last executing test programs: 23m19.028310608s ago: executing program 3 (id=4): r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@loopback, @in=@rand_addr=0x64010101, 0x4e28, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x8, 0x0, 0x0, 0xf94, 0x0, 0xa417}, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x4002, 0x32}, 0xa, @in=@multicast2, 0xffffffff, 0x2, 0x0, 0xfb, 0x0, 0x0, 0x800}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0xfffd, 0x4e21, 0xc0, 0x2, 0x0, 0x10}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x8000000000000000, 0xb, 0x0, 0x3}, 0x4}, {{@in6=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0x53, 0x40000}}, 0xe4) futex(0x0, 0xd, 0xfffffffe, 0x0, 0x0, 0x6fd) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x3000000) close(r0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r1, 0x0, 0x3b) landlock_restrict_self(0xffffffffffffffff, 0xc) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0xfffffffffffffd1a, 0x0, 0xffffffffffffffff, 0xfffffffffffffcc9}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002840)={r3, 0xffffffffffffffff, 0x1e, 0x0, @void}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff8100", 0x18}], 0x1) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x0, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="68010000", @ANYRES16, @ANYBLOB="020027bd7000fddbdf2508000000840002804c000380080001000000000008000100c0d20a0008000100070000000800010000000000080001000600000008000200ff0000000800010039093940080001000300000008000200a474000008000200e70d00001400038008000200050000000800010001000000080001000100000008000100b66f0000080002000900000058000580540002800800030000fcffff08000300ff170000080002000000000008000100180000000800040002000000000003000500000008000200010000000800010004000000080001004900000008000708935ffe00000048000580080001006574680007000100696200002c000280080001000600000008000200070000000800020009000000080003001200000008000400050000000800010065746800300002800400040008000100030001000200000008000200ff0000000800020001040000b547ec08000200ffffff7f00"], 0x168}, 0x1, 0x0, 0x0, 0x854}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x41020, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r4}, 0x8) 23m16.469585612s ago: executing program 3 (id=13): socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000004c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000194c0)=0x80000000000003) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000019500)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019540)='./tracing\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000019640)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000019680)={0xa, 0x2010, 0x6, @empty, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000196c0), 0x3) 23m15.054345392s ago: executing program 3 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) fsmount(r3, 0x1, 0x0) poll(0x0, 0x0, 0x9) 22m59.344734699s ago: executing program 32 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) fsmount(r3, 0x1, 0x0) poll(0x0, 0x0, 0x9) 20m51.421776706s ago: executing program 4 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00') preadv(r3, &(0x7f0000003440)=[{&(0x7f0000000280)=""/185, 0xb9}, {0x0}], 0x2, 0x162, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002", @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240), 0x0, &(0x7f0000000040)}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x9e) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='00:03', 0x5) 20m48.982497804s ago: executing program 4 (id=204): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x2710}, 0x0, 0x2002}], 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) write(r3, &(0x7f0000001640)="8b", 0xffe4) syz_open_dev$vim2m(&(0x7f0000000080), 0x100000001, 0x2) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000440)=ANY=[], 0x0) 20m45.586732826s ago: executing program 4 (id=207): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r2, 0xee01, r3) keyctl$KEYCTL_MOVE(0x1e, r2, 0x0, 0x0, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3c}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf9", 0x20, 0x0, 0x0, 0x0) 20m42.785750604s ago: executing program 4 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00') preadv(r3, &(0x7f0000003440)=[{&(0x7f0000000280)=""/185, 0xb9}, {0x0}], 0x2, 0x162, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002", @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240), 0x0, &(0x7f0000000040)}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x9e) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='00:03', 0x5) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pnp/devices/00:03/resources\x00', 0x2, 0x0) 20m40.71374017s ago: executing program 4 (id=211): socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000004c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000194c0)=0x80000000000003) openat(0xffffffffffffff9c, &(0x7f0000019500)='./file0\x00', 0x42, 0x1ff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000019680)={0xa, 0x2010, 0x6, @empty, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000196c0), 0x3) 20m38.448723602s ago: executing program 4 (id=214): r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@loopback, @in=@rand_addr=0x64010101, 0x4e28, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x8, 0x0, 0x0, 0xf94, 0x0, 0xa417}, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x4002, 0x32}, 0xa, @in=@multicast2, 0xffffffff, 0x2, 0x0, 0xfb, 0x0, 0x0, 0x800}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0xfffd, 0x4e21, 0xc0, 0x2, 0x0, 0x10}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x8000000000000000, 0xb, 0x0, 0x3}, 0x4}, {{@in6=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0x53, 0x40000}}, 0xe4) futex(0x0, 0xd, 0xfffffffe, 0x0, 0x0, 0x6fd) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x3000000) close(r0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r1, 0x0, 0x3b) landlock_restrict_self(0xffffffffffffffff, 0xc) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0xfffffffffffffd1a, 0x0, 0xffffffffffffffff, 0xfffffffffffffcc9}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002840)={r3, 0xffffffffffffffff, 0x1e, 0x0, @void}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff8100", 0x18}], 0x1) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="68010000", @ANYRES16, @ANYBLOB="020027bd7000fddbdf2508000000840002804c000380080001000000000008000100c0d20a0008000100070000000800010000000000080001000600000008000200ff0000000800010039093940080001000300000008000200a474000008000200e70d00001400038008000200050000000800010001000000080001000100000008000100b66f0000080002000900000058000580540002800800030000fcffff08000300ff170000080002000000000008000100180000000800040002000000000003000500000008000200010000000800010004000000080001004900000008000708935ffe00000048000580080001006574680007000100696200002c000280080001000600000008000200070000000800020009000000080003001200000008000400050000000800010065746800300002800400040008000100030001000200000008000200ff0000000800020001040000b547ec08000200ffffff7f00"], 0x168}, 0x1, 0x0, 0x0, 0x854}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x41020, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) 20m23.203331451s ago: executing program 33 (id=214): r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@loopback, @in=@rand_addr=0x64010101, 0x4e28, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x8, 0x0, 0x0, 0xf94, 0x0, 0xa417}, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x4002, 0x32}, 0xa, @in=@multicast2, 0xffffffff, 0x2, 0x0, 0xfb, 0x0, 0x0, 0x800}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0xfffd, 0x4e21, 0xc0, 0x2, 0x0, 0x10}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x8000000000000000, 0xb, 0x0, 0x3}, 0x4}, {{@in6=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0x53, 0x40000}}, 0xe4) futex(0x0, 0xd, 0xfffffffe, 0x0, 0x0, 0x6fd) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x3000000) close(r0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r1, 0x0, 0x3b) landlock_restrict_self(0xffffffffffffffff, 0xc) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0xfffffffffffffd1a, 0x0, 0xffffffffffffffff, 0xfffffffffffffcc9}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002840)={r3, 0xffffffffffffffff, 0x1e, 0x0, @void}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff8100", 0x18}], 0x1) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="68010000", @ANYRES16, @ANYBLOB="020027bd7000fddbdf2508000000840002804c000380080001000000000008000100c0d20a0008000100070000000800010000000000080001000600000008000200ff0000000800010039093940080001000300000008000200a474000008000200e70d00001400038008000200050000000800010001000000080001000100000008000100b66f0000080002000900000058000580540002800800030000fcffff08000300ff170000080002000000000008000100180000000800040002000000000003000500000008000200010000000800010004000000080001004900000008000708935ffe00000048000580080001006574680007000100696200002c000280080001000600000008000200070000000800020009000000080003001200000008000400050000000800010065746800300002800400040008000100030001000200000008000200ff0000000800020001040000b547ec08000200ffffff7f00"], 0x168}, 0x1, 0x0, 0x0, 0x854}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x41020, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) 2m15.296735097s ago: executing program 5 (id=2153): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001980)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000040)={0xc, 0x0, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pread64(r1, 0x0, 0x0, 0xa8cf) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newsa={0x158, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x7}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x50bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xfffffffffffff800, 0x81, 0x9, 0x100}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2, {0x7, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0x5}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x20, 0x80, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xdd, 0x6, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0xe, 0x79}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x0, 0xe, 0xc, 0x10, 0x7}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x0, 0x0}]}) 2m13.201309865s ago: executing program 5 (id=2155): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2m3.137798473s ago: executing program 5 (id=2171): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44810}, 0x2000c814) 2m2.834709287s ago: executing program 5 (id=2173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000300)={0x200000, 0x200000, 0x7}) shmctl$SHM_LOCK(r1, 0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0xd, &(0x7f0000000380)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000400), 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000440)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000640)=0x0) r7 = dup(r2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000680)={0x0, 0xfb87, 0x800, 0x0, 0x32c}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40, 0x6, 0x15e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa348, 0x4, 0x10000000, 0x32b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xba}}], 0x1, &(0x7f0000000980)={0x2e, 0x75, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xffe9, 0x1, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000a00)={0x2b, {0x2000, 0x1ff, 0x15, 0x9, 0x8}}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000a40)={'wlan0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fcdbdf2530000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) sendmsg$ETHTOOL_MSG_WOL_SET(r9, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20060000) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x803) r11 = syz_open_dev$sndpcmc(&(0x7f0000000d80), 0x5, 0xddf9d664c49dd02e) write$snddsp(r11, &(0x7f0000000dc0)="3660cb50a50b8408e2f4e6e4da297c86c226d7cf9e2dcba81dc0f85f996f8926c8dec65b7661fba41d9081d07658377e2da364c41b0d280ab1c30a457125d0cdd8fce396cd518e266e70551af888575e3c4d131fcd245496467520d5885345585668a30a5c5b20a0e67070f3bbc0e474a69a3032", 0x74) shmctl$SHM_UNLOCK(r1, 0xc) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r12 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r12, 0xc0844123, &(0x7f0000000180)=0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000fff626bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="715a0300231a05002c00128009000100626f6e64000000001c000280050001000500000005001b00000000000800030000000080"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 2m0.767495311s ago: executing program 5 (id=2176): r0 = syz_ublk_setup_io_uring(0x64d, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x2, 0x14d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x40, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 2m0.338810246s ago: executing program 5 (id=2179): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000480)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0xf, 0x101301) unshare(0x40000000) unshare(0x40000000) nanosleep(0x0, 0x0) 1m45.12573165s ago: executing program 34 (id=2179): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000480)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0xf, 0x101301) unshare(0x40000000) unshare(0x40000000) nanosleep(0x0, 0x0) 21.515594355s ago: executing program 1 (id=2437): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000700000005000c000700000005000700a100000005000a00ffa1000005000800ffa10000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 21.451523306s ago: executing program 1 (id=2439): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000240)=0x0) syz_emit_ethernet(0x36, &(0x7f0000000940)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x80000) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000007c0), 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000800), 0x8000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, &(0x7f0000000840)={{0x1, 0x0, 0x0, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer0\x00'}) r9 = dup(r7) syz_ublk_setup_queues(r9, r6, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000300)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000580)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000190000)={0x0, 0x0, &(0x7f0000190040)={0x0, 0xe30}}, 0x0) 20.316466919s ago: executing program 1 (id=2444): mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x10b) chdir(&(0x7f0000000400)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x28) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) 19.397462763s ago: executing program 1 (id=2450): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000540)=0x1) 18.821171869s ago: executing program 1 (id=2453): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000240)=0x0) syz_emit_ethernet(0x36, &(0x7f0000000940)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x80000) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000007c0), 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000800), 0x8000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, &(0x7f0000000840)={{0x1, 0x0, 0x0, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer0\x00'}) r9 = dup(r7) syz_ublk_setup_queues(r9, r6, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000300)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000580)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000190000)={0x0, 0x0, &(0x7f0000190040)={0x0, 0xe30}}, 0x0) 17.617400802s ago: executing program 1 (id=2461): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x1000, {0x7, 0x29, 0x7, 0x324d04a4, 0x8, 0xc, 0x1, 0x56, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x78, 0x0, 0x8, {0x101, 0xb, 0x0, {0x4, 0x2ee, 0x100000000bdd6, 0x400, 0x10000, 0x5, 0x9d1f, 0x40000004, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 5.350149204s ago: executing program 7 (id=2522): r0 = userfaultfd(0x80001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x3a9}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000005c0)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c832, 0xffffffffffffffff, 0x2000) close(r0) 4.919342665s ago: executing program 7 (id=2524): syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f0000000180)=[{0x96, 0x6a10, 0x1a, &(0x7f00000001c0)="21365217006a70cba8176eb127992f56f31114ffad30296a1891"}], 0x1}) 4.419533645s ago: executing program 2 (id=2527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x5) r6 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000300)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000340)={0xa, 0xe64, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x800201}, 0x1c) r7 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0xe64, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000}, 0x1c) connect$inet6(r7, &(0x7f0000000400)={0xa, 0x4e22, 0x7ff, @empty, 0x4cae}, 0x1c) listen(r4, 0x1780) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20040820}, 0x800) 4.284731796s ago: executing program 0 (id=2528): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000180), 0x318, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000c00)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000c40), 0x0, 0x10, &(0x7f0000000c80), 0xfffffffffffffd00}, 0x48) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000d00)={0xa, 0x0, 0x1, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000d80)="b8", 0x1}], 0x1}}, {{&(0x7f0000000dc0)={0xa, 0x4e24, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xffff}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000e40)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000e80)={0x0, 0x3}, 0x8) close(r2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000f00)) r5 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r5, &(0x7f0000000fc0)={0x38, 0x6, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000001040), 0x1, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) write$binfmt_script(r7, 0x0, 0x0) write$binfmt_script(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f00000011c0)=ANY=[], 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000001200)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001280)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f667"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 