last executing test programs: 8m36.700906818s ago: executing program 4 (id=3767): socketpair(0x27, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$cec(0x0, 0x0, 0x80200) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m36.452803413s ago: executing program 4 (id=3769): bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x400000000000000}, 0x0) 8m34.033033811s ago: executing program 4 (id=3774): syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x2) r0 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) 8m33.825418771s ago: executing program 4 (id=3776): creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x7, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000061401002bbd708000ae47d1a50700000008000100010000000800010002000004080001"], 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r3, 0x0, 0x31, 0x0, &(0x7f0000000100)) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) 8m31.777516559s ago: executing program 4 (id=3779): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 8m31.209449462s ago: executing program 4 (id=3781): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_FLOW={0x8, 0xb, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x64041091}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000500)={0xfff, 0x8000, {0xffffffffffffffff}, {0xee01}, 0x5, 0xa}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x10, 0x70bd2d, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff, 0x308}}, 0x20}, 0x1, 0x0, 0x0, 0x20081}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="801400000421000041fda70e0000003b009f460372fae0cae5f66e14a3d6302747888aa1930451d348c184c110bf01c2d4ab8b2dbb1593b08e3d9934f8b06923c7501ecec693f3284209caac12"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 8m15.357139077s ago: executing program 32 (id=3781): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_FLOW={0x8, 0xb, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x64041091}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000500)={0xfff, 0x8000, {0xffffffffffffffff}, {0xee01}, 0x5, 0xa}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x10, 0x70bd2d, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff, 0x308}}, 0x20}, 0x1, 0x0, 0x0, 0x20081}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="801400000421000041fda70e0000003b009f460372fae0cae5f66e14a3d6302747888aa1930451d348c184c110bf01c2d4ab8b2dbb1593b08e3d9934f8b06923c7501ecec693f3284209caac12"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 16.249861306s ago: executing program 0 (id=5676): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000300)='auxv\x00') 14.857138614s ago: executing program 3 (id=5681): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f00000004c0)={0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7020000040000008500000086000000bf91000000000000b7020000010000008500000085000000b70000000000008095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r4) sendmsg$NET_DM_CMD_START(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r5, 0x1}, 0x14}}, 0x0) 14.74019978s ago: executing program 0 (id=5682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x8080000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x2, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x2}, {0x1000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0xdddd0000, 0x7}, 0x80000031, 0x0, 0x3000, 0x42025, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.99099363s ago: executing program 0 (id=5687): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x1a, "cfeacfbd6c9555bb04b2f81c4d07"}}]}, 0x30}}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r2, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10.944696221s ago: executing program 1 (id=5693): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 10.386147502s ago: executing program 3 (id=5696): mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) modify_ldt$read(0x0, &(0x7f0000000200)=""/136, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x85, "00000000000000000000ffff00"}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xa, 0x80, 0x1, 0x1, 0x8, "c098e7b0bd21430de428cf78b7adfdec60be6a", 0x1, 0x5}) syz_emit_ethernet(0x36, 0x0, 0x0) syz_open_pts(r0, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x28, 0x0, 0x0) 9.795518059s ago: executing program 1 (id=5699): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9.704162087s ago: executing program 0 (id=5700): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766c616e310000000000000000000000bfdb60c594546c18e604a6739d4acce8854f579770a4d89d81c4645cdde5b7bedcb85a7a629182bb31cbe7ac1adbd92f3a1eadf5a9702a96f7c41212f64802f41ce190e624cd68c53f7292307f0d8e3d98f880fdfaa8df92d67030c7ff61d0262ae765c2386918945330eec547780e69481f55086dc3ef703b43ad9a7e60e74e3c138558f7b93d2f7569c0906ce495ce256879d8ccaaf37acc62e4f94c2dae9b"], 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') syz_fuse_handle_req(r5, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06464ce, &(0x7f0000000340)={r6, 0x4, 0xac, 0x3ff, 0x1, [], [0x101, 0x5, 0x0, 0x5], [0x3, 0xffffff83, 0x7, 0x1], [0x3b, 0x83, 0x2, 0x2]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 8.459748424s ago: executing program 1 (id=5701): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20008000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r0, @ANYBLOB="cd3e00000000020000000100000014000500fc02"], 0x11c}}, 0x8800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0a00ff00000000501079000000000095"], 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x40) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x480d0}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 8.399183662s ago: executing program 3 (id=5702): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) socket$kcm(0x21, 0x2, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xff, 0x9, 0xfffffffffffffffc, 0xf, 0x80000006, 0x800000000}, 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)=0x1) 7.804209108s ago: executing program 0 (id=5703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x280) 7.762936229s ago: executing program 1 (id=5704): bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) socket(0x1d, 0x2, 0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000200)}], 0x1) io_uring_setup(0x22195, &(0x7f00000009c0)={0x0, 0x7897, 0x10, 0x1, 0x232}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.580515512s ago: executing program 2 (id=5706): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f00000004c0)={0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000040000008500000086000000bf91000000000000b7020000010000008500000085000000b70000000000008095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r4) sendmsg$NET_DM_CMD_START(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r5, 0x1}, 0x14}}, 0x0) 6.778525523s ago: executing program 3 (id=5707): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001040)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) rt_sigpending(0x0, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r6, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x3c) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000010) sendmmsg$inet(r10, &(0x7f0000005200)=[{{0x0, 0x20, &(0x7f0000000100)=[{&(0x7f0000000440)="2d967a2c12731371fdfa1aead2f1bd018586e001ed6c49735cc6f95b654f923053e012908d8738f17cff91bab0e55788c0e2a79147aa693af39e93240f0d0744276e609e9775384f08ed2a856a3d41587f6744e1336068ffe2c5417cf7f2363b0884ddf1790cbe4dec8fc12cdd6044598a87f96504cbf370a5f89997e322641d9eb75210182d91cd15", 0x89}], 0x1}}], 0x1, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x1c, r9, 0x1, 0x72bd28, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 6.628170633s ago: executing program 1 (id=5708): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@broadcast, @random="b5ff3142964b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x504, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @empty, @private2}}}}}}}, 0x0) 5.562283055s ago: executing program 2 (id=5711): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.626815159s ago: executing program 2 (id=5712): mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) modify_ldt$read(0x0, &(0x7f0000000200)=""/136, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x85, "00000000000000000000ffff00"}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xa, 0x80, 0x1, 0x1, 0x8, "c098e7b0bd21430de428cf78b7adfdec60be6a", 0x1, 0x5}) syz_emit_ethernet(0x36, 0x0, 0x0) syz_open_pts(r0, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x28, 0x0, 0x0) 4.328355438s ago: executing program 5 (id=5714): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 3.92765286s ago: executing program 5 (id=5715): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20008000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r0, @ANYBLOB="cd3e00000000020000000100000014000500fc02"], 0x11c}}, 0x8800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0a00ff00000000501079000000000095"], 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x40) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x480d0}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 3.680554807s ago: executing program 2 (id=5716): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mkdir(0x0, 0x4) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.010463124s ago: executing program 0 (id=5717): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) syz_emit_vhci(0x0, 0xd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) syz_open_dev$video(&(0x7f0000000380), 0xfc, 0x26444) 2.943562254s ago: executing program 5 (id=5718): bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) socket(0x1d, 0x2, 0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000200)}], 0x1) io_uring_setup(0x22195, &(0x7f00000009c0)={0x0, 0x7897, 0x10, 0x1, 0x232}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.900972834s ago: executing program 1 (id=5719): mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x1) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) unlink(&(0x7f0000000100)='./file0\x00') r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) syz_io_uring_setup(0x6a95, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) 2.876090574s ago: executing program 3 (id=5720): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2.286000653s ago: executing program 3 (id=5721): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f00000004c0)={0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000040000008500000086000000bf91000000000000b7020000010000008500000085000000b70000000000008095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r4) sendmsg$NET_DM_CMD_START(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r5, 0x1}, 0x14}}, 0x0) 2.140321497s