 e5 04 48 03 68 68 48 89 e8 48 c1 e8 03 <80> 3c 18 00 0f 85 16 08 00 00 4c 8b 65 00 4c 39 e5 0f 84 4e 04 00 [ 468.615006][ T5855] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 468.617439][T22607] RSP: 0018:ffffc900030e73f8 EFLAGS: 00010246 [ 468.617456][T22607] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc9000c531000 [ 468.617465][T22607] RDX: 0000000000080000 RSI: ffffffff8331e681 RDI: ffffc900030e7388 [ 468.617473][T22607] RBP: 0000000000000000 R08: 0000000000000001 R09: fffff5200061ce71 [ 468.617482][T22607] R10: 0000000000000003 R11: ffff88805ed301e0 R12: ffff88805ed301c8 [ 468.617492][T22607] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880608a8694 [ 468.617501][T22607] FS: 0000000000000000(0000) GS:ffff888096ef1000(0063) knlGS:00000000f5496b40 [ 468.617526][T22607] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 468.617536][T22607] CR2: 00000000f7fd7000 CR3: 000000006a886000 CR4: 0000000000352ef0 [ 468.617545][T22607] Call Trace: [ 468.617550][T22607] [ 468.617556][T22607] ? lockdep_hardirqs_on+0x78/0x100 [ 468.651182][T22607] ? __pfx_nfsd4_cancel_copy_by_sb+0x10/0x10 [ 468.653639][T22607] nfsd_nl_unlock_filesystem_doit+0x1f1/0x3f0 [ 468.656226][T22607] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 468.659011][T22607] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 468.661898][T22607] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 468.664722][T22607] genl_family_rcv_msg_doit+0x214/0x300 [ 468.667002][T22607] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 468.669505][T22607] ? genl_get_cmd+0x3e7/0x760 [ 468.671525][T22607] ? bpf_lsm_capable+0x9/0x10 [ 468.673484][T22607] ? security_capable+0x80/0x260 [ 468.675568][T22607] genl_rcv_msg+0x560/0x800 [ 468.677514][T22607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.679563][T22607] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 468.682277][T22607] netlink_rcv_skb+0x159/0x420 [ 468.684270][T22607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.686306][T22607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.688496][T22607] ? netlink_deliver_tap+0x1ae/0xcc0 [ 468.690717][T22607] genl_rcv+0x28/0x40 [ 468.692380][T22607] netlink_unicast+0x585/0x850 [ 468.694355][T22607] ? __pfx_netlink_unicast+0x10/0x10 [ 468.696556][T22607] netlink_sendmsg+0x8b0/0xda0 [ 468.698564][T22607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.700789][T22607] ? apparmor_socket_sendmsg+0x15b/0x270 [ 468.703129][T22607] ____sys_sendmsg+0xa4d/0xbe0 [ 468.705199][T22607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.707413][T22607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.709645][T22607] ___sys_sendmsg+0x190/0x1e0 [ 468.711644][T22607] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.713754][T22607] ? futex_wait+0x11e/0x370 [ 468.715634][T22607] ? find_held_lock+0x2b/0x80 [ 468.717602][T22607] __sys_sendmsg+0x160/0x210 [ 468.719540][T22607] ? __pfx___sys_sendmsg+0x10/0x10 [ 468.721739][T22607] __do_fast_syscall_32+0xe7/0x970 [ 468.723867][T22607] do_fast_syscall_32+0x32/0x70 [ 468.725881][T22607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 468.728435][T22607] RIP: 0023:0xf7fd6fec [ 468.730141][T22607] Code: Unable to access opcode bytes at 0xf7fd6fc2. [ 468.732890][T22607] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 468.736295][T22607] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 468.739539][T22607] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.742865][T22607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 468.746075][T22607] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 468.749356][T22607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 468.752679][T22607] [ 468.754010][T22607] Modules linked in: [ 468.756237][T22607] ---[ end trace 0000000000000000 ]--- [ 468.759007][T22607] RIP: 0010:nfsd4_cancel_copy_by_sb+0x136/0x9e0 [ 468.761792][T22607] Code: e8 3f 42 d7 fe 48 8b 44 24 40 80 38 00 0f 85 28 08 00 00 48 8b 44 24 38 4c 89 f5 48 c1 e5 04 48 03 68 68 48 89 e8 48 c1 e8 03 <80> 3c 18 00 0f 85 16 08 00 00 4c 8b 65 00 4c 39 e5 0f 84 4e 04 00 [ 468.769650][T22607] RSP: 0018:ffffc900030e73f8 EFLAGS: 00010246 [ 468.772195][T22607] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc9000c531000 [ 468.775163][ T5855] usb 6-1: Using ep0 maxpacket: 32 SYZFAIL: failed to recv rpc [ 468.775464][T22607] RDX: 0000000000080000 RSI: ffffffff8331e681 RDI: ffffc900030e7388 