4.180773703s ago: executing program 2 (id=2529): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000440)=0x2) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) bind(r1, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2}, 0x4, 0x2, 0x4, 0x4}}, 0x80) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x5, 0x5, 0xe, 0x5, 0xff, 0x1, 0xea, 0xfa, 0x2, 0x4, 0x5, 0xa, 0x6, 0x1b}, 0xe) sendto$inet6(r4, &(0x7f0000000080)="1a", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) close(r4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000006c0)={0x2, 0x0, @pic={0xa, 0x3, 0x6, 0x22, 0x7, 0xb, 0x81, 0x7, 0x7, 0x10, 0x6, 0x4, 0x4, 0x0, 0x4, 0x7}}) r5 = eventfd(0x200) write$eventfd(r5, 0xfffffffffffffffe, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 3.373687161s ago: executing program 7 (id=2532): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff61", 0x12) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) 3.114289932s ago: executing program 2 (id=2533): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0xc0405626, &(0x7f0000000340)={0x0, "e3e76507e5aed5b2d55aefa986e8658df020bfaa686f54b3d4bb151b9f8a435f", 0x1, 0x40, 0x100, 0xb6de, 0x4, 0x3, 0x4, 0x6}) 2.9707317s ago: executing program 7 (id=2534): mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x10b) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100030000000000040001000000010020000600000000002000020000000000"], 0x1c, 0x2) chdir(&(0x7f0000000400)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x28) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="159804000300000008000d000100000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r4 = syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newqdisc={0x12c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfc, 0x2, {{0x8002, 0x5a, 0x0, 0x0, 0x5, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x94, 0x70d}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffe01, 0x2}}, @TCA_NETEM_LOSS={0x84, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x6, 0x9, 0x4}}, @NETEM_LOSS_GE={0x36, 0x2, {0x9c000000, 0x0, 0x8000, 0xfffffffc}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x4, 0x3, 0x7, 0x80000000}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x5, 0x10, 0x60a8}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x5, 0x2cdd, 0x3, 0xb0}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x4, 0x3, 0x8}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xf}, @TCA_NETEM_DELAY_DIST={0x37, 0x2, "3885fb25dd1a30a8708a94158e92613c0c51182307a36316db0d84a8d2504c82458629f7d9c4ca60ead53f5ce7470548a1f704"}]}}}]}, 0x12c}}, 0x0) renameat2(r4, &(0x7f0000000180)='./bus\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000000c0)=0x6a, 0x4) 2.833377316s ago: executing program 2 (id=2535): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) poll(&(0x7f00000000c0)=[{r0, 0x1100}], 0x1, 0x20002081) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x439, 0x0, 0x5fffd, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x30}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044080}, 0x8000000) 2.487554556s ago: executing program 6 (id=2536): mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0xc, 0x6, 0x2) r0 = syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@use_registered_buffer={0x16, 0xa, 0x4004, @fd_index=0xb, 0x8, 0x0, 0x0, 0x0, 0x1, {0x1, 0x0, 0xa0, '\x00', 0x0, 0x1}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000004c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4b", 0xbd) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r5, &(0x7f0000000600), 0x4000095, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000640)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 2.189091956s ago: executing program 0 (id=2537): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122"], 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0x40, 0xa6443) 1.988206722s ago: executing program 6 (id=2538): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000440)={0xffffffff, "abacd20ee04200", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000480)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000004c0)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56"}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x9}, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x3, 0x0, 0x0, 'queue1\x00'}) socket$igmp6(0xa, 0x3, 0x2) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0xe0c81) r9 = fsopen(&(0x7f0000000540)='ramfs\x00', 0x0) r10 = fsmount(r9, 0x0, 0x4) shmget$private(0x0, 0x13000, 0x78000b10, &(0x7f0000feb000/0x13000)=nil) fsconfig$FSCONFIG_CMD_RECONFIGURE(r10, 0x7, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r10, 0x3b65, 0xa) syz_emit_ethernet(0x32, &(0x7f0000000380)={@random="93fc85ff30d2", @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}, "f439992d"}}}}}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x402c5342, &(0x7f00000002c0)={0x0, 0x7a120, 0x7ff, {0xfffffff8, 0xffffffff}}) r11 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000340)={0x27800000000, 0x0, 0x1, r11}) close_range(r0, 0xffffffffffffffff, 0x0) 1.825366652s ago: executing program 2 (id=2539): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000000c0)}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f0000000800), 0xffffffffffffffff) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x212880, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010300ff000040720501cb6526010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24000045, &(0x7f0000000940)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000980)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) syz_usb_control_io$uac3(r3, &(0x7f00000004c0)={0xc, &(0x7f0000000380)={0x40, 0x30, 0xb1, {0xb1, 0xb, "8710feff31537c1d95117eede39a457b82c5aa10160c92a2bc738c6a64f96a6578662e342b733fc976ff446e735bbeba96c1df8255a0425162f2685b6de6df9bd5dd271909c1e5e28a4f01eb1156f00255de23b2dbf58effc7fef10274d35a8422e1a3e32d1ef7603a69617649101d8d1320ad377f2a0fb8cc652a934e8cdac766825b0e785da9474d07d5abea9dcdf0ba5220f347b39a5c930e26235e5c1369bedc12276c49be1ec5c3c8e93fc125"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}}, &(0x7f0000000780)={0x24, &(0x7f0000000500)={0x0, 0xd, 0x24, "d626b5247d37924beddf8b14bfe26d07c3d0796c7c37f6c56f97a368fadfb2a49e1bcdf3"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x80}, 0x0, &(0x7f0000000640)={0x20, 0x81, 0x1, 'U'}, &(0x7f0000000680)={0x20, 0x82, 0x1, 'm'}, &(0x7f00000006c0)=ANY=[@ANYBLOB="208373054945daf4"], &(0x7f0000000700)={0x20, 0x84, 0x1, 'n'}, &(0x7f0000000740)={0x20, 0x85, 0x3, "794ec0"}}) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.55633264s ago: executing program 6 (id=2540): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f00000007c0), 0x18) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000880)={0x1d, r2, 0x2, {0x0, 0x1, 0x4}, 0x2}, 0x18) 1.502600659s ago: executing program 7 (id=2541): syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f0000000180)=[{0x96, 0x6a10, 0x1a, &(0x7f00000001c0)="21365217006a70cba8176eb127992f56f31114ffad30296a1891"}], 0x1}) 1.42602647s ago: executing program 6 (id=2542): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000440)=0x2) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) bind(r1, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2}, 0x4, 0x2, 0x4, 0x4}}, 0x80) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x5, 0x5, 0xe, 0x5, 0xff, 0x1, 0xea, 0xfa, 0x2, 0x4, 0x5, 0xa, 0x6, 0x1b}, 0xe) sendto$inet6(r4, &(0x7f0000000080)="1a", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) close(r4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000006c0)={0x2, 0x0, @pic={0xa, 0x3, 0x6, 0x22, 0x7, 0xb, 0x81, 0x7, 0x7, 0x10, 0x6, 0x4, 0x4, 0x0, 0x4, 0x7}}) r5 = eventfd(0x200) write$eventfd(r5, 0xfffffffffffffffe, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 833.148334ms ago: executing program 0 (id=2543): recvmmsg(0xffffffffffffffff, &(0x7f0000000580), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 485.357657ms ago: executing program 0 (id=2544): ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0xc0405626, &(0x7f0000000340)={0x0, "e3e76507e5aed5b2d55aefa986e8658df020bfaa686f54b3d4bb151b9f8a435f", 0x1, 0x40, 0x100, 0xb6de, 0x4, 0x3, 0x4, 0x6}) 385.030047ms ago: executing program 0 (id=2545): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0x806000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20044810) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000580)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000002800018014000400234e0000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 271.387677ms ago: executing program 0 (id=2546): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000180), 0x318, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000c00)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000c40), 0x0, 0x10, &(0x7f0000000c80), 0xfffffffffffffd00}, 0x48) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000d00)={0xa, 0x0, 0x1, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000d80)="b8", 0x1}], 0x1}}, {{&(0x7f0000000dc0)={0xa, 0x4e24, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xffff}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000e40)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000e80)={0x0, 0x3}, 0x8) close(r2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000f00)) r5 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r5, &(0x7f0000000fc0)={0x38, 0x6, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000001040), 0x1, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) write$binfmt_script(r7, 0x0, 0x0) write$binfmt_script(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f00000011c0)=ANY=[], 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000001200)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001280)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f667"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 208.69293ms ago: executing program 6 (id=2547): mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0xc, 0x6, 0x2) r0 = syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@use_registered_buffer={0x16, 0xa, 0x4004, @fd_index=0xb, 0x8, 0x0, 0x0, 0x0, 0x1, {0x1, 0x0, 0xa0, '\x00', 0x0, 0x1}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000004c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4b", 0xbd) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r5, &(0x7f0000000600), 0x4000095, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000640)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 116.845697ms ago: executing program 6 (id=2548): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba09fe0f160af3653c001ac004000202080002000300010006000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20008810) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r3}, 0x64) r4 = io_uring_setup(0x1b7b, &(0x7f0000000600)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bind$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0xa, 0x4e21, 0x5, @remote, 0x6e}, 0x1c) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000000700)={&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000780)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 83.277335ms ago: executing program 7 (id=2549): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x1, 0x802) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="e4f1d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x7, 0xc, 0x0, 0x401}]}) close_range(r2, 0xffffffffffffffff, 0x2000000000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r3], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x103a42, 0x32) sigaltstack(0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r6, r6, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000400)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000440)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg(r7, &(0x7f0000000480), 0x800001d, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x2200, 0x0) ftruncate(r5, 0x6000000) inotify_init1(0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 0s ago: executing program 2 (id=2550): mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x10b) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100030000000000040001000000010020000600000000002000020000000000"], 0x1c, 0x2) chdir(&(0x7f0000000400)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x28) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="159804000300000008000d000100000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r4 = syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newqdisc={0x12c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfc, 0x2, {{0x8002, 0x5a, 0x0, 0x0, 0x5, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x94, 0x70d}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffe01, 0x2}}, @TCA_NETEM_LOSS={0x84, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x6, 0x9, 0x4}}, @NETEM_LOSS_GE={0x36, 0x2, {0x9c000000, 0x0, 0x8000, 0xfffffffc}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x4, 0x3, 0x7, 0x80000000}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x5, 0x10, 0x60a8}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x5, 0x2cdd, 0x3, 0xb0}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x4, 0x3, 0x8}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xf}, @TCA_NETEM_DELAY_DIST={0x37, 0x2, "3885fb25dd1a30a8708a94158e92613c0c51182307a36316db0d84a8d2504c82458629f7d9c4ca60ead53f5ce7470548a1f704"}]}}}]}, 0x12c}}, 0x0) renameat2(r4, &(0x7f0000000180)='./bus\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000000c0)=0x6a, 0x4) kernel console output (not intermixed with test programs): he config [ 1330.432177][ T5793] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1330.477434][ T5793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.477463][ T5793] usb 3-1: Product: syz [ 1330.477477][ T5793] usb 3-1: Manufacturer: syz [ 1330.477492][ T5793] usb 3-1: SerialNumber: syz [ 1330.878379][T12869] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1331.030722][T12869] usb 6-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1331.037357][T12869] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1331.037394][T12869] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1331.037434][T12869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.122114][T15557] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1331.142225][T12869] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1331.156607][ T5793] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input14 [ 1331.241455][ T4990] bcm5974 3-1:1.0: could not read from device [ 1331.328783][ T5793] usb 3-1: USB disconnect, device number 20 [ 1331.335943][ T4990] bcm5974 3-1:1.0: could not read from device [ 1331.581242][T15583] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1976'. [ 1331.993481][T12869] usb 6-1: USB disconnect, device number 21 [ 1332.188748][T10219] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1332.338318][T10219] usb 3-1: Using ep0 maxpacket: 32 [ 1332.339138][T10219] usb 3-1: New USB device found: idVendor=05ac, idProduct=020f, bcdDevice=0.22 [ 1332.342665][T10219] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1332.342695][T10219] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1332.342718][T10219] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1332.348734][T10219] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1332.348763][T10219] usb 3-1: Product: syz [ 1332.348777][T10219] usb 3-1: Manufacturer: syz [ 1332.348791][T10219] usb 3-1: SerialNumber: syz [ 1332.387994][T10219] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input15 [ 1332.548346][ T5793] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1332.714775][ T5793] usb 1-1: Using ep0 maxpacket: 16 [ 1332.720512][ T5793] usb 1-1: New USB device found: idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1332.735078][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1332.735107][ T5793] usb 1-1: Product: syz [ 1332.735122][ T5793] usb 1-1: Manufacturer: syz [ 1332.735136][ T5793] usb 1-1: SerialNumber: syz [ 1332.769409][T13506] usb 3-1: USB disconnect, device number 21 [ 1332.831671][ T5793] usb 1-1: config 0 descriptor?? [ 1333.251202][T13506] appletouch 3-1:1.0: input: appletouch disconnected [ 1333.548473][T12869] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1333.710436][T12869] usb 6-1: Using ep0 maxpacket: 8 [ 1333.713362][T12869] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1333.713421][T12869] usb 6-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1333.726446][T12869] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1333.739812][T12869] usb 6-1: string descriptor 0 read error: -22 [ 1333.739907][T12869] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1333.806959][T12869] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1333.862026][T12869] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1333.876671][T12869] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1333.876727][T12869] usb 6-1: media controller created [ 1333.898413][T13506] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1333.906367][T15619] mmap: syz.1.1987 (15619): VmData 37593088 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 1333.938111][T12869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1334.053304][T12869] zl10353_read_register: readreg error (reg=127, ret==0) [ 1334.053797][T13506] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1334.053851][T13506] usb 7-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1334.056100][T13506] usb 7-1: config 189 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.056125][T13506] usb 7-1: config 189 has 0 interfaces, different from the descriptor's value: 1 [ 1334.058975][T13506] usb 7-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 1334.059000][T13506] usb 7-1: Product: syz [ 1334.059015][T13506] usb 7-1: Manufacturer: syz [ 1334.059030][T13506] usb 7-1: SerialNumber: syz [ 1334.349961][T12869] usb 6-1: USB disconnect, device number 22 [ 1334.388433][T10219] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1334.464556][ T30] usb 7-1: USB disconnect, device number 12 [ 1334.539146][T10219] usb 3-1: Using ep0 maxpacket: 8 [ 1334.547490][T10219] usb 3-1: New USB device found: idVendor=05ac, idProduct=0230, bcdDevice=0.40 [ 1334.571311][T10219] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.571345][T10219] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1334.575364][T10219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.575392][T10219] usb 3-1: Product: syz [ 1334.575407][T10219] usb 3-1: Manufacturer: syz [ 1334.575421][T10219] usb 3-1: SerialNumber: syz [ 1335.242152][T10219] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input16 [ 1335.262717][ T4990] bcm5974 3-1:1.0: could not read from device [ 1335.343020][T10219] usb 3-1: USB disconnect, device number 22 [ 1335.402390][T13506] usb 1-1: USB disconnect, device number 39 [ 1335.520323][ T5793] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1335.668319][ T5793] usb 2-1: Using ep0 maxpacket: 16 [ 1335.669241][ T5793] usb 2-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 1335.670892][ T5793] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.670922][ T5793] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1335.670946][ T5793] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1335.670987][ T5793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.744132][ T5793] usb 2-1: config 0 descriptor?? [ 1336.203911][ T5793] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 1336.203954][ T5793] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 1336.203979][ T5793] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 1336.204002][ T5793] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 1336.204027][ T5793] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 1336.253365][ T5793] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1336.556725][T10219] usb 2-1: USB disconnect, device number 30 [ 1337.128556][T15681] batman_adv: batadv0: Adding interface: dummy0 [ 1337.128684][T15681] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.128870][T15681] batman_adv: batadv0: Interface activated: dummy0 [ 1337.205517][T15704] kAFS: unable to lookup cell '(,c' [ 1337.756651][T15708] vlan2: entered promiscuous mode [ 1337.756667][T15708] bridge0: entered promiscuous mode [ 1338.037296][T15701] batadv0: mtu less than device minimum [ 1338.146723][T15701] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1338.172676][T15701] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1338.204803][T15701] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1338.230466][T15701] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1338.243523][T15701] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1338.283380][T15701] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1338.299065][T10219] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1338.303569][T15701] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1338.338712][T15701] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1338.380795][T15701] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1338.449126][T10219] usb 1-1: New USB device found: idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1338.453310][T10219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.453327][T10219] usb 1-1: Product: syz [ 1338.453335][T10219] usb 1-1: Manufacturer: syz [ 1338.453343][T10219] usb 1-1: SerialNumber: syz [ 1338.493201][T10219] usb 1-1: config 0 descriptor?? [ 1338.645974][T15722] netlink: 'syz.5.2023': attribute type 12 has an invalid length. [ 1338.710133][T10219] usb 1-1: ignoring: probably an ADSL modem [ 1339.217256][T15729] loop0: detected capacity change from 0 to 3904 [ 1339.312121][T15731] loop0: [ 1339.445016][T10219] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1339.463891][T10219] usb 1-1: USB disconnect, device number 40 [ 1339.563380][ T1853] IPVS: starting estimator thread 0... [ 1339.678630][T15742] IPVS: using max 15 ests per chain, 36000 per kthread [ 1339.823025][T15745] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1339.823390][T15745] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1340.095187][T15748] vlan2: entered promiscuous mode [ 1340.095212][T15748] bridge0: entered promiscuous mode [ 1340.842390][T15751] netlink: 'syz.1.2035': attribute type 12 has an invalid length. [ 1341.257136][T15764] loop0: detected capacity change from 0 to 3904 [ 1341.349455][T15764] loop0: [ 1341.588542][ T5913] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1341.646431][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1341.703158][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1341.711142][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1341.729418][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1341.743213][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1341.889194][ T5913] usb 2-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 1341.890946][ T5913] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.893542][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1341.893566][ T5913] usb 2-1: Product: syz [ 1341.893581][ T5913] usb 2-1: Manufacturer: syz [ 1341.910565][ T5913] usb 2-1: selecting invalid altsetting 1 [ 1341.916257][ T5913] dvb_ttusb_budget: ttusb_init_controller: error [ 1341.916275][ T5913] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1342.127893][ T5913] DVB: Unable to find symbol cx22700_attach() [ 1342.270830][ T5913] DVB: Unable to find symbol tda10046_attach() [ 1342.270841][ T5913] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1342.438780][ T5793] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1342.473176][ T5640] syz_tun (unregistering): left allmulticast mode [ 1342.609426][ T5793] usb 6-1: New USB device found: idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1342.614202][ T5793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.614229][ T5793] usb 6-1: Product: syz [ 1342.614243][ T5793] usb 6-1: Manufacturer: syz [ 1342.614258][ T5793] usb 6-1: SerialNumber: syz [ 1342.672266][ T5793] usb 6-1: config 0 descriptor?? [ 1342.887185][ T5793] usb 6-1: ignoring: probably an ADSL modem [ 1343.574490][ T5793] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1343.596054][ T5793] usb 6-1: USB disconnect, device number 23 [ 1343.949310][ T5647] Bluetooth: hci5: command tx timeout [ 1343.977730][ T1840] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.102673][T15799] netlink: 'syz.0.2049': attribute type 12 has an invalid length. [ 1344.202843][T15767] rxe_eth0 speed is unknown, defaulting to 1000 [ 1344.348057][T12869] usb 2-1: USB disconnect, device number 31 [ 1345.653369][ T1840] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.028439][ T5647] Bluetooth: hci5: command tx timeout [ 1346.161794][T15824] ip6gretap0: entered promiscuous mode [ 1346.202069][T15831] netlink: 'syz.0.2060': attribute type 12 has an invalid length. [ 1346.290627][T15815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2053'. [ 1346.479760][T15840] loop0: detected capacity change from 0 to 3904 [ 1346.593030][T15840] loop0: [ 1346.926799][ T1840] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.795968][ T1840] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.108495][ T5647] Bluetooth: hci5: command tx timeout [ 1348.821741][T15870] loop0: detected capacity change from 0 to 3904 [ 1348.870821][T15870] loop0: [ 1349.098283][T15867] netlink: 'syz.6.2071': attribute type 12 has an invalid length. [ 1350.198386][ T5647] Bluetooth: hci5: command tx timeout [ 1350.728003][T15896] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2081'. [ 1350.891439][ T5793] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1350.994542][T15907] netlink: 'syz.1.2085': attribute type 12 has an invalid length. [ 1351.048927][ T5793] usb 7-1: New USB device found: idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1351.050457][ T5793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.092097][ T5793] usb 7-1: config 0 descriptor?? [ 1351.149345][ T5793] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1351.280702][ T1840] bridge_slave_1: left allmulticast mode [ 1351.280728][ T1840] bridge_slave_1: left promiscuous mode [ 1351.289984][ T1840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.369959][T15910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2086'. [ 1351.371364][ T5793] gp8psk: usb in 128 operation failed. [ 1351.503502][ T1840] bridge_slave_0: left allmulticast mode [ 1351.503537][ T1840] bridge_slave_0: left promiscuous mode [ 1351.504077][ T1840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.661587][ T5793] gp8psk: usb in 146 operation failed. [ 1351.661610][ T5793] gp8psk: failed to get FW version [ 1351.665075][ T5793] gp8psk: usb in 149 operation failed. [ 1351.665092][ T5793] gp8psk: failed to get FPGA version [ 1351.669009][ T5793] gp8psk: usb in 138 operation failed. [ 1351.669025][ T5793] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1351.669063][ T5793] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1351.795319][ T5793] usb 7-1: USB disconnect, device number 13 [ 1351.848428][T13506] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 1352.049228][T13506] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1352.050477][T13506] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1352.050502][T13506] usb 2-1: config 0 has no interface number 0 [ 1352.050548][T13506] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1352.050575][T13506] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1352.052195][T13506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.136695][T13506] usb 2-1: config 0 descriptor?? [ 1352.137406][T15910] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1352.221173][T13506] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1354.985761][ T1840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1355.094608][ T1840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1355.127847][T15938] fuse: Bad value for 'fd' [ 1355.146376][ T1840] bond0 (unregistering): Released all slaves [ 1355.260866][T15767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.260981][T15767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.261178][T15767] bridge_slave_0: entered allmulticast mode [ 1355.302242][T15767] bridge_slave_0: entered promiscuous mode [ 1355.582248][T15931] netlink: 'syz.5.2095': attribute type 12 has an invalid length. [ 1355.608442][ T5793] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1355.615308][T15767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.615459][T15767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.615658][T15767] bridge_slave_1: entered allmulticast mode [ 1355.673470][T15767] bridge_slave_1: entered promiscuous mode [ 1355.753348][ T30] usb 2-1: USB disconnect, device number 32 [ 1355.769690][ T5793] usb 1-1: Using ep0 maxpacket: 8 [ 1355.770502][ T5793] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1355.773518][ T5793] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1355.773570][ T5793] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1355.773593][ T5793] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1355.773617][ T5793] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1355.773642][ T5793] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1355.773682][ T5793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.938351][ T1840] tipc: Left network mode [ 1355.998919][T15767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.026174][T15767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1356.085371][ T5793] usb 1-1: GET_CAPABILITIES returned 0 [ 1356.085400][ T5793] usbtmc 1-1:16.0: can't read capabilities [ 1356.324528][T15767] team0: Port device team_slave_0 added [ 1356.340922][T15767] team0: Port device team_slave_1 added [ 1356.426090][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1356.578444][ T30] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1356.652340][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1356.652438][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1356.652519][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1356.684793][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1356.684877][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1356.684947][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1356.685276][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1356.685347][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1356.685416][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1356.709069][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1356.709153][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1356.709226][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1356.714090][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1356.714170][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1356.714239][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1356.728612][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 1356.729549][ T30] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1356.731177][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1356.731219][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.795869][ T30] usb 2-1: config 0 descriptor?? [ 1356.856088][T10219] usb 1-1: USB disconnect, device number 41 [ 1357.085318][ T30] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1357.360564][ T5793] usb 2-1: USB disconnect, device number 33 [ 1357.360657][ C0] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1358.079613][T15767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1358.079631][T15767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1358.079658][T15767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1358.082026][T15767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1358.082041][T15767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1358.082068][T15767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1358.907609][T15980] netlink: 'syz.6.2109': attribute type 12 has an invalid length. [ 1359.018542][T15767] hsr_slave_0: entered promiscuous mode [ 1359.029543][T15767] hsr_slave_1: entered promiscuous mode [ 1359.043930][T15767] debugfs: 'hsr0' already exists in 'hsr' [ 1359.043955][T15767] Cannot create hsr debugfs directory [ 1359.047529][ T5300] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1360.972460][ T1840] hsr_slave_0: left promiscuous mode [ 1361.013748][ T1840] hsr_slave_1: left promiscuous mode [ 1361.034176][ T1840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1361.034209][ T1840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1361.115058][ T1840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1361.115086][ T1840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1361.552463][ T1840] veth1_macvtap: left promiscuous mode [ 1361.552532][ T1840] veth0_macvtap: left promiscuous mode [ 1361.578329][T12869] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1361.599794][ T1840] veth1_vlan: left promiscuous mode [ 1361.599910][ T1840] veth0_vlan: left promiscuous mode [ 1361.729044][T12869] usb 2-1: Using ep0 maxpacket: 8 [ 1361.731370][T12869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1361.731426][T12869] usb 2-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1361.765553][T12869] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1361.780637][T12869] usb 2-1: string descriptor 0 read error: -22 [ 1361.780730][T12869] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1361.875821][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.875906][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.974962][T12869] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1362.002344][T12869] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1362.002570][T12869] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1362.002597][T12869] usb 2-1: media controller created [ 1362.153150][T12869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1362.281550][T12869] zl10353_read_register: readreg error (reg=127, ret==0) [ 1362.451994][T12869] usb 2-1: USB disconnect, device number 34 [ 1364.249308][ T1840] team0 (unregistering): Port device team_slave_1 removed [ 1364.289595][ T1840] team0 (unregistering): Port device team_slave_0 removed [ 1364.576876][T16031] netlink: 'syz.5.2120': attribute type 12 has an invalid length. [ 1364.582813][ T5300] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1364.821273][T16056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2129'. [ 1365.159277][ T5793] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 1365.349755][ T5793] usb 1-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1365.353173][ T5793] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1365.353199][ T5793] usb 1-1: config 0 has no interface number 0 [ 1365.353245][ T5793] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1365.353272][ T5793] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1365.353319][ T5793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.455488][ T5793] usb 1-1: config 0 descriptor?? [ 1365.457007][T16056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1365.517342][ T5793] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1366.178332][T16078] usb usb7: usbfs: process 16078 (syz.6.2131) did not claim interface 0 before use [ 1366.548357][T10219] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1366.695654][ T35] usb 1-1: USB disconnect, device number 42 [ 1366.699231][T10219] usb 6-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 1366.700506][T10219] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.700569][T10219] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1366.700591][T10219] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1366.700614][T10219] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1366.700651][T10219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.696706][T10219] gud 6-1:1.0: Failed to add properties (error=-71) [ 1367.696753][T10219] gud 6-1:1.0: probe with driver gud failed with error -71 [ 1367.777169][T10219] usb 6-1: USB disconnect, device number 24 [ 1368.279902][ T5793] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 1368.454331][ T5793] usb 1-1: New USB device found: idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1368.455467][ T5793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.477799][ T5793] usb 1-1: config 0 descriptor?? [ 1368.501218][ T5793] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1368.621464][T16096] netlink: 'syz.6.2137': attribute type 12 has an invalid length. [ 1368.648697][ T1840] IPVS: stop unused estimator thread 0... [ 1368.715368][ T5793] gp8psk: usb in 128 operation failed. [ 1368.930285][ T5793] gp8psk: usb in 146 operation failed. [ 1368.930301][ T5793] gp8psk: failed to get FW version [ 1368.930588][ T5793] gp8psk: usb in 149 operation failed. [ 1368.930596][ T5793] gp8psk: failed to get FPGA version [ 1368.931158][ T5793] gp8psk: usb in 138 operation failed. [ 1368.931169][ T5793] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1368.931191][ T5793] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1369.050952][ T5793] usb 1-1: USB disconnect, device number 43 [ 1369.398398][T16110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2141'. [ 1370.038326][T16122] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1370.177233][T16122] overlayfs: missing 'lowerdir' [ 1370.420078][T16127] syz.1.2143: vmalloc error: size 86016, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1370.462754][T16127] CPU: 1 UID: 0 PID: 16127 Comm: syz.1.2143 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 1370.462788][T16127] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1370.462798][T16127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1370.462818][T16127] Call Trace: [ 1370.462829][T16127] [ 1370.462838][T16127] dump_stack_lvl+0xe8/0x150 [ 1370.462877][T16127] warn_alloc+0x24d/0x270 [ 1370.462914][T16127] ? __pfx_warn_alloc+0x10/0x10 [ 1370.462951][T16127] ? alloc_pages_mpol+0x11b/0x280 [ 1370.462980][T16127] ? alloc_pages_noprof+0x17c/0x2f0 [ 1370.463007][T16127] __vmalloc_node_range_noprof+0x12fd/0x16f0 [ 1370.463071][T16127] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1370.463106][T16127] ? bpf_check+0xbc/0x3540 [ 1370.463133][T16127] ? rcu_is_watching+0x16/0xb0 [ 1370.463159][T16127] ? bpf_check+0xbc/0x3540 [ 1370.463183][T16127] ? rcu_is_watching+0x16/0xb0 [ 1370.463209][T16127] ? bpf_check+0xbc/0x3540 [ 1370.463234][T16127] __kvmalloc_node_noprof+0x641/0x880 [ 1370.463257][T16127] ? bpf_check+0xbc/0x3540 [ 1370.463285][T16127] ? bpf_check+0xbc/0x3540 [ 1370.463318][T16127] bpf_check+0xbc/0x3540 [ 1370.463345][T16127] ? lock_acquire+0x115/0x350 [ 1370.463381][T16127] ? ktime_get_with_offset+0x93/0x2d0 [ 1370.463403][T16127] ? ktime_get_with_offset+0x93/0x2d0 [ 1370.463424][T16127] ? __pfx_bpf_check+0x10/0x10 [ 1370.463448][T16127] ? __asan_memset+0x22/0x50 [ 1370.463474][T16127] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1370.463503][T16127] bpf_prog_load+0x158f/0x1d60 [ 1370.463536][T16127] ? __pfx_bpf_prog_load+0x10/0x10 [ 1370.463586][T16127] __sys_bpf+0xd86/0xe00 [ 1370.463614][T16127] ? __pfx___sys_bpf+0x10/0x10 [ 1370.463639][T16127] ? do_futex+0x3e7/0x4e0 [ 1370.463686][T16127] ? __fget_files+0x2a/0x420 [ 1370.463715][T16127] ? __pfx___se_sys_futex+0x10/0x10 [ 1370.463748][T16127] __x64_sys_bpf+0xba/0xd0 [ 1370.463774][T16127] do_syscall_64+0x166/0x520 [ 1370.463872][T16127] ? trace_irq_disable+0x3b/0x140 [ 1370.463893][T16127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.463913][T16127] ? clear_bhb_loop+0x70/0xc0 [ 1370.463936][T16127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.463961][T16127] RIP: 0033:0x7ff47c4df559 [ 1370.463989][T16127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1370.464008][T16127] RSP: 002b:00007ff47a70d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1370.464028][T16127] RAX: ffffffffffffffda RBX: 00007ff47c766090 RCX: 00007ff47c4df559 [ 1370.464044][T16127] RDX: 0000000000000094 RSI: 0000200000001c40 RDI: 0000000000000005 [ 1370.464058][T16127] RBP: 00007ff47c576b20 R08: 0000000000000000 R09: 0000000000000000 [ 1370.464069][T16127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1370.464081][T16127] R13: 00007ff47c766128 R14: 00007ff47c766090 R15: 00007ffdcffed6e8 [ 1370.464120][T16127] [ 1370.837267][T16127] Mem-Info: [ 1370.837283][T16127] active_anon:205 inactive_anon:29507 isolated_anon:0 [ 1370.837283][T16127] active_file:26266 inactive_file:35939 isolated_file:0 [ 1370.837283][T16127] unevictable:0 dirty:357 writeback:0 [ 1370.837283][T16127] slab_reclaimable:12722 slab_unreclaimable:106019 [ 1370.837283][T16127] mapped:41719 shmem:22907 pagetables:1695 [ 1370.837283][T16127] sec_pagetables:0 bounce:0 [ 1370.837283][T16127] kernel_misc_reclaimable:0 [ 1370.837283][T16127] free:1265125 free_pcp:1826 free_cma:0 [ 1370.837316][T16127] Node 0 active_anon:820kB inactive_anon:118028kB active_file:104852kB inactive_file:143756kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166876kB dirty:1424kB writeback:0kB shmem:91628kB kernel_stack:13616kB pagetables:6616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1370.837345][T16127] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1370.837372][T16127] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1370.837405][T16127] lowmem_reserve[]: 0 2478 2480 2480 2480 [ 1370.837428][T16127] Node 0 DMA32 free:1121684kB boost:0kB min:3896kB low:6404kB high:8912kB reserved_highatomic:0kB free_highatomic:0kB active_anon:820kB inactive_anon:118028kB active_file:104852kB inactive_file:143756kB unevictable:0kB writepending:1424kB zspages:0kB present:3129332kB managed:2538084kB mlocked:0kB bounce:0kB free_pcp:7296kB local_pcp:4636kB free_cma:0kB [ 1370.837468][T16127] lowmem_reserve[]: 0 0 1 1 1 [ 1370.837501][T16127] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1472kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1370.837541][T16127] lowmem_reserve[]: 0 0 0 0 0 [ 1370.837571][T16127] Node 1 Normal free:3923456kB boost:0kB min:6380kB low:10488kB high:14596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1370.837640][T16127] lowmem_reserve[]: 0 0 0 0 0 [ 1370.837687][T16127] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1370.837762][T16127] Node 0 DMA32: 20*4kB (UE) 76*8kB (UME) 66*16kB (UME) 382*32kB (UM) 120*64kB (UME) 172*128kB (UME) 91*256kB (UME) 66*512kB (UME) 55*1024kB (UME) 11*2048kB (UM) 230*4096kB (UM) = 1121680kB [ 1370.837846][T16127] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1370.837897][T16127] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 7*16kB (UM) 2*32kB (UM) 5*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 4*2048kB (UM) 955*4096kB (M) = 3923456kB [ 1370.837986][T16127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1370.837996][T16127] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 1370.838006][T16127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1370.838017][T16127] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1370.838026][T16127] 85108 total pagecache pages [ 1370.838033][T16127] 0 pages in swap cache [ 1370.838037][T16127] Free swap = 124980kB [ 1370.838042][T16127] Total swap = 124996kB [ 1370.838046][T16127] 2097051 pages RAM [ 1370.838050][T16127] 0 pages HighMem/MovableOnly [ 1370.838054][T16127] 430546 pages reserved [ 1370.838057][T16127] 0 pages cma reserved [ 1372.588990][T10219] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1372.742100][T10219] usb 6-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1372.770442][T10219] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1372.770460][T10219] usb 6-1: Product: syz [ 1372.770468][T10219] usb 6-1: SerialNumber: syz [ 1372.809510][T10219] usb 6-1: config 0 descriptor?? [ 1372.848800][T10219] hso 6-1:0.0: Not our interface [ 1373.160600][T16163] fuse: Bad value for 'fd' [ 1373.294281][T16161] netlink: 'syz.6.2149': attribute type 12 has an invalid length. [ 1373.498399][ T5793] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1373.648525][ T5793] usb 2-1: Using ep0 maxpacket: 8 [ 1373.649119][ T5793] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1373.650199][ T5793] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1373.650231][ T5793] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1373.650243][ T5793] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1373.650256][ T5793] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1373.650269][ T5793] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1373.650298][ T5793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.935132][ T5793] usb 2-1: GET_CAPABILITIES returned 0 [ 1373.935170][ T5793] usbtmc 2-1:16.0: can't read capabilities [ 1373.937804][T12869] usb 6-1: USB disconnect, device number 25 [ 1374.179347][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1374.179400][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1374.179439][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1374.179477][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1374.179514][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1374.180188][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1374.180232][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1374.180271][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1374.180309][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1374.180347][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1374.183231][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1374.183279][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1374.304670][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1374.304760][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1374.304835][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1374.307737][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1374.478707][ T5793] usb 2-1: USB disconnect, device number 35 [ 1375.399031][T12869] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1375.517533][T15767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1375.549209][T12869] usb 6-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1375.550646][T12869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1375.550664][T12869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1375.550676][T12869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1375.552991][T12869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.553005][T12869] usb 6-1: Product: syz [ 1375.553016][T12869] usb 6-1: Manufacturer: syz [ 1375.553030][T12869] usb 6-1: SerialNumber: syz [ 1375.641737][T12869] usb 6-1: config 0 descriptor?? [ 1375.760055][T15767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1375.823117][T15767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1375.930449][T16182] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2153'. [ 1376.197365][T12869] adutux 6-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1376.211454][T15767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1376.249373][T12869] usb 6-1: USB disconnect, device number 26 [ 1376.302475][T13987] udevd[13987]: setting mode of /dev/bus/usb/006/026 to 020664 failed: No such file or directory [ 1376.302654][T13987] udevd[13987]: setting owner of /dev/bus/usb/006/026 to uid=0, gid=0 failed: No such file or directory [ 1376.485583][T15767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1376.648835][T15767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1376.682665][T15767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1376.805824][T16187] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2154'. [ 1376.839453][T15767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1378.005562][T15767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1378.126250][T15767] 8021q: adding VLAN 0 to HW filter on device team0 [ 1378.173898][ T1854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.177590][ T1854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1378.259717][ T1854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.259850][ T1854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1378.260533][T16211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2156'. [ 1378.779324][T13506] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 1378.961818][T13506] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1378.963036][T13506] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1378.963052][T13506] usb 2-1: config 0 has no interface number 0 [ 1378.963078][T13506] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1378.963093][T13506] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1378.963115][T13506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.101883][T13506] usb 2-1: config 0 descriptor?? [ 1379.102488][T16211] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1379.274961][T13506] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1379.442386][T12869] usb 2-1: USB disconnect, device number 36 [ 1380.577444][T16233] bond0: option miimon: invalid value (18446744071562067968) [ 1380.577462][T16233] bond0: option miimon: allowed values 0 - 2147483647 [ 1380.781049][T16233] bond0 (unregistering): Released all slaves [ 1380.890829][T16249] fuse: Bad value for 'fd' [ 1381.218349][T13506] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1381.339655][T16257] loop5: detected capacity change from 0 to 7 [ 1381.373222][T16257] Dev loop5: unable to read RDB block 7 [ 1381.373260][T16257] loop5: unable to read partition table [ 1381.373389][T16257] loop5: partition table beyond EOD, truncated [ 1381.373401][T16257] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1381.413527][T13506] usb 2-1: Using ep0 maxpacket: 8 [ 1381.420573][T13506] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1381.433381][T13506] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1381.433452][T13506] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1381.433476][T13506] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1381.433501][T13506] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1381.433526][T13506] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1381.433569][T13506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.801790][T13506] usb 2-1: GET_CAPABILITIES returned 0 [ 1381.801822][T13506] usbtmc 2-1:16.0: can't read capabilities [ 1381.969488][T15767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1382.007394][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.007485][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.007554][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.027370][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.027422][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.027460][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.027499][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.046050][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.046139][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.119756][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.119842][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.119913][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.125306][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.125394][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.125460][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.125604][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1382.173220][T13506] usb 2-1: USB disconnect, device number 37 [ 1387.808907][T12869] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1387.958417][T12869] usb 1-1: Using ep0 maxpacket: 8 [ 1387.959876][T12869] usb 1-1: New USB device found: idVendor=05ac, idProduct=0230, bcdDevice=0.40 [ 1387.966874][T12869] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.966925][T12869] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1388.027934][T12869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.027952][T12869] usb 1-1: Product: syz [ 1388.027960][T12869] usb 1-1: Manufacturer: syz [ 1388.027967][T12869] usb 1-1: SerialNumber: syz [ 1388.770097][T16301] bond1: option miimon: invalid value (18446744071562067968) [ 1388.770115][T16301] bond1: option miimon: allowed values 0 - 2147483647 [ 1388.946480][T16301] bond1 (unregistering): Released all slaves [ 1389.026112][T12869] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input17 [ 1389.090441][ T4990] bcm5974 1-1:1.0: could not read from device [ 1389.131428][T12869] usb 1-1: USB disconnect, device number 44 [ 1389.294469][T15767] veth0_vlan: entered promiscuous mode [ 1389.320836][T15767] veth1_vlan: entered promiscuous mode [ 1389.504840][T15767] veth0_macvtap: entered promiscuous mode [ 1389.518106][T15767] veth1_macvtap: entered promiscuous mode [ 1389.581536][T15767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1389.584499][T16321] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1389.775628][T15767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1389.951076][ T1853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.951294][ T8066] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.951567][ T8066] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.009673][ T1840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.669874][ T30] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1390.891994][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 1390.892929][ T30] usb 7-1: New USB device found: idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1390.987228][ T30] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1390.987258][ T30] usb 7-1: Product: syz [ 1390.987271][ T30] usb 7-1: Manufacturer: syz [ 1390.987284][ T30] usb 7-1: SerialNumber: syz [ 1391.145823][ T30] usb 7-1: config 0 descriptor?? [ 1391.247574][T16332] rxe_eth0 speed is unknown, defaulting to 1000 [ 1391.686391][ T1844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.686414][ T1844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.307374][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.307398][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.860348][T16334] rxe_eth0 speed is unknown, defaulting to 1000 [ 1394.027083][ T6100] usb 7-1: USB disconnect, device number 14 [ 1394.966183][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1394.998074][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1395.014503][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1395.052574][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1395.064285][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1396.680758][T16327] syz_tun (unregistering): left allmulticast mode [ 1397.320673][ T5647] Bluetooth: hci0: command tx timeout [ 1399.399257][ T5647] Bluetooth: hci0: command tx timeout [ 1400.137381][ T1854] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.381719][T10219] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1401.504582][ T5647] Bluetooth: hci0: command tx timeout [ 1401.677874][T10219] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1401.677933][T10219] usb 3-1: New USB device found: idVendor=0499, idProduct=1053, bcdDevice=0.40 [ 1401.679235][T10219] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.679284][T10219] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1401.688974][T10219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.688999][T10219] usb 3-1: Product: syz [ 1401.689013][T10219] usb 3-1: Manufacturer: syz [ 1401.689027][T10219] usb 3-1: SerialNumber: syz [ 1401.748114][ T1854] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.034556][T16374] rxe_eth0 speed is unknown, defaulting to 1000 [ 1403.548361][ T5647] Bluetooth: hci0: command tx timeout [ 1404.852680][ T1854] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.741764][T16447] loop0: detected capacity change from 0 to 3904 [ 1405.880342][T16448] loop0: [ 1406.838741][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1406.890462][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1406.912311][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1406.924055][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1406.933418][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1408.247061][ T1854] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.167793][ T5647] Bluetooth: hci2: command tx timeout [ 1409.475368][ T5654] usb 3-1: USB disconnect, device number 23 [ 1410.718636][ T35] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1410.882757][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 1410.894353][ T35] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1410.894412][ T35] usb 7-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1410.927172][ T35] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1410.948559][ T35] usb 7-1: string descriptor 0 read error: -22 [ 1410.948654][ T35] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1411.086383][ T35] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1411.126071][ T35] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1411.126307][ T35] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1411.126337][ T35] usb 7-1: media controller created [ 1411.191904][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1411.228659][ T5647] Bluetooth: hci2: command tx timeout [ 1411.363133][ T35] zl10353_read_register: readreg error (reg=127, ret==0) [ 1411.580973][ T35] usb 7-1: USB disconnect, device number 15 [ 1411.881284][T16449] rxe_eth0 speed is unknown, defaulting to 1000 [ 1412.392670][T16509] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2220'. [ 1412.568309][ T35] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1412.741933][ T35] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1412.741973][ T35] usb 7-1: New USB device found: idVendor=0499, idProduct=1053, bcdDevice=0.40 [ 1412.790469][ T35] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.790890][ T35] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1412.821772][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.821799][ T35] usb 7-1: Product: syz [ 1412.821813][ T35] usb 7-1: Manufacturer: syz [ 1412.821825][ T35] usb 7-1: SerialNumber: syz [ 1413.308850][ T5647] Bluetooth: hci2: command tx timeout [ 1414.709308][ T1854] bridge_slave_1: left allmulticast mode [ 1414.709357][ T1854] bridge_slave_1: left promiscuous mode [ 1414.710144][ T1854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.984214][ T1854] bridge_slave_0: left allmulticast mode [ 1414.984249][ T1854] bridge_slave_0: left promiscuous mode [ 1414.986927][ T1854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.389985][ T5647] Bluetooth: hci2: command tx timeout [ 1418.890637][ T6100] usb 7-1: USB disconnect, device number 16 [ 1419.621242][ T5300] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1420.293646][T16374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.293856][T16374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.294050][T16374] bridge_slave_0: entered allmulticast mode [ 1420.349942][T16374] bridge_slave_0: entered promiscuous mode [ 1420.389839][T16374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.389992][T16374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.390165][T16374] bridge_slave_1: entered allmulticast mode [ 1420.397504][T16374] bridge_slave_1: entered promiscuous mode [ 1421.119416][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1421.160854][T16580] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2237'. [ 1421.214335][T16374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1421.300556][ T9] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 1421.301893][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1421.301910][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1421.301921][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1421.301966][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1421.301993][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1421.368467][T16374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1421.414461][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1421.414480][ T9] usb 2-1: Product: syz [ 1421.414488][ T9] usb 2-1: Manufacturer: syz [ 1421.447421][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1421.447437][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1421.470052][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1421.470074][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 1422.412573][T16374] team0: Port device team_slave_0 added [ 1422.820953][ T1854] hsr_slave_0: left promiscuous mode [ 1422.853573][ T1854] hsr_slave_1: left promiscuous mode [ 1422.855173][ T1854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.932583][ T1854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.988093][ T1854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1422.988115][ T1854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.326921][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.327009][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.120495][ T9] usb 2-1: USB disconnect, device number 38 [ 1424.197762][ T1854] veth1_macvtap: left promiscuous mode [ 1424.197874][ T1854] veth0_macvtap: left promiscuous mode [ 1424.208405][ T5654] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1424.226397][ T1854] veth1_vlan: left promiscuous mode [ 1424.226600][ T1854] veth0_vlan: left promiscuous mode [ 1424.368367][ T5654] usb 7-1: Using ep0 maxpacket: 16 [ 1424.369073][ T5654] usb 7-1: New USB device found: idVendor=05ac, idProduct=0244, bcdDevice=0.00 [ 1424.372150][ T5654] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1424.372217][ T5654] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.413723][ T5654] usb 7-1: config 0 descriptor?? [ 1424.437596][ T5654] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input18 [ 1424.956160][ T4990] bcm5974 7-1:0.0: could not read from device [ 1425.070577][ T4990] bcm5974 7-1:0.0: could not read from device [ 1425.076575][ T5654] usb 7-1: USB disconnect, device number 17 [ 1425.398360][T10219] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1425.549232][T10219] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1425.549282][T10219] usb 3-1: no configurations [ 1425.549290][T10219] usb 3-1: can't read configurations, error -22 [ 1425.728538][T10219] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1425.926380][T10219] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1425.926437][T10219] usb 3-1: no configurations [ 1425.926450][T10219] usb 3-1: can't read configurations, error -22 [ 1425.926821][T10219] usb usb3-port1: attempt power cycle [ 1426.282711][T16639] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2249'. [ 1426.352246][T10219] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1426.377059][T10219] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1426.377100][T10219] usb 3-1: no configurations [ 1426.377107][T10219] usb 3-1: can't read configurations, error -22 [ 1426.498331][T10219] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1426.532525][T10219] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1426.532566][T10219] usb 3-1: no configurations [ 1426.532573][T10219] usb 3-1: can't read configurations, error -22 [ 1426.533403][T10219] usb usb3-port1: unable to enumerate USB device [ 1427.108944][ T1854] team0 (unregistering): Port device team_slave_1 removed [ 1427.150779][ T1854] team0 (unregistering): Port device team_slave_0 removed [ 1427.339385][T16374] team0: Port device team_slave_1 added [ 1427.372445][ T5300] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1427.567771][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1427.669713][ T35] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1427.774908][T16374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1427.774925][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1427.774947][T16374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1427.827675][T16374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1427.827693][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1427.827720][T16374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1428.116133][T16374] hsr_slave_0: entered promiscuous mode [ 1428.123954][T16374] hsr_slave_1: entered promiscuous mode [ 1428.408186][ T35] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1428.608334][ T35] usb 2-1: Using ep0 maxpacket: 8 [ 1428.611969][ T35] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1428.612027][ T35] usb 2-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1428.616269][ T35] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1428.635273][ T35] usb 2-1: string descriptor 0 read error: -22 [ 1428.635371][ T35] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1428.680164][ T35] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1428.747552][ T35] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1428.747946][ T35] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1428.747991][ T35] usb 2-1: media controller created [ 1428.789157][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1428.888132][ T35] zl10353_read_register: readreg error (reg=127, ret==0) [ 1429.087645][ T35] usb 2-1: USB disconnect, device number 39 [ 1429.249441][ T1854] IPVS: stop unused estimator thread 0... [ 1429.558286][T16449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.558665][T16449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.561128][T16449] bridge_slave_0: entered allmulticast mode [ 1429.565559][T16449] bridge_slave_0: entered promiscuous mode [ 1429.624414][T16449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.624581][T16449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.624748][T16449] bridge_slave_1: entered allmulticast mode [ 1429.655079][T16449] bridge_slave_1: entered promiscuous mode [ 1429.746143][ T5300] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1430.145740][T16449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1430.170735][T16449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1430.266589][T16702] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2261'. [ 1430.554665][ T1854] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.648424][T10219] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 1430.811220][T10219] usb 7-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 1430.812015][T10219] usb 7-1: config 0 has no interfaces? [ 1430.812049][T10219] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.857944][T10219] usb 7-1: config 0 descriptor?? [ 1431.116956][T16449] team0: Port device team_slave_0 added [ 1431.121398][T16449] team0: Port device team_slave_1 added [ 1431.490078][T16449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1431.490097][T16449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1431.490126][T16449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1431.668411][T10219] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1431.696961][ T1854] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.746407][T16449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1431.746420][T16449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1431.746436][T16449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.818641][T10219] usb 3-1: Using ep0 maxpacket: 16 [ 1431.824759][T10219] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1431.824819][T10219] usb 3-1: New USB device found: idVendor=0856, idProduct=ac32, bcdDevice=d8.41 [ 1431.826294][T10219] usb 3-1: config 255 has an invalid interface number: 95 but max is 0 [ 1431.826319][T10219] usb 3-1: config 255 has no interface number 0 [ 1431.826350][T10219] usb 3-1: config 255 interface 95 has no altsetting 0 [ 1431.874372][T10219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.874401][T10219] usb 3-1: Product: syz [ 1431.874415][T10219] usb 3-1: Manufacturer: syz [ 1431.874429][T10219] usb 3-1: SerialNumber: syz [ 1432.216666][T16728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 1432.372614][T16449] hsr_slave_0: entered promiscuous mode [ 1432.377920][T16449] hsr_slave_1: entered promiscuous mode [ 1432.383873][T16449] debugfs: 'hsr0' already exists in 'hsr' [ 1432.383899][T16449] Cannot create hsr debugfs directory [ 1432.414899][T10219] mos7840 3-1:255.95: required endpoints missing [ 1432.507720][T10219] usb 3-1: USB disconnect, device number 28 [ 1432.765872][ T1854] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.234533][ T9] usb 7-1: USB disconnect, device number 18 [ 1433.446871][T16763] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2276'. [ 1433.612404][ T1854] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.348291][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1435.423163][T16374] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1435.453971][T16374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1435.518916][ T9] usb 2-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 1435.525618][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.525648][ T9] usb 2-1: Product: syz [ 1435.525662][ T9] usb 2-1: Manufacturer: syz [ 1435.525676][ T9] usb 2-1: SerialNumber: syz [ 1435.768382][T12869] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1435.818380][T16374] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1435.865189][T16374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1435.883681][T16374] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1435.918372][T12869] usb 3-1: Using ep0 maxpacket: 8 [ 1435.921473][T12869] usb 3-1: New USB device found: idVendor=05ac, idProduct=0230, bcdDevice=0.40 [ 1435.925832][T12869] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.925892][T12869] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1435.946965][T16374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1435.954073][T12869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.954101][T12869] usb 3-1: Product: syz [ 1435.954116][T12869] usb 3-1: Manufacturer: syz [ 1435.954130][T12869] usb 3-1: SerialNumber: syz [ 1436.182171][ T1854] bridge_slave_1: left allmulticast mode [ 1436.182206][ T1854] bridge_slave_1: left promiscuous mode [ 1436.182543][ T1854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.257947][ T5654] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1436.609126][T12869] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input19 [ 1436.636089][ T4990] bcm5974 3-1:1.0: could not read from device [ 1436.708324][ T30] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1436.709789][T12869] usb 3-1: USB disconnect, device number 29 [ 1436.869940][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 1436.870748][ T30] usb 7-1: New USB device found: idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1436.872710][ T30] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 1436.872736][ T30] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.872756][ T30] usb 7-1: config 0 has no interface number 0 [ 1436.872797][ T30] usb 7-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1436.942602][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.942632][ T30] usb 7-1: Product: syz [ 1436.942646][ T30] usb 7-1: Manufacturer: syz [ 1436.942660][ T30] usb 7-1: SerialNumber: syz [ 1436.998244][ T30] usb 7-1: config 0 descriptor?? [ 1437.053775][ T30] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input20 [ 1437.379319][ T5913] usb 7-1: USB disconnect, device number 19 [ 1437.634718][ T5654] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1437.807969][ T5654] ath9k_htc: Failed to initialize the device [ 1438.542164][ T5654] usb 2-1: ath9k_htc: USB layer deinitialized [ 1440.194805][ T5793] usb 2-1: USB disconnect, device number 40 [ 1440.590239][ T1854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1440.631138][ T1854] bond0 (unregistering): Released all slaves [ 1440.670213][T16374] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1440.735386][T16374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1440.886676][T16894] loop5: detected capacity change from 0 to 7 [ 1441.027052][T16894] Dev loop5: unable to read RDB block 7 [ 1441.027087][T16894] loop5: AHDI p1 [ 1441.027108][T16894] loop5: partition table partially beyond EOD, truncated [ 1443.342104][T16449] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1443.368364][T10219] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1443.375722][T16449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1443.413876][T16449] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1443.454424][T16449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1443.518343][T10219] usb 7-1: Using ep0 maxpacket: 16 [ 1443.519287][T10219] usb 7-1: New USB device found: idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1443.552232][T10219] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1443.552250][T10219] usb 7-1: Product: syz [ 1443.552258][T10219] usb 7-1: Manufacturer: syz [ 1443.552266][T10219] usb 7-1: SerialNumber: syz [ 1443.593983][T10219] usb 7-1: config 0 descriptor?? [ 