ago: executing program 5 (id=5722): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.219193058s ago: executing program 5 (id=5723): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x1a, "cfeacfbd6c9555bb04b2f81c4d07"}}]}, 0x30}}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r2, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.207802426s ago: executing program 2 (id=5724): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="7f0cbe9c93ba"}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 1.09660429s ago: executing program 2 (id=5725): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mkdir(0x0, 0x4) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) write$binfmt_aout(r1, 0x0, 0xffffffdb) 0s ago: executing program 5 (id=5726): mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) modify_ldt$read(0x0, &(0x7f0000000200)=""/136, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x85, "00000000000000000000ffff00"}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xa, 0x80, 0x1, 0x1, 0x8, "c098e7b0bd21430de428cf78b7adfdec60be6a", 0x1, 0x5}) syz_emit_ethernet(0x36, 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x0, 0x40000330}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, 0x0, 0x0) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x28, 0x0, 0x0) kernel console output (not intermixed with test programs): 33.150323][T18380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.223435][T18380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.692373][T11143] usb 4-1: USB disconnect, device number 14 [ 734.199315][ T3460] hsr_slave_0: left promiscuous mode [ 734.356438][ T3460] hsr_slave_1: left promiscuous mode [ 735.409523][ T3460] veth1_macvtap: left promiscuous mode [ 735.415574][ T3460] veth0_macvtap: left promiscuous mode [ 735.421146][ T3460] veth1_vlan: left promiscuous mode [ 735.426541][ T3460] veth0_vlan: left promiscuous mode [ 738.755390][ T3460] team0 (unregistering): Port device team_slave_1 removed [ 738.800315][ T3460] team0 (unregistering): Port device team_slave_0 removed [ 739.187136][T18576] bridge3: entered promiscuous mode [ 739.361081][T18579] binder: 18578:18579 ioctl 4018620d 0 returned -22 [ 739.399397][T18380] hsr_slave_0: entered promiscuous mode [ 739.416377][T18579] binder: 18578:18579 ioctl c0306201 2000000001c0 returned -14 [ 739.421672][T18380] hsr_slave_1: entered promiscuous mode [ 739.444606][T18380] debugfs: 'hsr0' already exists in 'hsr' [ 739.452126][T18380] Cannot create hsr debugfs directory [ 741.283584][ T5944] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 741.787851][ T3460] IPVS: stop unused estimator thread 0... [ 741.804905][ T5944] usb 3-1: config 0 has no interfaces? [ 741.810432][ T5944] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 742.661493][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.693139][ T5944] usb 3-1: config 0 descriptor?? [ 744.967478][ T5895] usb 3-1: USB disconnect, device number 10 [ 745.136517][T18380] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 745.176889][T18380] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 745.226445][T18380] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 745.255767][T18380] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 745.316951][T18637] binder: BINDER_SET_CONTEXT_MGR already set [ 745.322982][T18637] binder: 18635:18637 ioctl 4018620d 2000000002c0 returned -16 [ 745.578096][T18380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.609029][T18380] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.637867][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.645145][ T6267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.702445][T16463] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.709736][T16463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.785816][T11143] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 745.945961][T11143] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 745.979396][T11143] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 745.999648][T11143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 746.024508][T11143] usb 3-1: Product: syz [ 746.035742][T11143] usb 3-1: Manufacturer: syz [ 746.047793][T11143] usb 3-1: SerialNumber: syz [ 746.281678][T11143] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 746.357405][T18633] input: syz1 as /devices/virtual/input/input15 [ 746.367098][T11143] usb 3-1: USB disconnect, device number 11 [ 746.421229][T18380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.487329][T11143] usblp0: removed [ 747.144863][T18687] bridge8: entered promiscuous mode [ 747.182381][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.708866][T18380] veth0_vlan: entered promiscuous mode [ 747.760291][T18380] veth1_vlan: entered promiscuous mode [ 747.851213][T18380] veth0_macvtap: entered promiscuous mode [ 747.906625][T18380] veth1_macvtap: entered promiscuous mode [ 747.910418][T18705] binder: BINDER_SET_CONTEXT_MGR already set [ 747.928154][T18705] binder: 18704:18705 ioctl 4018620d 2000000002c0 returned -16 [ 748.006362][T18380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.042203][T18380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.094251][ T3460] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.121058][ T3460] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.154099][ T3460] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.174624][ T3460] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.511129][T16679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.566826][T16679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.690237][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.708658][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.867785][T18740] bridge5: entered promiscuous mode [ 751.036799][T18746] binder: BINDER_SET_CONTEXT_MGR already set [ 751.058850][T18746] binder: 18745:18746 ioctl 4018620d 2000000002c0 returned -16 [ 751.276221][T18755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3906'. [ 753.521548][ T30] audit: type=1326 audit(1764113882.011:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.1.3910" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f429d78f749 code=0x0 [ 755.680468][T18788] bridge9: entered promiscuous mode [ 756.230612][T18800] binder: 18799:18800 ioctl c0306201 0 returned -14 [ 756.271206][T18800] binder: 18799:18800 ioctl c0306201 2000000001c0 returned -14 [ 756.869971][T18816] fuse: Bad value for 'user_id' [ 756.880977][T18816] fuse: Bad value for 'user_id' [ 757.716340][T18822] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 757.722879][T18822] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 757.781190][T18820] bridge1: entered promiscuous mode [ 757.791233][T18822] vhci_hcd vhci_hcd.0: Device attached [ 758.025362][T18826] vhci_hcd: connection closed [ 758.026608][ T3460] vhci_hcd vhci_hcd.2: stop threads [ 758.058709][ T10] usb 38-1: SetAddress Request (7) to port 0 [ 758.081745][ T3460] vhci_hcd vhci_hcd.2: release socket [ 758.089612][ T10] usb 38-1: new SuperSpeed USB device number 7 using vhci_hcd [ 758.113100][ T3460] vhci_hcd vhci_hcd.2: disconnect device [ 758.158610][ T10] usb 38-1: enqueue for inactive port 0 [ 758.187350][T18837] binder: 18836:18837 ioctl c0306201 0 returned -14 [ 758.197312][T18837] binder: 18836:18837 ioctl c0306201 2000000001c0 returned -14 [ 758.353416][ T5880] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 758.524923][ T5880] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 758.551101][ T5880] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 758.570652][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 758.588978][ T5880] usb 1-1: Product: syz [ 758.589859][ T10] usb usb38-port1: attempt power cycle [ 758.603670][ T5880] usb 1-1: Manufacturer: syz [ 758.608327][ T5880] usb 1-1: SerialNumber: syz [ 759.179825][ T30] audit: type=1326 audit(1764113887.961:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da18f749 code=0x7ffc0000 [ 759.273579][ T10] usb usb38-port1: unable to enumerate USB device [ 759.419975][ T30] audit: type=1326 audit(1764113887.961:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da18f749 code=0x7ffc0000 [ 759.450072][ T30] audit: type=1326 audit(1764113887.961:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f08da18f749 code=0x7ffc0000 [ 759.472584][ T30] audit: type=1326 audit(1764113887.961:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da18f749 code=0x7ffc0000 [ 759.562885][ T30] audit: type=1326 audit(1764113887.961:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da18f749 code=0x7ffc0000 [ 759.621096][ T5880] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 759.679654][ T5880] usb 1-1: USB disconnect, device number 7 [ 759.697089][ T5880] usblp0: removed [ 759.730866][ T30] audit: type=1326 audit(1764113887.961:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f08da18f749 code=0x7ffc0000 [ 759.778354][T18855] fuse: Bad value for 'fd' [ 759.838202][ T30] audit: type=1326 audit(1764113887.961:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da18f749 code=0x7ffc0000 [ 759.942549][ T30] audit: type=1326 audit(1764113887.961:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da18f749 code=0x7ffc0000 [ 760.551685][ T30] audit: type=1326 audit(1764113887.961:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08da18f749 code=0x7ffc0000 [ 760.837966][ T30] audit: type=1326 audit(1764113887.961:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08da18f749 code=0x7ffc0000 [ 762.563888][T18871] bridge10: entered promiscuous mode [ 762.775903][T18885] binder: 18883:18885 ioctl c0306201 0 returned -14 [ 762.882785][T18885] binder: 18883:18885 ioctl c0306201 2000000001c0 returned -14 [ 763.000093][T18890] syzkaller0: entered promiscuous mode [ 763.064878][T18890] syzkaller0: entered allmulticast mode [ 764.975977][T18913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3949'. [ 765.070104][T18920] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 765.076642][T18920] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 765.124437][T18920] vhci_hcd vhci_hcd.0: Device attached [ 765.297695][T18921] vhci_hcd: connection closed [ 765.298598][T15653] vhci_hcd vhci_hcd.5: stop threads [ 765.318065][T15653] vhci_hcd vhci_hcd.5: release socket [ 765.334883][T15653] vhci_hcd vhci_hcd.5: disconnect device [ 765.394208][T16143] usb 44-1: enqueue for inactive port 0 [ 765.403447][T14572] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 765.892035][T14572] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 765.909536][T14572] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 765.932933][T14572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 