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 468.780330][T22607] RBP: 0000000000000000 R08: 0000000000000001 R09: fffff5200061ce71 [ 468.780347][ T5855] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 468.783569][T22607] R10: 0000000000000003 R11: ffff88805ed301e0 R12: ffff88805ed301c8 [ 468.783611][T22607] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880608a8694 [ 468.786472][ T5855] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 468.789502][T22607] FS: 0000000000000000(0000) GS:ffff888096ef1000(0063) knlGS:00000000f5496b40 [ 468.789542][T22607] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 468.789558][T22607] CR2: 00000000f7fd7000 CR3: 000000006a886000 CR4: 0000000000352ef0 [ 468.789575][T22607] Kernel panic - not syncing: Fatal exception [ 468.790269][T22607] Kernel Offset: disabled VM DIAGNOSIS: 13:07:51 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802a3b5b08 RCX=ffffffff81f44eb2 RDX=ffff8880299a0000 RSI=ffffffff81f44ec0 RDI=ffff8880299a0000 RBP=ffff88802b226280 RSP=ffffc90006a77a48 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000001 R11=ffffffff81d4e92c R12=000000010000412c R13=0000000000000000 R14=00000000ffffffff R15=ffff88802b2262c8 RIP=ffffffff81f48fa6 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bf1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f655b8 CR3=0000000052b8b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000015000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000a6f1b4 RBX=ffff88801c732540 RCX=ffffffff8bb6b2d5 RDX=0000000000000001 RSI=ffffffff8c400300 RDI=ffffffff81de1497 RBP=ffffed10038e64a8 RSP=ffffc9000046fe00 R8 =0000000000000000 R9 =ffffed100566678d R10=ffff88802b333c6b R11=ffffffff81d4e92c R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb6989f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080033000 CR3=000000006169a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000046dbcc RBX=ffff88801c7e4a80 RCX=ffffffff8bb6b2d5 RDX=0000000000000001 RSI=ffffffff8c400300 RDI=ffffffff81de1497 RBP=ffffed10038fc950 RSP=ffffc9000047fe00 R8 =0000000000000000 R9 =ffffed100568678d R10=ffff88802b433c6b R11=ffffffff81d4e92c R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8bb6989f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096df1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005637144b0f40 CR3=000000004be0a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=6951a332f6de26ee 9897ce12829a3a08 6951a332f6de26ee 9897ce12829a3a08 6951a332f6de26ee 9897ce12829a3a08 6951a332f6de26ee 9897ce12829a3a08 ZMM18=d0f59b320f0f8381 76f08137913cf965 d0f59b320f0f8381 76f08137913cf965 d0f59b320f0f8381 76f08137913cf965 d0f59b320f0f8381 76f08137913cf965 ZMM19=e920000000000000 0000000000000004 e920000000000000 0000000000000003 e920000000000000 0000000000000002 e920000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7670692f74656e2f 7379732f636f7270 2f01ffffffffffff ffffc70800030008 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004080020080006 0174b60008000608 00200800060174be 0108000c80020402 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 76fc006b6e696c76 656401ffffffffff ffffffef080c8003 2008000608002008 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffed080d d0030404000dcc03 1e04000dc803006d 697376656474656e ZMM25=76f0813776f08137 76f0813776f08137 76f0813776f08137 76f0813776f08137 76f0813776f08137 76f0813776f08137 76f0813776f08137 76f0813776f08137 ZMM26=0f0f83810f0f8381 0f0f83810f0f8381 0f0f83810f0f8381 0f0f83810f0f8381 0f0f83810f0f8381 0f0f83810f0f8381 0f0f83810f0f8381 0f0f83810f0f8381 ZMM27=d0f59b32d0f59b32 d0f59b32d0f59b32 d0f59b32d0f59b32 d0f59b32d0f59b32 d0f59b32d0f59b32 d0f59b32d0f59b32 d0f59b32d0f59b32 d0f59b32d0f59b32 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e8200000e8200000 e8200000e8200000 e8200000e8200000 e8200000e8200000 e8200000e8200000 e8200000e8200000 e8200000e8200000 e8200000e8200000 info registers vcpu 3 CPU#3 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a03625 RDI=ffffffff9b9e51a0 RBP=ffffffff9b9e5160 RSP=ffffc900030e6d70 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e64696420756f79 R12=0000000000000000 R13=000000000000006f R14=ffffffff9b6e51f8 R15=ffffffff85a035c0 RIP=ffffffff85a0364f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ef1000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f72be817 CR3=000000006a886000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000