1443.831301][T16449] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1443.907988][T16449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1443.951435][T16374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1443.970933][ T5300] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1444.109085][T16449] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1444.172334][T16449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1444.537276][T16374] 8021q: adding VLAN 0 to HW filter on device team0 [ 1444.600721][ T1834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.601072][ T1834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1444.686914][T10712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.687046][T10712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1445.489756][ T1854] hsr_slave_0: left promiscuous mode [ 1445.539429][ T1854] hsr_slave_1: left promiscuous mode [ 1445.540818][ T1854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1445.540846][ T1854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1445.594150][ T1854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1445.594177][ T1854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1445.692412][ T5793] usb 7-1: USB disconnect, device number 20 [ 1445.909100][ T1854] veth1_macvtap: left promiscuous mode [ 1445.909209][ T1854] veth0_macvtap: left promiscuous mode [ 1445.909530][ T1854] veth1_vlan: left promiscuous mode [ 1445.909723][ T1854] veth0_vlan: left promiscuous mode [ 1446.490057][T17001] fuse: Bad value for 'fd' [ 1446.769628][ T5793] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1446.919602][ T5793] usb 7-1: Using ep0 maxpacket: 8 [ 1446.923500][ T5793] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1446.925528][ T5793] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1446.925582][ T5793] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1446.925661][ T5793] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1446.925685][ T5793] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1446.925709][ T5793] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1446.925750][ T5793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.095584][ T1854] team0 (unregistering): Port device team_slave_1 removed [ 1447.169112][ T1854] team0 (unregistering): Port device team_slave_0 removed [ 1447.195399][ T5793] usb 7-1: GET_CAPABILITIES returned 0 [ 1447.195447][ T5793] usbtmc 7-1:16.0: can't read capabilities [ 1447.401435][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1447.401526][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1447.401602][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1447.405664][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1447.405752][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1447.405827][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1447.406198][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1447.406277][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1447.406353][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1447.406667][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1447.406743][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1447.406818][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1447.407157][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1447.407443][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1447.407519][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1447.407592][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1447.497486][ T5793] usb 7-1: USB disconnect, device number 21 [ 1447.822039][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2331'. [ 1447.861709][ T5300] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1447.992796][T16449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1448.076971][T16449] 8021q: adding VLAN 0 to HW filter on device team0 [ 1448.151519][ T1858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.151941][ T1858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1448.249621][ T1858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.249836][ T1858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1448.788445][T12869] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1448.961298][T12869] usb 7-1: Using ep0 maxpacket: 16 [ 1448.980131][T12869] usb 7-1: New USB device found: idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1448.988016][T12869] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1448.988043][T12869] usb 7-1: Product: syz [ 1448.988059][T12869] usb 7-1: Manufacturer: syz [ 1448.988074][T12869] usb 7-1: SerialNumber: syz [ 1449.035836][T12869] usb 7-1: config 0 descriptor?? [ 1449.356996][ T1854] IPVS: stop unused estimator thread 0... [ 1450.232085][T16374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1450.584668][T16374] veth0_vlan: entered promiscuous mode [ 1450.696754][T16449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1450.714227][T16374] veth1_vlan: entered promiscuous mode [ 1450.724950][ T5300] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1450.982186][T16374] veth0_macvtap: entered promiscuous mode [ 1451.013127][T16374] veth1_macvtap: entered promiscuous mode [ 1451.097548][T16374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1451.192925][T16374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1451.298103][ T8066] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.299177][ T8066] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.300290][ T1854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.300482][ T1854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.559962][T12869] usb 7-1: USB disconnect, device number 22 [ 1453.164867][T17118] netlink: 'syz.6.2344': attribute type 12 has an invalid length. [ 1453.198229][ T5300] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1453.208378][ T1847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.208398][ T1847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.603243][T17133] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2346'. [ 1453.636119][T10712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.636143][T10712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.712978][T16449] veth0_vlan: entered promiscuous mode [ 1453.792996][T16449] veth1_vlan: entered promiscuous mode [ 1454.182632][T16449] veth0_macvtap: entered promiscuous mode [ 1454.216511][T16449] veth1_macvtap: entered promiscuous mode [ 1454.344303][T16449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1454.382352][T16449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1454.538290][ T1834] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.202751][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1455.235799][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1455.258134][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1455.289664][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1455.327543][T13689] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1455.526536][T10712] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.570562][T10712] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.116950][T10712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.116972][T10712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.470110][T10219] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1456.679351][T10219] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 1456.680970][T10219] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1456.680986][T10219] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1456.680997][T10219] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1456.681025][T10219] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1456.681040][T10219] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1456.684247][T10219] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1456.684272][T10219] usb 2-1: Product: syz [ 1456.684286][T10219] usb 2-1: Manufacturer: syz [ 1456.790129][T10219] cdc_wdm 2-1:1.0: skipping garbage [ 1456.790150][T10219] cdc_wdm 2-1:1.0: skipping garbage [ 1456.794491][T17163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2352'. [ 1456.797921][T10219] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1456.797940][T10219] cdc_wdm 2-1:1.0: Unknown control protocol [ 1456.851838][ T1847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.851859][ T1847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.910176][ T1838] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.128419][ T5913] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 1457.293184][ T5913] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1457.352040][ T5913] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1457.352072][ T5913] usb 3-1: config 0 has no interface number 0 [ 1457.352188][ T5913] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1457.352217][ T5913] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1457.352317][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.380716][ T5913] usb 3-1: config 0 descriptor?? [ 1457.382963][T17163] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1457.548984][T13689] Bluetooth: hci3: command tx timeout [ 1457.760321][T17178] ip6gretap0: entered promiscuous mode [ 1457.985318][T17146] rxe_eth0 speed is unknown, defaulting to 1000 [ 1458.835290][ T5913] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1459.087014][ C0] wdm_int_callback: 96 callbacks suppressed [ 1459.087046][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1459.087065][ C0] wdm_int_callback: 96 callbacks suppressed [ 1459.087082][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1459.087318][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1459.087341][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1459.087598][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1459.087620][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1459.087858][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1459.087879][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1459.088112][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1459.088132][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1459.088407][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1459.088429][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1459.088672][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1459.088694][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1459.088937][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1459.088959][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1459.089210][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1459.089226][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1459.090640][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1459.090665][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1459.124957][ T5913] usb 3-1: USB disconnect, device number 30 [ 1459.135268][ T9] usb 2-1: USB disconnect, device number 41 [ 1459.603477][ T1844] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.628719][T13689] Bluetooth: hci3: command tx timeout [ 1459.666236][T17187] netlink: 'syz.6.2354': attribute type 12 has an invalid length. [ 1459.940033][T17195] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2357'. [ 1460.144551][ T1844] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.148378][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1460.304212][ T9] usb 7-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 1460.308650][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.308683][ T9] usb 7-1: Product: syz [ 1460.308698][ T9] usb 7-1: Manufacturer: syz [ 1460.308712][ T9] usb 7-1: SerialNumber: syz [ 1460.393887][T10005] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1460.838297][ T35] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1460.992197][ T35] usb 2-1: Using ep0 maxpacket: 8 [ 1461.055903][ T35] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1461.055963][ T35] usb 2-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 1461.056012][ T35] usb 2-1: no configurations [ 1461.056019][ T35] usb 2-1: can't read configurations, error -22 [ 1461.116851][ T1844] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.548610][T10005] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1461.682264][T10005] ath9k_htc: Failed to initialize the device [ 1461.710908][T13689] Bluetooth: hci3: command tx timeout [ 1462.004567][T10005] usb 7-1: ath9k_htc: USB layer deinitialized [ 1463.791300][T13689] Bluetooth: hci3: command tx timeout [ 1463.883369][ T1844] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.911664][T16339] usb 7-1: USB disconnect, device number 23 [ 1463.987560][ T36] audit: type=1326 audit(1793195847.576:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17238 comm="syz.2.2368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9800d7f559 code=0x7ffc0000 [ 1463.987611][ T36] audit: type=1326 audit(1793195847.576:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17238 comm="syz.2.2368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9800d7f559 code=0x7ffc0000 [ 1463.987652][ T36] audit: type=1326 audit(1793195847.586:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17238 comm="syz.2.2368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9800d7f559 code=0x7ffc0000 [ 1463.987691][ T36] audit: type=1326 audit(1793195847.586:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17238 comm="syz.2.2368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9800d7f559 code=0x7ffc0000 [ 1463.987729][ T36] audit: type=1326 audit(1793195847.586:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17238 comm="syz.2.2368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9800d7f559 code=0x7ffc0000 [ 1463.987768][ T36] audit: type=1326 audit(1793195847.586:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17238 comm="syz.2.2368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9800d7f559 code=0x7ffc0000 [ 1463.987808][ T36] audit: type=1326 audit(1793195847.586:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17238 comm="syz.2.2368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9800d7f559 code=0x7ffc0000 [ 1463.987846][ T36] audit: type=1326 audit(1793195847.586:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17238 comm="syz.2.2368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9800d7f559 code=0x7ffc0000 [ 1463.987884][ T36] audit: type=1326 audit(1793195847.586:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17238 comm="syz.2.2368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9800d7f559 code=0x7ffc0000 [ 1463.987922][ T36] audit: type=1326 audit(1793195847.586:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17238 comm="syz.2.2368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9800d7f559 code=0x7ffc0000 [ 1464.074649][T17225] netlink: 'syz.1.2365': attribute type 12 has an invalid length. [ 1464.711509][ T35] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1464.779002][T17146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.779079][T17146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.779181][T17146] bridge_slave_0: entered allmulticast mode [ 1464.782189][T17146] bridge_slave_0: entered promiscuous mode [ 1464.791734][T17146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.791852][T17146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.792037][T17146] bridge_slave_1: entered allmulticast mode [ 1464.810751][T17146] bridge_slave_1: entered promiscuous mode [ 1464.908441][ T35] usb 3-1: device descriptor read/64, error -71 [ 1465.162263][ T35] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1465.288665][ T35] usb 3-1: device descriptor read/64, error -71 [ 1465.398680][ T35] usb usb3-port1: attempt power cycle [ 1465.400835][T17146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1465.506630][T17146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1465.738335][ T35] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1465.757824][T17146] team0: Port device team_slave_0 added [ 1465.769772][ T35] usb 3-1: device descriptor read/8, error -71 [ 1465.808067][T17146] team0: Port device team_slave_1 added [ 1466.028515][ T35] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1466.078866][ T35] usb 3-1: device descriptor read/8, error -71 [ 1466.147756][T17146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.147775][T17146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.147803][T17146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.193611][ T35] usb usb3-port1: unable to enumerate USB device [ 1466.356067][T13689] Bluetooth: hci5: command 0x0406 tx timeout [ 1466.575551][T17146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1466.575565][T17146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.575580][T17146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1466.920510][ T1844] bridge_slave_1: left allmulticast mode [ 1466.920535][ T1844] bridge_slave_1: left promiscuous mode [ 1466.920694][ T1844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.105080][ T1844] bridge_slave_0: left allmulticast mode [ 1467.105111][ T1844] bridge_slave_0: left promiscuous mode [ 1467.105261][ T1844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.318422][T12869] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1468.508527][T12869] usb 3-1: Using ep0 maxpacket: 32 [ 1468.509328][T12869] usb 3-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1468.510443][T12869] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1468.510469][T12869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.510503][T12869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1468.516840][T12869] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1468.516866][T12869] usb 3-1: Product: syz [ 1468.516881][T12869] usb 3-1: Manufacturer: syz [ 1468.516895][T12869] usb 3-1: SerialNumber: syz [ 1468.647780][T12869] usb 3-1: config 0 descriptor?? [ 1468.718456][T12869] ldusb 3-1:0.0: Interrupt in endpoint not found [ 1468.944862][ T6100] usb 3-1: USB disconnect, device number 35 [ 1469.149843][T12869] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1469.361938][T12869] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 