766.871169][T16143] usb usb44-port1: attempt power cycle [ 766.976640][T14572] usb 1-1: Product: syz [ 766.980887][T14572] usb 1-1: Manufacturer: syz [ 768.100119][T14572] usb 1-1: SerialNumber: syz [ 769.031510][T14572] usb 1-1: can't set config #1, error -71 [ 769.987933][T16143] usb usb44-port1: unable to enumerate USB device [ 770.009783][T18943] bridge3: entered promiscuous mode [ 770.621685][T14572] usb 1-1: USB disconnect, device number 8 [ 770.793143][T18959] fuse: Bad value for 'fd' [ 770.804386][T18953] syzkaller0: entered promiscuous mode [ 770.809933][T18953] syzkaller0: entered allmulticast mode [ 770.954693][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 770.954709][ T30] audit: type=1326 audit(1764113899.741:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18963 comm="syz.2.3961" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f745c38f749 code=0x0 [ 771.003844][T16897] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 771.189650][T16897] usb 2-1: config 0 has no interfaces? [ 771.197241][T16897] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 771.219363][T16897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.247930][T16897] usb 2-1: config 0 descriptor?? [ 771.635167][ T5880] usb 2-1: USB disconnect, device number 6 [ 773.148755][ T3460] Bluetooth: (null): Too short H5 packet [ 773.167197][ T3460] Bluetooth: (null): Invalid header checksum [ 773.976398][T19002] bridge4: entered promiscuous mode [ 774.005735][T19008] fuse: Bad value for 'fd' [ 775.361229][T19011] fuse: Bad value for 'fd' [ 775.386059][T19011] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 775.880071][T19029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3974'. [ 775.953887][T16389] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 776.197806][T16389] usb 2-1: config 0 has no interfaces? [ 776.214870][T16389] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 776.233389][T16389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.274575][T16389] usb 2-1: config 0 descriptor?? [ 776.356556][ T30] audit: type=1326 audit(1764113905.141:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.2.3977" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f745c38f749 code=0x0 [ 776.514528][T16389] usb 2-1: USB disconnect, device number 7 [ 776.579837][T19046] bridge2: entered promiscuous mode [ 777.533652][T11143] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 777.722393][T11143] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 777.831584][T11143] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 777.910030][T11143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 777.985982][T11143] usb 4-1: Product: syz [ 778.073148][T11143] usb 4-1: Manufacturer: syz [ 778.174606][T11143] usb 4-1: SerialNumber: syz [ 778.442528][T19071] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3988'. [ 778.480010][T11143] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 778.662754][T11143] usb 4-1: USB disconnect, device number 15 [ 778.674534][T19024] udevd[19024]: setting mode of /dev/usb/lp0 to 020660 failed: No such file or directory [ 778.676285][T11143] usblp0: removed [ 778.896806][T19024] udevd[19024]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: No such file or directory [ 780.023394][T16143] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 780.818621][T16143] usb 4-1: config 0 has no interfaces? [ 781.176452][T16143] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 781.185621][T16143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.201611][T16143] usb 4-1: config 0 descriptor?? [ 781.411736][T14572] usb 4-1: USB disconnect, device number 16 [ 781.721239][T19115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4003'. [ 782.714136][T19132] block nbd2: not configured, cannot reconfigure [ 783.513818][T16143] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 783.555560][T19158] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 783.606533][T19158] macsec1: entered promiscuous mode [ 783.714522][T19158] mac80211_hwsim hwsim23 wlan0: left promiscuous mode [ 783.785160][T16143] usb 2-1: config 0 has no interfaces? [ 783.790699][T16143] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 783.800026][T16143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.812599][T16143] usb 2-1: config 0 descriptor?? [ 784.487944][T18020] usb 2-1: USB disconnect, device number 8 [ 785.078186][T19177] block nbd0: not configured, cannot reconfigure [ 785.366384][T19199] block nbd2: shutting down sockets [ 786.330453][T19219] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 786.591302][T19228] block nbd0: not configured, cannot reconfigure [ 786.673379][ T48] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 786.839263][ T48] usb 3-1: config 0 has no interfaces? [ 786.851943][ T48] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 786.864030][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.915643][ T48] usb 3-1: config 0 descriptor?? [ 786.956114][T19242] binder: 19239:19242 ioctl c0306201 2000000001c0 returned -14 [ 787.137569][T16897] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 787.449315][T18020] usb 3-1: USB disconnect, device number 12 [ 787.465083][T16897] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 787.478090][T16897] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 787.489990][T16897] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 787.501977][T16897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 787.513444][T16897] usb 4-1: Product: syz [ 787.517628][T16897] usb 4-1: Manufacturer: syz [ 787.522962][T16897] usb 4-1: SerialNumber: syz [ 788.123758][T19261] block nbd2: not configured, cannot reconfigure [ 788.300468][T19269] 9pnet_virtio: no channels available for device syz [ 789.594114][T18020] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 789.792637][T18020] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 789.830861][T18020] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 789.842135][T18020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 789.853148][T18020] usb 6-1: Product: syz [ 789.859486][T18020] usb 6-1: Manufacturer: syz [ 789.866000][T18020] usb 6-1: SerialNumber: syz [ 789.894015][T11143] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 790.118921][T11143] usb 1-1: config 0 has no interfaces? [ 790.155776][T11143] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 790.209619][T11143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.242164][T18020] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 790.255283][T11143] usb 1-1: config 0 descriptor?? [ 790.273154][T18020] usb 6-1: USB disconnect, device number 2 [ 790.300810][T18020] usblp0: removed [ 790.476819][T11143] usb 1-1: USB disconnect, device number 9 [ 790.505895][T18020] usb 4-1: USB disconnect, device number 17 [ 791.976883][T19316] macsec2: entered promiscuous mode [ 791.999834][T19316] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 792.281359][T19316] mac80211_hwsim hwsim15 wlan0: left promiscuous mode [ 793.173734][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 793.365766][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 793.388486][ T10] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 793.422723][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 793.440355][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 793.453381][ T10] usb 4-1: Product: syz [ 793.463335][ T10] usb 4-1: Manufacturer: syz [ 793.472009][ T10] usb 4-1: SerialNumber: syz [ 793.613619][T11143] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 793.765403][T11143] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 793.793374][ T48] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 793.795773][T11143] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 793.820543][T11143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 793.840997][T11143] usb 1-1: Product: syz [ 793.850919][T11143] usb 1-1: Manufacturer: syz [ 793.891505][T11143] usb 1-1: SerialNumber: syz [ 793.955481][ T48] usb 2-1: config 0 has no interfaces? [ 793.961040][ T48] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 793.983407][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.034922][ T48] usb 2-1: config 0 descriptor?? [ 794.124622][T11143] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 794.165263][T11143] usb 1-1: USB disconnect, device number 10 [ 794.192576][T11143] usblp0: removed [ 794.250860][ T10] usb 2-1: USB disconnect, device number 9 [ 796.266704][T19375] fuse: Bad value for 'rootmode' [ 796.390973][ T5935] usb 4-1: USB disconnect, device number 18 [ 798.532817][T19399] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4Ï€!FõïVl‘uc'f`å”Þ†’;œ1µ [ 799.391736][ T5895] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 800.455786][ T5895] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 800.561218][T19409] bridge5: entered promiscuous mode [ 800.823783][ T5895] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 800.833047][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 800.841866][ T5895] usb 4-1: Product: syz [ 800.846081][ T5895] usb 4-1: Manufacturer: syz [ 800.851375][ T5895] usb 4-1: SerialNumber: syz [ 801.964511][ T5895] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 802.099008][ T5895] usb 4-1: USB disconnect, device number 19 [ 802.123713][ T5895] usblp0: removed [ 802.343994][T11143] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 802.560327][T11143] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.605420][T11143] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 802.645359][T11143] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 802.674212][T11143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 802.720573][T11143] usb 2-1: Product: syz [ 802.730691][T11143] usb 2-1: Manufacturer: syz [ 802.749361][T11143] usb 2-1: SerialNumber: syz [ 803.439953][T19475] bridge6: entered promiscuous mode [ 804.830970][ T30] audit: type=1326 audit(1764113933.611:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.5.4128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f577278f749 code=0x0 [ 804.983434][T14572] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 805.147251][T14572] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 805.202187][T14572] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 805.268860][T14572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 805.296917][T14572] usb 3-1: Product: syz [ 805.321666][T14572] usb 3-1: Manufacturer: syz [ 805.331451][T14572] usb 3-1: SerialNumber: syz [ 805.506367][T16389] usb 2-1: USB disconnect, device number 10 [ 805.582679][T16143] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 