1469.366587][T12869] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1469.366683][T12869] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1469.366704][T12869] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1469.366745][T12869] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1469.366759][T12869] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1469.435010][T12869] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1469.435029][T12869] usb 8-1: Product: syz [ 1469.435037][T12869] usb 8-1: Manufacturer: syz [ 1469.487771][T12869] cdc_wdm 8-1:1.0: skipping garbage [ 1469.487786][T12869] cdc_wdm 8-1:1.0: skipping garbage [ 1469.519056][T12869] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1469.519079][T12869] cdc_wdm 8-1:1.0: Unknown control protocol [ 1470.390602][ T1844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1470.471418][ T1844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1470.531758][ T1844] bond0 (unregistering): Released all slaves [ 1470.774837][T17304] netlink: 'syz.6.2380': attribute type 12 has an invalid length. [ 1470.890546][T17146] hsr_slave_0: entered promiscuous mode [ 1470.898935][T17146] hsr_slave_1: entered promiscuous mode [ 1470.899871][T17146] debugfs: 'hsr0' already exists in 'hsr' [ 1470.899895][T17146] Cannot create hsr debugfs directory [ 1471.280595][ T35] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1471.488261][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 1471.489342][ T35] usb 7-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1471.490825][ T35] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.490839][ T35] usb 7-1: config 0 has no interfaces? [ 1471.490856][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.568829][ T35] usb 7-1: config 0 descriptor?? [ 1472.015312][ T35] usb 8-1: USB disconnect, device number 2 [ 1473.288278][ T35] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1473.452671][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 1473.464298][ T35] usb 8-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1473.467534][ T35] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 1473.467549][ T35] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.467569][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1473.513600][ T35] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1473.513628][ T35] usb 8-1: Product: syz [ 1473.513642][ T35] usb 8-1: Manufacturer: syz [ 1473.513656][ T35] usb 8-1: SerialNumber: syz [ 1473.524062][ T35] usb 8-1: config 0 descriptor?? [ 1473.576671][ T35] ldusb 8-1:0.0: Interrupt in endpoint not found [ 1473.758318][ T6100] usb 8-1: USB disconnect, device number 3 [ 1474.173549][T10219] usb 7-1: USB disconnect, device number 24 [ 1475.755098][T17380] netlink: 'syz.1.2396': attribute type 12 has an invalid length. [ 1476.061177][ T1844] hsr_slave_0: left promiscuous mode [ 1476.109600][ T1844] hsr_slave_1: left promiscuous mode [ 1476.113570][ T1844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1476.113591][ T1844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1476.161545][ T1844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1476.161584][ T1844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1476.409818][ T6100] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1476.505437][ T1844] veth1_macvtap: left promiscuous mode [ 1476.505519][ T1844] veth0_macvtap: left promiscuous mode [ 1476.505674][ T1844] veth1_vlan: left promiscuous mode [ 1476.505777][ T1844] veth0_vlan: left promiscuous mode [ 1476.609053][ T6100] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 1476.610119][ T6100] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1476.610144][ T6100] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1476.610155][ T6100] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1476.610182][ T6100] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1476.610196][ T6100] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1476.612281][ T6100] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1476.612296][ T6100] usb 2-1: Product: syz [ 1476.612304][ T6100] usb 2-1: Manufacturer: syz [ 1476.704932][ T6100] cdc_wdm 2-1:1.0: skipping garbage [ 1476.704954][ T6100] cdc_wdm 2-1:1.0: skipping garbage [ 1476.748597][ T6100] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1476.748622][ T6100] cdc_wdm 2-1:1.0: Unknown control protocol [ 1478.788317][ T6100] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1478.938279][ T6100] usb 7-1: Using ep0 maxpacket: 16 [ 1478.939794][ T6100] usb 7-1: New USB device found: idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1478.944790][ T6100] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1478.944806][ T6100] usb 7-1: Product: syz [ 1478.944814][ T6100] usb 7-1: Manufacturer: syz [ 1478.944821][ T6100] usb 7-1: SerialNumber: syz [ 1479.000061][ T1844] team0 (unregistering): Port device team_slave_1 removed [ 1479.018969][ T6100] usb 7-1: config 0 descriptor?? [ 1479.081034][ T1844] team0 (unregistering): Port device team_slave_0 removed [ 1479.290103][ T5913] usb 2-1: USB disconnect, device number 44 [ 1480.901848][ T9] usb 7-1: USB disconnect, device number 25 [ 1481.050904][ T5793] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1481.199155][ T5793] usb 8-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 1481.202406][ T5793] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.202424][ T5793] usb 8-1: Product: syz [ 1481.202432][ T5793] usb 8-1: Manufacturer: syz [ 1481.202439][ T5793] usb 8-1: SerialNumber: syz [ 1481.282533][ T9] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1482.351377][ T9] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1482.411496][ T9] ath9k_htc: Failed to initialize the device [ 1482.532068][ T9] usb 8-1: ath9k_htc: USB layer deinitialized [ 1483.029275][ T5793] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1483.178329][ T5793] usb 2-1: Using ep0 maxpacket: 32 [ 1483.179221][ T5793] usb 2-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1483.203314][ T5793] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1483.203342][ T5793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.203433][ T5793] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1483.203471][ T5793] usb 2-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 1483.203496][ T5793] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1483.215894][ T5793] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1483.215923][ T5793] usb 2-1: Product: syz [ 1483.215991][ T5793] usb 2-1: Manufacturer: syz [ 1483.216006][ T5793] usb 2-1: SerialNumber: syz [ 1483.256516][T17446] netlink: 'syz.2.2408': attribute type 12 has an invalid length. [ 1483.336455][ T5793] usb 2-1: config 0 descriptor?? [ 1483.347947][ T5793] ldusb 2-1:0.0: Interrupt in endpoint not found [ 1483.545690][ T6100] usb 2-1: USB disconnect, device number 45 [ 1484.173260][T12869] usb 8-1: USB disconnect, device number 4 [ 1484.768301][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.768391][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.439916][ T5913] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1485.543909][T17483] trusted_key: encrypted_key: insufficient parameters specified [ 1485.609857][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 1485.610567][ T5913] usb 2-1: New USB device found: idVendor=05ac, idProduct=0230, bcdDevice=0.40 [ 1485.611459][ T5913] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.611488][ T5913] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1485.613841][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.613856][ T5913] usb 2-1: Product: syz [ 1485.613864][ T5913] usb 2-1: Manufacturer: syz [ 1485.613871][ T5913] usb 2-1: SerialNumber: syz [ 1486.452240][ T5913] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input21 [ 1486.492420][ T4990] bcm5974 2-1:1.0: could not read from device [ 1486.571374][ T4990] bcm5974 2-1:1.0: could not read from device [ 1486.576028][ T5913] usb 2-1: USB disconnect, device number 46 [ 1487.248044][T17519] usb usb1: usbfs: process 17519 (syz.2.2422) did not claim interface 1 before use [ 1487.258353][ T1838] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.258407][ T1838] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.258441][ T1838] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.258475][ T1838] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.329949][ T30] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1487.488336][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 1487.489181][ T30] usb 2-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1487.517318][ T30] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1487.517336][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.517356][ T30] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1487.517377][ T30] usb 2-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 1487.517391][ T30] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1487.589769][T17146] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1487.600628][ T30] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1487.600656][ T30] usb 2-1: Product: syz [ 1487.600670][ T30] usb 2-1: Manufacturer: syz [ 1487.600684][ T30] usb 2-1: SerialNumber: syz [ 1487.631706][ T30] usb 2-1: config 0 descriptor?? [ 1487.645562][ T30] ldusb 2-1:0.0: Interrupt in endpoint not found [ 1487.680266][T17146] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1487.685271][T17146] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1487.796115][T17146] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1487.800181][T17146] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1487.843318][ T30] usb 2-1: USB disconnect, device number 47 [ 1487.937593][T17146] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1487.952503][T17146] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1487.995057][T17146] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1488.183491][T17146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1488.235286][T17146] 8021q: adding VLAN 0 to HW filter on device team0 [ 1488.255855][ T1858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.255975][ T1858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1488.275522][ T1858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.275649][ T1858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1488.667283][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1488.747502][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1489.826993][T17146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1489.990058][ T30] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1490.083251][T17146] veth0_vlan: entered promiscuous mode [ 1490.148356][ T30] usb 8-1: Using ep0 maxpacket: 32 [ 1490.149193][ T30] usb 8-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1490.151498][ T30] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 1490.151523][ T30] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.151557][ T30] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1490.151596][ T30] usb 8-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 1490.151623][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1490.155897][ T30] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1490.155924][ T30] usb 8-1: Product: syz [ 1490.155939][ T30] usb 8-1: Manufacturer: syz [ 1490.155953][ T30] usb 8-1: SerialNumber: syz [ 1490.183302][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 1490.183319][ T36] audit: type=1326 audit(1793195873.776:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17594 comm="syz.6.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9bcaf559 code=0x7ffc0000 [ 1490.183360][ T36] audit: type=1326 audit(1793195873.786:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17594 comm="syz.6.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9bcaf559 code=0x7ffc0000 [ 1490.185885][ T36] audit: type=1326 audit(1793195873.786:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17594 comm="syz.6.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9bcaf559 code=0x7ffc0000 [ 1490.189647][ T36] audit: type=1326 audit(1793195873.786:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17594 comm="syz.6.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9bcaf559 code=0x7ffc0000 [ 1490.205775][T17146] veth1_vlan: entered promiscuous mode [ 1490.240688][ T36] audit: type=1326 audit(1793195873.796:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17594 comm="syz.6.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce9bcaf559 code=0x7ffc0000 [ 1490.243325][ T36] audit: type=1326 audit(1793195873.846:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17594 comm="syz.6.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9bcaf559 code=0x7ffc0000 [ 1490.246496][ T36] audit: type=1326 audit(1793195873.846:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17594 comm="syz.6.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9bcaf559 code=0x7ffc0000 [ 1490.247818][ T36] audit: type=1326 audit(1793195873.846:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17594 comm="syz.6.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9bcaf559 code=0x7ffc0000 [ 1490.247862][ T36] audit: type=1326 audit(1793195873.846:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17594 comm="syz.6.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fce9bcaf559 code=0x7ffc0000 [ 1490.274299][ T36] audit: type=1326 audit(1793195873.856:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17594 comm="syz.6.2446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9bcaf559 code=0x7ffc0000 [ 1490.526307][ T30] usb 8-1: config 0 descriptor?? [ 1490.536895][ T30] ldusb 8-1:0.0: Interrupt in endpoint not found [ 1490.573848][T17146] veth0_macvtap: entered promiscuous mode [ 1490.629052][T17146] veth1_macvtap: entered promiscuous mode [ 1490.682241][T17146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1490.718953][T17146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1490.746377][ T1854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.746546][ T1854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.746581][ T1854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.750865][ T1854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.837187][T16339] usb 8-1: USB disconnect, device number 5 [ 1491.948075][ T1824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.948090][ T1824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1492.280588][ T1844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1492.280606][ T1844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1493.338329][ T30] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1493.438324][T17618] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1493.470053][ T30] usb 1-1: device descriptor read/64, error -71 [ 1493.589098][T17618] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 1493.590960][T17618] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.590985][T17618] usb 8-1: config 0 has no interfaces? [ 1493.596908][T17618] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1493.596934][T17618] usb 8-1: Product: syz [ 1493.596949][T17618] usb 8-1: Manufacturer: syz [ 1493.621747][T17618] usb 8-1: config 0 descriptor?? [ 1493.718892][ T30] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1493.848269][ T30] usb 1-1: device descriptor read/64, error -71 [ 1493.883381][ T5913] usb 8-1: USB disconnect, device number 6 [ 1493.960629][ T30] usb usb1-port1: attempt power cycle [ 1494.123428][T13689] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1494.285789][T13689] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1494.315742][T13689] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1494.350556][T13689] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1494.352971][T13689] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1494.378978][ T30] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1494.432534][ T30] usb 1-1: device descriptor read/8, error -71 [ 1494.668335][ T30] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1494.690531][ T30] usb 1-1: device descriptor read/8, error -71 [ 1494.798858][ T30] usb usb1-port1: unable to enumerate USB device [ 1494.948633][ T5913] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1495.108307][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 1495.110420][ T5913] usb 3-1: New USB device found: idVendor=05ac, idProduct=0230, bcdDevice=0.40 [ 1495.112024][ T5913] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.112073][ T5913] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1495.116201][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.116238][ T5913] usb 3-1: Product: syz [ 1495.116252][ T5913] usb 3-1: Manufacturer: syz [ 1495.116266][ T5913] usb 3-1: SerialNumber: syz [ 1495.453119][T14357] syz_tun (unregistering): left allmulticast mode [ 1495.748818][ T5913] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input22 [ 1495.771122][ T4990] bcm5974 3-1:1.0: could not read from device [ 1495.772057][ T36] kauditd_printk_skb: 126 callbacks suppressed [ 1495.772071][ T36] audit: type=1326 audit(1793195879.376:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17696 comm="syz.6.2477" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9bcaf559 code=0x7ffc0000 [ 1495.775587][ T36] audit: type=1326 audit(1793195879.376:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17696 comm="syz.6.2477" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9bcaf559 code=0x7ffc0000 [ 1495.781934][ T36] audit: type=1326 audit(1793195879.376:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17696 comm="syz.6.2477" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fce9bcaf559 code=0x7ffc0000 [ 1495.781979][ T36] audit: type=1326 audit(1793195879.386:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17696 comm="syz.6.2477" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9bcaf559 code=0x7ffc0000 [ 1495.782017][ T36] audit: type=1326 audit(1793195879.386:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17696 comm="syz.6.2477" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9bcaf559 code=0x7ffc0000 [ 1495.951296][ T5913] usb 3-1: USB disconnect, device number 36 [ 1496.147445][T17661] rxe_eth0 speed is unknown, defaulting to 1000 [ 1496.548030][T17715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2485'. [ 1496.588335][ T5647] Bluetooth: hci0: command tx timeout [ 