805.619002][T14572] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 805.743432][T14572] usb 3-1: USB disconnect, device number 13 [ 805.753050][T16143] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 805.799047][T14572] usblp0: removed [ 806.589927][T16143] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 806.599361][T16143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 806.610375][T16143] usb 1-1: Product: syz [ 806.623472][T16143] usb 1-1: Manufacturer: syz [ 806.628206][T16143] usb 1-1: SerialNumber: syz [ 808.848245][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.916793][T16143] usb 1-1: can't set config #1, error -71 [ 809.876292][T16143] usb 1-1: USB disconnect, device number 11 [ 811.388560][T16077] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 811.421875][T16077] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 812.333967][T19533] bridge7: entered promiscuous mode [ 812.873418][T14572] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 813.061012][T14572] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.098099][T14572] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 813.141749][T14572] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 813.178662][T14572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 813.223674][T14572] usb 6-1: Product: syz [ 813.245967][T14572] usb 6-1: Manufacturer: syz [ 813.250626][T14572] usb 6-1: SerialNumber: syz [ 813.613411][T16077] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 813.775751][T16077] usb 4-1: config 0 has no interfaces? [ 813.781437][T16077] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 813.792817][T16077] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.805665][T16077] usb 4-1: config 0 descriptor?? [ 814.029387][T14572] usb 4-1: USB disconnect, device number 20 [ 814.412041][T19559] block nbd0: not configured, cannot reconfigure [ 815.269617][ T30] audit: type=1326 audit(1764113944.031:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19556 comm="syz.1.4148" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f429d78f749 code=0x0 [ 816.449794][T19575] bridge11: entered promiscuous mode [ 816.733706][ T5944] usb 6-1: USB disconnect, device number 3 [ 816.773829][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 816.789676][ T5895] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 817.555649][T14572] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 817.733535][T14572] usb 6-1: Using ep0 maxpacket: 8 [ 817.740123][T14572] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 817.763331][T14572] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 817.801897][T14572] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 817.853473][T14572] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 817.873541][T14572] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 817.893298][T14572] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 817.902376][T14572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.076035][T19598] ip6gre1: entered promiscuous mode [ 818.081755][T19598] ip6gre1: entered allmulticast mode [ 818.104939][T19598] team0: Device ip6gre1 is of different type [ 818.154079][T14572] usb 6-1: usb_control_msg returned -32 [ 818.159693][T14572] usbtmc 6-1:16.0: can't read capabilities [ 818.226789][T19599] block nbd1: not configured, cannot reconfigure [ 818.423718][T19601] binder: 19600:19601 ioctl c0306201 0 returned -14 [ 818.444584][T19601] binder: 19600:19601 ioctl c0306201 2000000001c0 returned -14 [ 818.511075][T19604] usbtmc 6-1:16.0: INITIATE_CLEAR returned 0 [ 818.740418][T18020] usb 6-1: USB disconnect, device number 4 [ 821.160564][T14572] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 821.191807][T14572] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 821.488814][T19645] ip6gre1: entered promiscuous mode [ 821.513471][T19645] ip6gre1: entered allmulticast mode [ 821.565100][T19645] team0: Device ip6gre1 is of different type [ 821.636582][T19649] block nbd3: not configured, cannot reconfigure [ 823.783638][T18020] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 823.956449][T18020] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 823.984497][T18020] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 824.025141][T18020] usb 4-1: config 0 interface 0 has no altsetting 0 [ 824.046338][T18020] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 824.056502][T18020] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 824.065423][T18020] usb 4-1: Product: syz [ 824.072172][T18020] usb 4-1: Manufacturer: syz [ 824.086933][T18020] usb 4-1: SerialNumber: syz [ 824.117462][T18020] usb 4-1: config 0 descriptor?? [ 824.144734][T19679] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 824.192011][T18020] usb 4-1: selecting invalid altsetting 0 [ 824.253381][T16897] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 824.742273][T16897] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 824.993796][T16897] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 825.018563][T16897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 825.068870][T16897] usb 6-1: Product: syz [ 825.078629][T16897] usb 6-1: Manufacturer: syz [ 825.088538][T16897] usb 6-1: SerialNumber: syz [ 825.633985][T16897] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 825.708596][T16897] usb 6-1: USB disconnect, device number 5 [ 825.725077][T16897] usblp0: removed [ 826.133832][T16897] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 826.150140][T19701] ip6gre1: entered promiscuous mode [ 826.157704][T19701] ip6gre1: entered allmulticast mode [ 826.167372][T19701] team0: Device ip6gre1 is of different type [ 826.267001][T19702] block nbd2: not configured, cannot reconfigure [ 826.396506][T16897] usb 1-1: config 0 has no interfaces? [ 826.404013][T16897] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 826.418658][T16897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.976894][T16897] usb 1-1: config 0 descriptor?? [ 827.016014][T16897] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 827.109035][T18020] usb 4-1: USB disconnect, device number 21 [ 827.192279][ T5895] usb 1-1: USB disconnect, device number 12 [ 827.220959][T16897] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 827.622174][T19720] loop4: detected capacity change from 0 to 2560 [ 827.642883][T19720] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 827.651554][T19720] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 827.674233][T19720] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 827.683093][T19427] Buffer I/O error on dev loop4, logical block 256, lost async page write [ 827.720145][T19720] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 827.734450][T19720] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 827.744521][T19427] Buffer I/O error on dev loop4, logical block 257, lost async page write [ 827.789680][T19720] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 827.817423][T19427] Buffer I/O error on dev loop4, logical block 258, lost async page write [ 827.898595][T19720] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 828.486679][T19719] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 828.498469][T19719] block device autoloading is deprecated and will be removed. [ 828.632716][T19733] overlayfs: failed to resolve './file0': -2 [ 830.368401][T19750] block nbd0: not configured, cannot reconfigure [ 830.573335][ T5895] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 830.735753][ T5895] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 831.877206][ T5895] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 831.897529][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 831.906313][ T5895] usb 6-1: Product: syz [ 831.910493][ T5895] usb 6-1: Manufacturer: syz [ 832.181779][T19757] bridge12: entered promiscuous mode [ 832.364538][ T5895] usb 6-1: SerialNumber: syz [ 832.676042][ T5895] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 832.847305][ T5895] usb 6-1: USB disconnect, device number 6 [ 832.887350][T19762] loop4: detected capacity change from 0 to 524287999 [ 832.899540][ T5895] usblp0: removed [ 833.054235][T18020] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 833.073108][T19769] overlayfs: failed to resolve './file0': -2 [ 833.218456][T18020] usb 4-1: config 0 has no interfaces? [ 833.233596][T18020] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 833.242918][T18020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.295610][T18020] usb 4-1: config 0 descriptor?? [ 833.613689][ T5895] usb 4-1: USB disconnect, device number 22 [ 834.315635][ T5895] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 834.541700][ T5895] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 837.797785][T19801] bridge3: entered promiscuous mode [ 838.774268][T19808] overlayfs: failed to resolve './file0': -2 [ 839.133464][ T48] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 839.306055][ T5895] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 839.533462][ T5895] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.557331][ T5895] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 839.579702][ T5895] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 839.591953][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 839.604914][ T5895] usb 2-1: Product: syz [ 839.609434][ T5895] usb 2-1: Manufacturer: syz [ 839.618133][ T5895] usb 2-1: SerialNumber: syz [ 840.154193][T19804] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 840.160753][T19804] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 840.222245][ T48] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 840.235711][T19804] vhci_hcd vhci_hcd.0: Device attached [ 840.703734][T16897] usb 34-1: SetAddress Request (8) to port 0 [ 840.787703][T16897] usb 34-1: new SuperSpeed USB device number 8 using vhci_hcd [ 840.977524][T14572] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 841.007642][ T48] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 841.035800][T14572] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 841.046775][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 841.061647][T19829] vhci_hcd: connection reset by peer [ 841.069612][ T80] vhci_hcd vhci_hcd.0: stop threads [ 841.077205][ T48] usb 6-1: Product: syz [ 841.097508][ T48] usb 6-1: Manufacturer: syz [ 841.108339][ T80] vhci_hcd vhci_hcd.0: release socket [ 841.113002][ T48] usb 6-1: SerialNumber: syz [ 841.132950][ T80] vhci_hcd vhci_hcd.0: disconnect device [ 841.397284][ T48] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 841.446179][ T48] usb 6-1: USB disconnect, device number 7 [ 841.493673][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 