1496.868310][T17618] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 1497.025891][T17618] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1497.027359][T17618] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1497.027385][T17618] usb 3-1: config 0 has no interface number 0 [ 1497.027428][T17618] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1497.027457][T17618] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1497.027499][T17618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.110828][T17618] usb 3-1: config 0 descriptor?? [ 1497.112765][T17715] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1497.131143][T17618] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1497.317750][T17738] loop5: detected capacity change from 0 to 7 [ 1497.612203][T17618] usb 3-1: USB disconnect, device number 37 [ 1497.952047][T17661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.952958][T17661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.953155][T17661] bridge_slave_0: entered allmulticast mode [ 1497.957268][T17661] bridge_slave_0: entered promiscuous mode [ 1497.998568][T17661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.998771][T17661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.998943][T17661] bridge_slave_1: entered allmulticast mode [ 1498.004913][T17661] bridge_slave_1: entered promiscuous mode [ 1498.018357][ T35] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1498.163871][T17661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1498.179326][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 1498.180126][ T35] usb 8-1: New USB device found: idVendor=05ac, idProduct=0230, bcdDevice=0.40 [ 1498.182035][ T35] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.182078][ T35] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1498.185740][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.185764][ T35] usb 8-1: Product: syz [ 1498.185778][ T35] usb 8-1: Manufacturer: syz [ 1498.185794][ T35] usb 8-1: SerialNumber: syz [ 1498.193633][T17661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1498.288822][T17738] Dev loop5: unable to read RDB block 7 [ 1498.289256][T17738] loop5: unable to read partition table [ 1498.289920][T17738] loop5: partition table beyond EOD, truncated [ 1498.289954][T17738] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1498.424194][T17661] team0: Port device team_slave_0 added [ 1498.446123][T17661] team0: Port device team_slave_1 added [ 1498.489314][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 1498.489515][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1498.573810][T17661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1498.573828][T17661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.573905][T17661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1498.576239][T17661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1498.576248][T17661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.576262][T17661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1498.670382][ T5647] Bluetooth: hci0: command tx timeout [ 1498.813735][T17661] hsr_slave_0: entered promiscuous mode [ 1498.830907][T17661] hsr_slave_1: entered promiscuous mode [ 1499.033395][ T35] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input23 [ 1499.053896][ T4990] bcm5974 8-1:1.0: could not read from device [ 1499.106753][ T35] usb 8-1: USB disconnect, device number 7 [ 1500.749711][ T5647] Bluetooth: hci0: command tx timeout [ 1500.868328][ T30] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1501.029891][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 1501.030724][ T30] usb 3-1: New USB device found: idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1501.059998][ T30] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1501.060026][ T30] usb 3-1: Product: syz [ 1501.060041][ T30] usb 3-1: Manufacturer: syz [ 1501.060055][ T30] usb 3-1: SerialNumber: syz [ 1501.090916][ T30] usb 3-1: config 0 descriptor?? [ 1502.354566][T17818] Invalid logical block size (8192) [ 1502.673571][T17661] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.828320][ T5647] Bluetooth: hci0: command tx timeout [ 1503.409293][ T5913] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1503.598249][ T5913] usb 8-1: Using ep0 maxpacket: 8 [ 1503.601782][ T5913] usb 8-1: New USB device found: idVendor=05ac, idProduct=0230, bcdDevice=0.40 [ 1503.603691][ T5913] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.603738][ T5913] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1503.608041][ T5913] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.608067][ T5913] usb 8-1: Product: syz [ 1503.608081][ T5913] usb 8-1: Manufacturer: syz [ 1503.608094][ T5913] usb 8-1: SerialNumber: syz [ 1503.835019][ T35] usb 3-1: USB disconnect, device number 38 [ 1504.169249][T17661] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.185456][ T5913] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input24 [ 1504.212974][ T4990] bcm5974 8-1:1.0: could not read from device [ 1504.243797][ T5913] usb 8-1: USB disconnect, device number 8 [ 1504.848407][ T6100] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1504.884197][T17661] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.008918][ T6100] usb 1-1: Using ep0 maxpacket: 32 [ 1505.013017][ T6100] usb 1-1: New USB device found: idVendor=05ac, idProduct=020f, bcdDevice=0.22 [ 1505.015795][ T6100] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.015840][ T6100] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1505.054245][ T6100] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1505.054274][ T6100] usb 1-1: Product: syz [ 1505.054288][ T6100] usb 1-1: Manufacturer: syz [ 1505.054302][ T6100] usb 1-1: SerialNumber: syz [ 1505.114549][ T6100] appletouch 1-1:1.0: Could not find int-in endpoint [ 1505.114571][ T6100] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 1505.121592][ T6100] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 1505.333009][ T30] usb 1-1: USB disconnect, device number 49 [ 1505.668390][ T5913] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1505.819961][ T5913] usb 8-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1505.822483][ T5913] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1505.822509][ T5913] usb 8-1: config 0 has no interface number 0 [ 1505.825709][ T5913] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.825734][ T5913] usb 8-1: Product: syz [ 1505.825745][ T5913] usb 8-1: Manufacturer: syz [ 1505.825752][ T5913] usb 8-1: SerialNumber: syz [ 1505.877028][ T5913] usb 8-1: config 0 descriptor?? [ 1505.905066][ T5913] usb 8-1: selecting invalid altsetting 1 [ 1505.905232][ T5913] dvb_ttusb_budget: ttusb_init_controller: error [ 1505.905246][ T5913] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1506.023673][ T5913] DVB: Unable to find symbol stv0299_attach() [ 1506.110073][ T5913] DVB: Unable to find symbol tda8083_attach() [ 1506.110091][ T5913] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1506.190314][ T30] usb 8-1: USB disconnect, device number 9 [ 1506.310639][T17661] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.341113][ T6100] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1508.498231][ T6100] usb 1-1: Using ep0 maxpacket: 32 [ 1508.499192][ T6100] usb 1-1: New USB device found: idVendor=05ac, idProduct=020f, bcdDevice=0.22 [ 1508.501223][ T6100] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.501274][ T6100] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1508.525653][ T6100] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1508.525680][ T6100] usb 1-1: Product: syz [ 1508.525695][ T6100] usb 1-1: Manufacturer: syz [ 1508.525709][ T6100] usb 1-1: SerialNumber: syz [ 1508.575548][ T6100] appletouch 1-1:1.0: Could not find int-in endpoint [ 1508.575584][ T6100] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 1508.584934][ T6100] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 1508.625445][T17661] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1508.665410][T17661] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1508.668037][T17661] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1508.698326][T17618] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1508.728373][T17661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1508.729387][T17661] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1508.780803][ T5913] usb 1-1: USB disconnect, device number 50 [ 1508.820238][T17661] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1508.827102][T17661] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1508.851609][T17618] usb 3-1: New USB device found: idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1508.865144][T17618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.865160][T17618] usb 3-1: Product: syz [ 1508.865168][T17618] usb 3-1: Manufacturer: syz [ 1508.865176][T17618] usb 3-1: SerialNumber: syz [ 1508.897579][T17618] usb 3-1: config 0 descriptor?? [ 1508.917736][T17661] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1509.080793][ T35] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1509.103906][T17618] usb 3-1: ignoring: probably an ADSL modem [ 1509.175683][T17661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.230052][T17661] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.245882][ T35] usb 8-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1509.262519][ T35] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1509.262545][ T35] usb 8-1: config 0 has no interface number 0 [ 1509.265251][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.265275][ T35] usb 8-1: Product: syz [ 1509.265290][ T35] usb 8-1: Manufacturer: syz [ 1509.265303][ T35] usb 8-1: SerialNumber: syz [ 1509.276314][ T1844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.276434][ T1844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.278722][ T35] usb 8-1: config 0 descriptor?? [ 1509.350000][ T1824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.350131][ T1824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.370143][ T35] usb 8-1: selecting invalid altsetting 1 [ 1509.370310][ T35] dvb_ttusb_budget: ttusb_init_controller: error [ 1509.370325][ T35] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1509.555707][ T35] DVB: Unable to find symbol stv0299_attach() [ 1509.645471][T17618] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1509.652677][ T35] DVB: Unable to find symbol tda8083_attach() [ 1509.652692][ T35] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1509.667441][ T35] usb 8-1: USB disconnect, device number 10 [ 1509.707037][T17618] usb 3-1: USB disconnect, device number 39 [ 1510.629580][ T35] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1510.629773][T12869] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1510.818865][T12869] usb 8-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 1510.819902][T12869] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.819935][T12869] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.839328][ T35] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 1510.845937][ T35] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.845991][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1510.846013][ T35] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1510.846037][ T35] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1510.846078][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.941267][T12869] as10x_usb: device has been detected [ 1510.941852][T12869] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1511.118741][T12869] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1511.437758][T17963] INFO: trying to register non-static key. [ 1511.443583][T17963] The code is fine but needs lockdep annotation, or maybe [ 1511.450682][T17963] you didn't initialize this object before use? [ 1511.456903][T17963] turning off the locking correctness validator. [ 1511.463220][T17963] CPU: 1 UID: 0 PID: 17963 Comm: syz.7.2549 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 1511.474754][T17963] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1511.480566][T17963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1511.490612][T17963] Call Trace: [ 1511.493883][T17963] [ 1511.496805][T17963] dump_stack_lvl+0xe8/0x150 [ 1511.501392][T17963] assign_lock_key+0x133/0x150 [ 1511.506165][T17963] register_lock_class+0xcc/0x2e0 [ 1511.511182][T17963] __lock_acquire+0x10c/0x2de0 [ 1511.515940][T17963] ? __lock_acquire+0x747/0x2de0 [ 1511.520870][T17963] ? __pfx___schedule+0x10/0x10 [ 1511.525799][T17963] lock_acquire+0x115/0x350 [ 1511.530296][T17963] ? as102_stream_ctrl+0x27/0xc0 [ 1511.535301][T17963] ? as102_stream_ctrl+0x27/0xc0 [ 1511.540240][T17963] ? as102_stream_ctrl+0x27/0xc0 [ 1511.545168][T17963] mutex_lock_interruptible_nested+0x55/0x1c0 [ 1511.551301][T17963] ? as102_stream_ctrl+0x27/0xc0 [ 1511.556236][T17963] as102_stream_ctrl+0x27/0xc0 [ 1511.560986][T17963] __dvb_frontend_open+0x2ef/0xcb0 [ 1511.566158][T17963] ? dvb_frontend_open+0x1d4/0x880 [ 1511.571256][T17963] ? mutex_lock_nested+0x14d/0x1d0 [ 1511.576356][T17963] ? __pfx_dvb_frontend_open+0x10/0x10 [ 1511.581820][T17963] dvb_device_open+0x258/0x350 [ 1511.586662][T17963] chrdev_open+0x4dc/0x600 [ 1511.591066][T17963] ? __pfx_chrdev_open+0x10/0x10 [ 1511.595994][T17963] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1511.602316][T17963] ? __pfx_chrdev_open+0x10/0x10 [ 1511.607265][T17963] do_dentry_open+0x841/0x1410 [ 1511.612033][T17963] vfs_open_consume+0x4a/0x360 [ 1511.616791][T17963] ? path_openat+0x16e6/0x2100 [ 1511.621538][T17963] path_openat+0x1701/0x2100 [ 1511.626128][T17963] do_file_open+0x23e/0x4a0 [ 1511.630619][T17963] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1511.636419][T17963] ? __pfx_do_file_open+0x10/0x10 [ 1511.641439][T17963] ? alloc_fd+0x6b2/0x760 [ 1511.645757][T17963] do_sys_openat2+0x115/0x200 [ 1511.650421][T17963] ? __pfx_do_sys_openat2+0x10/0x10 [ 1511.655639][T17963] __x64_sys_openat+0x138/0x170 [ 1511.660483][T17963] do_syscall_64+0x166/0x520 [ 1511.665059][T17963] ? trace_irq_disable+0x3b/0x140 [ 1511.670070][T17963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.676122][T17963] ? clear_bhb_loop+0x70/0xc0 [ 1511.680786][T17963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.686695][T17963] RIP: 0033:0x7f747575fd8e [ 1511.691125][T17963] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1511.710722][T17963] RSP: 002b:00007f74739d4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1511.719134][T17963] RAX: ffffffffffffffda RBX: 00007f74739d56c0 RCX: 00007f747575fd8e [ 1511.727098][T17963] RDX: 0000000000000802 RSI: 00007f74739d4c00 RDI: ffffffffffffff9c [ 1511.735066][T17963] RBP: 00007f74739d4c00 R08: 0000000000000000 R09: 0000000000000000 [ 1511.743035][T17963] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1511.750995][T17963] R13: 00007f7475a26128 R14: 00007f7475a26090 R15: 00007ffd0933e598 [ 1511.758962][T17963] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1511.783298][T12869] as10x_usb: error during firmware upload part1 [ 1511.783515][T12869] Registered device Abilis Systems DVB-Titan [ 1512.038995][ T58] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.040036][ T58] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.041038][ T58] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.041468][ T58] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1513.143859][ T35] gud 7-1:1.0: Failed to add properties (error=-71) [ 1513.143894][ T35] gud 7-1:1.0: probe with driver gud failed with error -71 [ 1513.194655][ T35] usb 7-1: USB disconnect, device number 26 [ 1514.918351][ T1854] bridge_slave_1: left allmulticast mode [ 1514.918378][ T1854] bridge_slave_1: left promiscuous mode [ 1514.918569][ T1854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.098803][ T1854] bridge_slave_0: left allmulticast mode [ 1515.098832][ T1854] bridge_slave_0: left promiscuous mode [ 1515.098960][ T1854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.789547][ T1854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1515.868751][ T1854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1515.889554][ T1854] bond0 (unregistering): Released all slaves [ 1515.929400][ T5300] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1516.388260][ T1854] hsr_slave_0: left promiscuous mode [ 1516.428983][ T1854] hsr_slave_1: left promiscuous mode [ 1516.429621][ T1854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1516.451156][ T1854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1516.808671][ T1854] team0 (unregistering): Port device team_slave_1 removed [ 1516.849116][ T1854] team0 (unregistering): Port device team_slave_0 removed [ 1516.960459][ T5300] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1517.265876][ T5300] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1517.709288][ T5300] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1517.759993][T15112] usb 8-1: USB disconnect, device number 11 [ 1517.769772][T15112] Unregistered device Abilis Systems DVB-Titan [ 1517.774708][T15112] as10x_usb: device has been disconnected [ 1518.129118][ T1854] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.389422][ T1854] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.609189][ T1854] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.829486][ T1854] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.178449][ T1854] bridge_slave_1: left allmulticast mode [ 1519.178477][ T1854] bridge_slave_1: left promiscuous mode [ 1519.178649][ T1854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1519.338596][ T1854] bridge_slave_0: left allmulticast mode [ 1519.338616][ T1854] bridge_slave_0: left promiscuous mode [ 1519.338714][ T1854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.040576][ T1854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1520.118565][ T1854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1520.159172][ T1854] bond0 (unregistering): Released all slaves [ 1520.199522][ T5300] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1520.451561][ T5300] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1520.799676][ T5300] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1521.209935][ T5300] 8021q: adding VLAN 0 to HW filter on device eth20