841.502828][ T48] usblp0: removed [ 844.395695][T19856] bridge4: entered promiscuous mode [ 844.473054][ T5895] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 844.660486][T19863] overlayfs: failed to resolve './file1': -2 [ 844.680218][ T5887] usb 2-1: USB disconnect, device number 11 [ 844.707720][ T5895] usb 3-1: config 0 has no interfaces? [ 844.723322][ T5895] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 844.732431][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.804306][ T5895] usb 3-1: config 0 descriptor?? [ 844.817506][T19867] ip6gre1: entered promiscuous mode [ 844.822760][T19867] ip6gre1: entered allmulticast mode [ 844.837333][T19867] team0: Device ip6gre1 is of different type [ 844.893450][T19872] block nbd3: not configured, cannot reconfigure [ 844.909491][ T5824] Bluetooth: unknown link type 128 [ 845.018997][ T5887] usb 3-1: USB disconnect, device number 14 [ 846.054341][T16897] usb 34-1: device descriptor read/8, error -110 [ 846.175117][ T5887] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 846.989730][T16897] usb usb34-port1: attempt power cycle [ 846.999865][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 848.107825][ T5887] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 848.578455][T16897] usb usb34-port1: unable to enumerate USB device [ 849.083300][T19906] bridge8: entered promiscuous mode [ 849.673456][T16077] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 849.752058][T19919] ip6gre1: entered promiscuous mode [ 849.785129][T19919] ip6gre1: entered allmulticast mode [ 849.810598][T19919] team0: Device ip6gre1 is of different type [ 849.900012][T16077] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 849.936512][T19926] block nbd0: not configured, cannot reconfigure [ 849.953500][T16077] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 849.965541][T16077] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 849.987260][T16077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 849.995845][T16077] usb 4-1: Product: syz [ 849.999990][T16077] usb 4-1: Manufacturer: syz [ 850.051184][T16077] usb 4-1: SerialNumber: syz [ 851.443427][ T5944] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 851.915981][ T5944] usb 6-1: config 0 has no interfaces? [ 851.921866][ T5944] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 851.940588][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.334578][ T5944] usb 6-1: config 0 descriptor?? [ 852.577566][ T5944] usb 6-1: USB disconnect, device number 8 [ 853.467187][ T5887] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 853.526137][T16143] usb 4-1: USB disconnect, device number 23 [ 854.078215][T19963] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 854.502450][ T5887] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 855.312061][T19967] ip6gre1: entered promiscuous mode [ 855.340266][T19967] ip6gre1: entered allmulticast mode [ 855.371894][T19967] team0: Device ip6gre1 is of different type [ 855.487498][T19971] block nbd3: not configured, cannot reconfigure [ 857.429792][T19989] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 857.966911][T19993] fuse: Unknown parameter '0x0000000000000003' [ 858.354329][ T5887] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 858.546200][ T5887] usb 4-1: config 0 has no interfaces? [ 858.561636][ T5887] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 858.639172][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.946832][ T5887] usb 4-1: config 0 descriptor?? [ 859.343862][ T5887] usb 4-1: USB disconnect, device number 24 [ 859.737778][T20013] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 860.386798][T20020] ip6gre1: entered promiscuous mode [ 860.423969][T20020] ip6gre1: entered allmulticast mode [ 860.460317][T20020] team0: Device ip6gre1 is of different type [ 860.572579][T20024] block nbd3: not configured, cannot reconfigure [ 860.941658][T20023] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 860.948276][T20023] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 861.015472][T20023] vhci_hcd vhci_hcd.0: Device attached [ 861.092726][T20030] vhci_hcd: connection closed [ 861.094383][T16463] vhci_hcd vhci_hcd.0: stop threads [ 861.133612][T16463] vhci_hcd vhci_hcd.0: release socket [ 861.152150][T16463] vhci_hcd vhci_hcd.0: disconnect device [ 862.064726][T20037] fuse: Unknown parameter '0x0000000000000003' [ 862.353350][ T5880] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 862.508423][ T5880] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 862.525030][T11143] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 862.569424][ T5880] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 862.594197][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 862.602669][ T5880] usb 4-1: Product: syz [ 862.609180][ T5880] usb 4-1: Manufacturer: syz [ 862.631731][ T5880] usb 4-1: SerialNumber: syz [ 862.759798][T11143] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 862.871696][T11143] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 862.932941][T11143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 862.965598][ T5880] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 863.025543][T11143] usb 2-1: Product: syz [ 863.049438][T11143] usb 2-1: Manufacturer: syz [ 863.070789][ T5880] usb 4-1: USB disconnect, device number 25 [ 863.087791][T11143] usb 2-1: SerialNumber: syz [ 863.187333][ T5880] usblp0: removed [ 863.590555][T11143] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 863.662814][T11143] usb 2-1: USB disconnect, device number 12 [ 863.745548][T11143] usblp0: removed [ 863.923851][T14572] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 864.100239][T14572] usb 6-1: config 0 has no interfaces? [ 864.120139][T14572] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 864.163826][T14572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.195023][T14572] usb 6-1: config 0 descriptor?? [ 864.407391][T11143] usb 6-1: USB disconnect, device number 9 [ 864.556921][T20072] ip6gre1: entered promiscuous mode [ 864.565909][T20072] ip6gre1: entered allmulticast mode [ 864.572911][T20072] team0: Device ip6gre1 is of different type [ 864.611982][T20074] block nbd1: not configured, cannot reconfigure [ 865.451076][T20066] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 865.457635][T20066] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 865.561267][T20084] vhci_hcd: connection closed [ 865.561410][T20066] vhci_hcd vhci_hcd.0: Device attached [ 865.680197][ T36] vhci_hcd vhci_hcd.3: stop threads [ 865.729471][ T36] vhci_hcd vhci_hcd.3: release socket [ 865.779343][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 866.655570][T20106] bridge6: entered promiscuous mode [ 867.417430][T20108] overlayfs: failed to resolve './file0': -2 [ 867.466214][T20110] ip6gre1: entered promiscuous mode [ 867.471460][T20110] ip6gre1: entered allmulticast mode [ 867.478782][T20110] team0: Device ip6gre1 is of different type [ 867.650569][T20119] 9pnet_virtio: no channels available for device syz [ 870.241421][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.286147][T20110] block nbd0: not configured, cannot reconfigure [ 870.779302][T20125] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 870.788564][T20125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4302'. [ 870.797950][T20125] netlink: 'syz.5.4302': attribute type 5 has an invalid length. [ 870.805986][T20125] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4302'. [ 871.040613][T20125] geneve2: entered promiscuous mode [ 871.054777][T20125] geneve2: entered allmulticast mode [ 871.160531][T20135] siw: device registration error -23 [ 872.083138][T16438] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 872.115077][T16438] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 872.645622][T16438] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 872.684308][T16438] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 872.818899][T20140] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 873.357744][T20142] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 873.364275][T20142] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 873.403407][T20142] vhci_hcd vhci_hcd.0: Device attached [ 873.454422][T20151] vhci_hcd: connection closed [ 873.455244][ T36] vhci_hcd vhci_hcd.2: stop threads [ 873.485107][ T36] vhci_hcd vhci_hcd.2: release socket [ 873.504683][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 874.235561][T20165] bridge7: entered promiscuous mode [ 874.955687][T20171] ip6gre1: entered promiscuous mode [ 874.969207][T20171] ip6gre1: entered allmulticast mode [ 874.982587][T20171] team0: Device ip6gre1 is of different type [ 875.056748][T20173] block nbd1: not configured, cannot reconfigure [ 877.357557][T20203] bridge13: entered promiscuous mode [ 878.283044][T20210] ip6gre1: entered promiscuous mode [ 878.292033][T20212] Bluetooth: MGMT ver 1.23 [ 878.302826][T20210] ip6gre1: entered allmulticast mode [ 878.335598][T20210] team0: Device ip6gre1 is of different type [ 878.423581][T20214] block nbd1: not configured, cannot reconfigure [ 878.435106][ T5944] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 878.635932][ T5944] usb 6-1: config 0 has no interfaces? [ 878.641493][ T5944] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 878.678359][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.714582][ T5944] usb 6-1: config 0 descriptor?? [ 878.735837][T20222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4328'. [ 878.756070][T20222] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4328'. [ 878.929735][ T5944] usb 6-1: USB disconnect, device number 10 [ 879.423734][T20240] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 879.430289][T20240] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 879.446917][T20240] vhci_hcd vhci_hcd.0: Device attached [ 879.953148][T20241] vhci_hcd: connection closed [ 879.954547][ T2909] vhci_hcd vhci_hcd.1: stop threads [ 879.978638][ T2909] vhci_hcd vhci_hcd.1: release socket [ 880.123340][ T2909] vhci_hcd vhci_hcd.1: disconnect device [ 880.899309][T20253] bridge5: entered promiscuous mode [ 882.139049][T20262] ip6gre1: entered promiscuous mode [ 882.350078][T20266] block nbd0: not configured, cannot reconfigure [ 882.433395][T20262] ip6gre1: entered allmulticast mode [ 882.440169][T20262] team0: Device ip6gre1 is of different type [ 882.812494][T20286] : renamed from lo (while UP) [ 883.104978][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 883.303825][T16077] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 883.355211][ T10] usb 6-1: config 0 has no interfaces? [ 883.378736][ T10] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 883.451710][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.511268][T16077] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 883.590274][ T10] usb 6-1: config 0 descriptor?? [ 883.670000][T16077] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 883.754180][T16077] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 883.799964][T16077] usb 3-1: Product: syz [ 883.837486][T16077] usb 3-1: Manufacturer: syz [ 883.866374][T16077] usb 3-1: SerialNumber: syz [ 883.874425][T20299] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 883.896042][T11143] usb 6-1: USB disconnect, device number 11 [ 884.181506][T16077] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 884.646321][T16077] usb 3-1: USB disconnect, device number 15 [ 884.943409][T20303] nvme_fabrics: missing parameter 'transport=%s' [ 884.969281][T16077] usblp0: removed [ 885.112998][T20303] nvme_fabrics: missing parameter 'nqn=%s' [ 886.101226][T20315] ip6gre1: entered promiscuous mode [ 886.106664][T20315] ip6gre1: entered allmulticast mode [ 886.116959][T20315] team0: Device ip6gre1 is of different type [ 886.177659][T20319] block nbd2: not configured, cannot reconfigure [ 886.468712][T16077] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 886.793564][T16077] usb 4-1: Using ep0 maxpacket: 8 [ 886.804184][T16077] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 886.823819][T16077] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 886.835242][T16077] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.961714][T16077] usb 4-1: config 0 descriptor?? [ 888.177754][T16077] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 889.480308][T16389] usb 4-1: USB disconnect, device number 26 [ 891.570949][T20352] 9pnet_virtio: no channels available for device syz [ 893.593390][T20365] ip6gre1: entered promiscuous mode [ 893.598689][T20365] ip6gre1: entered allmulticast mode [ 893.608168][T20365] team0: Device ip6gre1 is of different type [ 893.673789][T16077] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 893.862947][T20367] block nbd0: not configured, cannot reconfigure [ 893.927182][T16077] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 894.046760][T16077] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 894.063358][T16077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 894.092858][T16077] usb 4-1: Product: syz [ 894.107967][T16077] usb 4-1: Manufacturer: syz [ 894.112613][T16077] usb 4-1: SerialNumber: syz [ 894.382851][T16077] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 894.461745][T16077] usb 4-1: USB disconnect, device number 27 [ 894.497757][T16077] usblp0: removed [ 895.343316][ T5935] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 895.535728][ T5935] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 896.497846][ T5935] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 896.540535][ T5935] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 896.551665][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 896.563666][ T5935] usb 3-1: Product: syz [ 896.567898][ T5935] usb 3-1: Manufacturer: syz [ 896.573045][ T5935] usb 3-1: SerialNumber: syz [ 897.817108][T20405] nvme_fabrics: missing parameter 'transport=%s' [ 897.853326][T20405] nvme_fabrics: missing parameter 'nqn=%s' [ 898.303678][T20424] bridge0: port 3(gretap0) entered blocking state [ 898.373900][T20424] bridge0: port 3(gretap0) entered disabled state [ 898.380573][T20424] gretap0: entered allmulticast mode [ 898.465227][T20424] gretap0: entered promiscuous mode [ 898.513593][T20424] bridge0: port 3(gretap0) entered blocking state [ 898.520162][T20424] bridge0: port 3(gretap0) entered forwarding state [ 898.892124][T20440] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 899.873433][ T5880] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 899.939359][T11143] usb 3-1: USB disconnect, device number 16 [ 901.164236][T16897] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 901.326234][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 901.385369][ T5880] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 901.630020][T16897] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.654916][T16897] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 901.828708][ T5880] usb 4-1: config 0 has no interface number 0 [ 901.843397][ T5880] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 901.859983][T16897] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 901.876630][T16897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 901.883375][ T5880] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 901.885145][T16897] usb 1-1: Product: syz [ 901.901181][T16897] usb 1-1: Manufacturer: syz [ 902.392687][T16897] usb 1-1: SerialNumber: syz [ 902.470050][ T5880] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 902.509972][ T5880] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 902.543329][ T5880] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 902.561193][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.608044][ T5880] usb 4-1: config 0 descriptor?? [ 902.643439][ T5880] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 902.687611][ T5880] usb 4-1: USB disconnect, device number 28 [ 902.724151][ T5880] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 902.795773][T20477] binder: 20475:20477 ioctl c0306201 2000000001c0 returned -14 [ 903.275205][T20495] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 903.287822][T20495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4405'. [ 903.302874][T20495] netlink: 'syz.3.4405': attribute type 5 has an invalid length. [ 903.322149][T20495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4405'. [ 903.423300][ T5880] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 903.578655][T20495] geneve2: entered promiscuous mode [ 903.587541][T20502] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 903.605083][T20495] geneve2: entered allmulticast mode [ 903.626059][ T80] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 903.660689][ T80] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 903.669535][ T5880] usb 6-1: device descriptor read/64, error -71 [ 903.697488][ T80] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 903.719614][ T80] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 903.913657][ T5880] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 904.171229][T20510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4414'. [ 904.273668][ T5880] usb 6-1: device descriptor read/64, error -71 [ 904.383632][ T5880] usb usb6-port1: attempt power cycle [ 904.743330][ T5880] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 904.787159][ T5880] usb 6-1: device descriptor read/8, error -71 [ 905.053799][ T5880] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 905.107576][ T5880] usb 6-1: device descriptor read/8, error -71 [ 905.171731][T16897] usb 1-1: USB disconnect, device number 13 [ 905.317564][ T5880] usb usb6-port1: unable to enumerate USB device [ 905.371928][T20526] binder: 20525:20526 ioctl c0306201 2000000001c0 returned -14 [ 905.971715][T20537] 9pnet_virtio: no channels available for device syz [ 907.289360][T20565] binder: 20563:20565 ioctl c0306201 2000000001c0 returned -14 [ 909.529570][T20602] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 910.332804][T20616] binder: 20615:20616 ioctl c0306201 2000000001c0 returned -14 [ 910.713361][T16897] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 910.891657][T16897] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 911.017095][T16897] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 911.048461][T16897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 911.080930][T16897] usb 3-1: Product: syz [ 911.103117][T16897] usb 3-1: Manufacturer: syz [ 911.142184][T16897] usb 3-1: SerialNumber: syz [ 911.715194][T16897] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 911.826456][T16897] usb 3-1: USB disconnect, device number 17 [ 911.865958][T16897] usblp0: removed [ 912.919353][T20657] binder: BINDER_SET_CONTEXT_MGR already set [ 912.962931][T20657] binder: 20654:20657 ioctl 4018620d 2000000002c0 returned -16 [ 913.008384][T20657] binder: 20654:20657 ioctl c0306201 2000000001c0 returned -14 [ 913.285856][T20670] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4463'. [ 913.312244][T20670] batadv0: entered allmulticast mode [ 913.540258][T20676] 9pnet_virtio: no channels available for device syz [ 914.936559][T20694] binder: 20693:20694 ioctl c0306201 0 returned -14 [ 916.648086][T20725] kvm: Disabled LAPIC found during irq injection [ 916.784152][T20728] binder: 20727:20728 ioctl c0306201 0 returned -14 [ 919.414287][ T5824] Bluetooth: unknown link type 128 [ 919.535168][T20779] 9pnet_virtio: no channels available for device syz [ 920.181540][T20780] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 920.199249][T20788] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 920.205776][T20788] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 920.360933][T20788] vhci_hcd vhci_hcd.0: Device attached [ 920.731174][ T30] audit: type=1326 audit(1764114049.511:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20793 comm="syz.1.4510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f429d78f749 code=0x0 [ 920.971503][ T5935] usb 38-1: SetAddress Request (11) to port 0 [ 921.168909][ T5935] usb 38-1: new SuperSpeed USB device number 11 using vhci_hcd [ 921.467736][T20790] vhci_hcd: connection reset by peer [ 921.490824][ T36] vhci_hcd vhci_hcd.2: stop threads [ 921.496262][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 921.505983][ T36] vhci_hcd vhci_hcd.2: release socket [ 921.519903][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 922.776082][ T5824] Bluetooth: unknown link type 128 [ 922.845198][T20833] netlink: 'syz.3.4521': attribute type 12 has an invalid length. [ 922.983646][ T5887] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 924.059414][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 924.072313][ T5887] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 924.085798][ T5887] usb 2-1: config 0 has no interface number 0 [ 924.092963][ T5887] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 924.107395][ T5887] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 924.119646][ T5887] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 924.131349][T20845] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 924.132176][ T5887] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 924.162572][ T5887] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 924.176516][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.212116][ T5887] usb 2-1: config 0 descriptor?? [ 924.235471][ T5887] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 924.856496][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 926.453379][ T5935] usb 38-1: device descriptor read/8, error -110 [ 926.649087][T20883] kvm: Disabled LAPIC found during irq injection [ 927.471480][ T5935] usb usb38-port1: attempt power cycle [ 927.816750][T20896] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 927.823288][T20896] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 927.872966][T20896] vhci_hcd vhci_hcd.0: Device attached [ 927.923586][ T5935] usb 38-1: SetAddress Request (14) to port 0 [ 927.932366][ T5935] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 928.413950][ T5887] usb 2-1: USB disconnect, device number 13 [ 928.453050][ T5887] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 928.466010][T20897] vhci_hcd: connection reset by peer [ 928.688791][ T36] vhci_hcd vhci_hcd.2: stop threads [ 928.696550][ T36] vhci_hcd vhci_hcd.2: release socket [ 928.713685][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 931.498189][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.752734][T20952] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 932.233832][T20969] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 932.240383][T20969] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 932.253345][T20969] vhci_hcd vhci_hcd.0: Device attached [ 932.604079][T20971] vhci_hcd: connection closed [ 932.608567][T16438] vhci_hcd vhci_hcd.3: stop threads [ 932.622510][T16438] vhci_hcd vhci_hcd.3: release socket [ 932.633650][T16438] vhci_hcd vhci_hcd.3: disconnect device [ 933.103448][ T5935] usb 38-1: device descriptor read/8, error -110 [ 933.698069][ T5935] usb usb38-port1: unable to enumerate USB device [ 950.365033][T21141] overlayfs: missing 'workdir' [ 952.234805][T21173] 9pnet_virtio: no channels available for device syz [ 952.413520][ T5935] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 953.483858][ T5935] usb 1-1: no configurations [ 953.488501][ T5935] usb 1-1: can't read configurations, error -22 [ 953.661752][T21186] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 953.668312][T21186] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 953.860190][T21186] vhci_hcd vhci_hcd.0: Device attached [ 953.871626][T21190] ieee802154 phy0 wpan0: encryption failed: -22 [ 953.910354][ T5935] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 954.018875][T21187] vhci_hcd: connection closed [ 954.019040][T15653] vhci_hcd vhci_hcd.3: stop threads [ 954.029673][T15653] vhci_hcd vhci_hcd.3: release socket [ 954.035924][T15653] vhci_hcd vhci_hcd.3: disconnect device [ 954.132827][ T5935] usb 1-1: no configurations [ 954.140586][ T5935] usb 1-1: can't read configurations, error -22 [ 954.152586][ T5935] usb usb1-port1: attempt power cycle [ 954.258860][T21197] bridge9: entered promiscuous mode [ 954.543661][ T5935] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 954.702794][ T5935] usb 1-1: no configurations [ 954.793118][ T5935] usb 1-1: can't read configurations, error -22 [ 954.993735][ T5935] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 955.104664][ T5935] usb 1-1: device descriptor read/8, error -71 [ 955.253837][ T5935] usb usb1-port1: unable to enumerate USB device [ 956.908572][T21229] kvm: user requested TSC rate below hardware speed [ 957.973460][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 958.164036][ T24] usb 2-1: no configurations [ 958.168797][ T24] usb 2-1: can't read configurations, error -22 [ 958.325646][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 958.377742][T21257] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 958.493935][ T24] usb 2-1: no configurations [ 958.499321][ T24] usb 2-1: can't read configurations, error -22 [ 958.509276][ T24] usb usb2-port1: attempt power cycle [ 958.863250][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 958.914797][ T24] usb 2-1: no configurations [ 958.919445][ T24] usb 2-1: can't read configurations, error -22 [ 959.063318][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 959.106347][ T24] usb 2-1: no configurations [ 959.110982][ T24] usb 2-1: can't read configurations, error -22 [ 959.141239][ T24] usb usb2-port1: unable to enumerate USB device [ 963.393353][T21311] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 963.622132][T21323] capability: warning: `syz.5.4679' uses deprecated v2 capabilities in a way that may be insecure [ 963.726484][T21327] bridge10: entered promiscuous mode [ 963.879371][T21323] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 963.942230][T21323] overlayfs: fs on './file1/file0' does not support file handles, falling back to index=off,nfs_export=off. [ 964.693274][T16897] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 965.617290][T16897] usb 2-1: no configurations [ 965.621937][T16897] usb 2-1: can't read configurations, error -22 [ 965.833729][T16897] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 966.009205][T16897] usb 2-1: no configurations [ 966.760302][T16897] usb 2-1: can't read configurations, error -22 [ 967.566346][T16897] usb usb2-port1: attempt power cycle [ 967.847908][T21370] bridge14: entered promiscuous mode [ 970.903343][T10273] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 971.122635][T10273] usb 3-1: no configurations [ 971.158897][T10273] usb 3-1: can't read configurations, error -22 [ 971.420320][T10273] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 971.578358][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 971.708188][T10273] usb 3-1: no configurations [ 971.712836][T10273] usb 3-1: can't read configurations, error -22 [ 971.729782][ T24] usb 1-1: device descriptor read/64, error -71 [ 971.736819][T10273] usb usb3-port1: attempt power cycle [ 972.030128][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 972.223298][T10273] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 972.372938][ T24] usb 1-1: device descriptor read/64, error -71 [ 972.654252][ T24] usb usb1-port1: attempt power cycle [ 972.663403][T10273] usb 3-1: no configurations [ 972.668095][T10273] usb 3-1: can't read configurations, error -22 [ 972.873329][T10273] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 972.900762][T21448] ip6gre1: entered promiscuous mode [ 972.908034][T21448] ip6gre1: entered allmulticast mode [ 972.920813][T21448] team0: Device ip6gre1 is of different type [ 972.968843][T21449] block nbd1: not configured, cannot reconfigure [ 972.982569][T10273] usb 3-1: no configurations [ 972.996500][T10273] usb 3-1: can't read configurations, error -22 [ 973.055985][T10273] usb usb3-port1: unable to enumerate USB device [ 973.083289][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 973.227153][ T24] usb 1-1: device descriptor read/8, error -71 [ 973.565677][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 973.626592][ T24] usb 1-1: device descriptor read/8, error -71 [ 973.758542][ T24] usb usb1-port1: unable to enumerate USB device [ 974.470347][T21469] fuse: Bad value for 'fd' [ 974.675499][T21483] ip6gre1: entered promiscuous mode [ 974.680750][T21483] ip6gre1: entered allmulticast mode [ 974.687062][T21483] team0: Device ip6gre1 is of different type [ 974.731853][T21486] block nbd3: not configured, cannot reconfigure [ 975.293271][ T5887] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 975.475014][ T5887] usb 4-1: no configurations [ 975.479655][ T5887] usb 4-1: can't read configurations, error -22 [ 975.507225][T21512] ip6gre1: entered promiscuous mode [ 975.512608][T21512] ip6gre1: entered allmulticast mode [ 975.519556][T21512] team0: Device ip6gre1 is of different type [ 975.565514][T16897] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 975.592078][T21515] block nbd5: not configured, cannot reconfigure [ 975.634011][ T5887] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 975.734578][T16897] usb 2-1: device descriptor read/64, error -71 [ 975.816743][ T5887] usb 4-1: no configurations [ 975.821385][ T5887] usb 4-1: can't read configurations, error -22 [ 975.911451][ T5887] usb usb4-port1: attempt power cycle [ 976.237693][T16897] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 976.453308][T16897] usb 2-1: device descriptor read/64, error -71 [ 976.503610][ T5887] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 976.533363][ T5887] usb 4-1: no configurations [ 976.538022][ T5887] usb 4-1: can't read configurations, error -22 [ 976.573647][T16897] usb usb2-port1: attempt power cycle [ 976.683336][ T5887] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 976.725133][ T5887] usb 4-1: no configurations [ 976.729982][ T5887] usb 4-1: can't read configurations, error -22 [ 976.737011][ T5887] usb usb4-port1: unable to enumerate USB device [ 976.933286][T16897] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 976.972755][T16897] usb 2-1: device descriptor read/8, error -71 [ 977.537799][T21555] ip6gre1: entered promiscuous mode [ 977.543133][T21555] ip6gre1: entered allmulticast mode [ 977.549783][T21555] team0: Device ip6gre1 is of different type [ 977.597988][T21556] block nbd0: not configured, cannot reconfigure [ 977.626600][T16897] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 977.666814][T16897] usb 2-1: device descriptor read/8, error -71 [ 977.787262][T16897] usb usb2-port1: unable to enumerate USB device [ 979.994895][T21591] ip6gre1: entered promiscuous mode [ 980.001100][T21591] ip6gre1: entered allmulticast mode [ 980.021759][T21591] team0: Device ip6gre1 is of different type [ 980.071699][T21596] block nbd3: not configured, cannot reconfigure [ 980.481530][T21600] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 980.563349][T16897] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 980.573256][ T5880] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 980.703338][ T5880] usb 4-1: device descriptor read/64, error -71 [ 980.953513][ T5880] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 981.123806][ T5880] usb 4-1: device descriptor read/64, error -71 [ 981.267680][ T5880] usb usb4-port1: attempt power cycle [ 981.329021][T16897] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 981.527309][T16897] usb 6-1: can't read configurations, error -61 [ 981.644348][ T5880] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 981.676197][T16897] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 981.678118][ T5880] usb 4-1: device descriptor read/8, error -71 [ 981.978477][ T5880] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 982.028912][ T5880] usb 4-1: device descriptor read/8, error -71 [ 982.164624][ T5880] usb usb4-port1: unable to enumerate USB device [ 982.876206][T16897] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 983.363784][T16897] usb 6-1: can't read configurations, error -61 [ 983.373540][T16897] usb usb6-port1: attempt power cycle [ 985.383288][T10273] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 985.775728][T10273] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 985.794745][T10273] usb 2-1: can't read configurations, error -61 [ 986.003281][T10273] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 986.075282][ T5887] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 986.233374][ T5887] usb 6-1: device descriptor read/64, error -71 [ 986.314919][T10273] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 986.323107][T10273] usb 2-1: can't read configurations, error -61 [ 986.330174][T10273] usb usb2-port1: attempt power cycle [ 987.379186][ T5887] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 987.915325][T10273] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 987.994247][T10273] usb 2-1: device descriptor read/8, error -71 [ 988.323483][ T5887] usb 6-1: device descriptor read/64, error -71 [ 988.434960][ T5887] usb usb6-port1: attempt power cycle [ 990.343281][T21756] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 990.349839][T21756] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 990.373111][T21756] vhci_hcd vhci_hcd.0: Device attached [ 990.563397][T16897] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 990.663449][ T5887] usb 36-1: SetAddress Request (12) to port 0 [ 990.934642][ T5887] usb 36-1: new SuperSpeed USB device number 12 using vhci_hcd [ 990.950840][T21757] vhci_hcd: connection closed [ 990.951486][ T36] vhci_hcd vhci_hcd.1: stop threads [ 990.962178][ T36] vhci_hcd vhci_hcd.1: release socket [ 990.967945][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 991.107841][T16897] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 991.120957][T16897] usb 4-1: can't read configurations, error -61 [ 991.303368][T16897] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 991.413462][T16077] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 991.506744][T16897] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 991.532869][T16897] usb 4-1: can't read configurations, error -61 [ 991.543484][T16897] usb usb4-port1: attempt power cycle [ 991.553262][T16077] usb 1-1: device descriptor read/64, error -71 [ 991.794921][T16077] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 991.893668][T16897] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 991.943264][T16077] usb 1-1: device descriptor read/64, error -71 [ 992.235494][T16077] usb usb1-port1: attempt power cycle [ 992.243717][T16897] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 992.263661][T16897] usb 4-1: can't read configurations, error -61 [ 992.452992][T16897] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 992.486375][T16897] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 992.499337][T16897] usb 4-1: can't read configurations, error -61 [ 992.513796][T16897] usb usb4-port1: unable to enumerate USB device [ 992.547472][T21798] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 992.593309][T16077] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 992.623805][T16077] usb 1-1: device descriptor read/8, error -71 [ 992.863284][T16077] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 992.895968][T16077] usb 1-1: device descriptor read/8, error -71 [ 992.939394][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.013756][T16077] usb usb1-port1: unable to enumerate USB device [ 994.789125][T21829] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 994.965482][T21838] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 994.972039][T21838] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 994.994329][T21838] vhci_hcd vhci_hcd.0: Device attached [ 995.273433][T10273] usb 38-1: SetAddress Request (15) to port 0 [ 995.285621][T10273] usb 38-1: new SuperSpeed USB device number 15 using vhci_hcd [ 995.513073][T21839] vhci_hcd: connection reset by peer [ 995.518916][ T6267] vhci_hcd vhci_hcd.2: stop threads [ 995.770410][ T6267] vhci_hcd vhci_hcd.2: release socket [ 995.776977][ T6267] vhci_hcd vhci_hcd.2: disconnect device [ 995.973630][ T5887] usb 36-1: device descriptor read/8, error -110 [ 996.173290][T16897] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 996.709728][ T5887] usb usb36-port1: attempt power cycle [ 996.947990][T16897] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 996.992339][T16897] usb 1-1: can't read configurations, error -61 [ 997.183352][T16897] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 997.314032][ T5887] usb usb36-port1: unable to enumerate USB device [ 997.382580][T16897] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 997.390357][T16897] usb 1-1: can't read configurations, error -61 [ 997.403560][T16897] usb usb1-port1: attempt power cycle [ 997.612672][T21874] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 997.833280][T16897] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 997.855566][T16897] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 997.867165][T16897] usb 1-1: can't read configurations, error -61 [ 998.443352][T16897] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 999.226574][T16897] usb 1-1: device descriptor read/8, error -71 [ 999.333657][T16897] usb usb1-port1: unable to enumerate USB device [ 1000.373734][T10273] usb 38-1: device descriptor read/8, error -110 [ 1001.196474][T21909] ip6gre1: entered promiscuous mode [ 1001.268852][T21909] ip6gre1: entered allmulticast mode [ 1001.310012][T10273] usb usb38-port1: attempt power cycle [ 1001.440595][T21909] team0: Device ip6gre1 is of different type [ 1001.970507][T21918] block nbd1: not configured, cannot reconfigure [ 1002.002714][T10273] usb usb38-port1: unable to enumerate USB device [ 1002.029390][T21917] ubi0: attaching mtd0 [ 1002.038867][T21917] ubi0: scanning is finished [ 1002.046771][T21917] ubi0: empty MTD device detected [ 1002.240102][T21917] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1002.247727][T21917] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1002.273325][T21917] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1002.306209][T21917] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1002.344482][T21917] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1002.354192][T21917] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1002.368493][T21917] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1111715021 [ 1002.380690][T21917] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1002.397093][T21921] ubi0: detaching mtd0 [ 1002.403209][T21922] ubi0: background thread "ubi_bgt0d" started, PID 21922 [ 1002.478925][T21921] ubi0: mtd0 is detached [ 1003.685624][T21941] qnx6: unable to read the first superblock [ 1004.377716][T16897] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1004.669700][T16897] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1004.738889][T16897] usb 6-1: can't read configurations, error -61 [ 1004.953587][T16897] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1005.579741][T16897] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1006.331010][T16897] usb 6-1: can't read configurations, error -61 [ 1006.363502][T16897] usb usb6-port1: attempt power cycle [ 1006.703494][T16897] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1006.800834][T16897] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1006.871984][T16897] usb 6-1: can't read configurations, error -61 [ 1007.093649][T16897] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1007.292761][T16897] usb 6-1: device descriptor read/8, error -71 [ 1007.503746][T16897] usb usb6-port1: unable to enumerate USB device [ 1008.268518][ T30] audit: type=1326 audit(1764114137.051:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.5.4905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f577278f749 code=0x0 [ 1010.255190][T22014] netlink: 'syz.5.4911': attribute type 10 has an invalid length. [ 1010.263126][T22014] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4911'. [ 1010.275690][T22014] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1010.287339][T22014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1011.589541][T16897] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1012.218981][T16897] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1012.237262][T16897] usb 3-1: can't read configurations, error -61 [ 1012.285575][ T30] audit: type=1326 audit(1764114141.071:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22035 comm="syz.5.4921" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f577278f749 code=0x0 [ 1012.383837][T16897] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1012.906331][T16897] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1013.145779][T16897] usb 3-1: can't read configurations, error -61 [ 1013.153074][T16897] usb usb3-port1: attempt power cycle [ 1013.291058][T22059] program syz.3.4928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1013.533643][T16897] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1013.825990][T16897] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1013.833891][T16897] usb 3-1: can't read configurations, error -61 [ 1014.024136][T16897] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1014.111803][T16897] usb 3-1: device descriptor read/8, error -71 [ 1014.193284][T16077] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1014.264216][T16897] usb usb3-port1: unable to enumerate USB device [ 1014.393549][ T30] audit: type=1326 audit(1764114143.081:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22079 comm="syz.5.4936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f577278f749 code=0x0 [ 1014.453566][T16077] usb 4-1: Using ep0 maxpacket: 8 [ 1014.481715][T16077] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1014.494742][T16077] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1014.507163][T16077] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1014.520204][T16077] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1014.660685][T16077] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1014.670487][T16077] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.901586][T16077] usb 4-1: GET_CAPABILITIES returned 0 [ 1015.961862][T16077] usbtmc 4-1:16.0: can't read capabilities [ 1016.083438][T16077] usb 4-1: USB disconnect, device number 41 [ 1018.973287][T16077] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1018.991670][T22131] netlink: 'syz.1.4949': attribute type 10 has an invalid length. [ 1018.992060][T22128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.206214][T22139] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1019.256301][T16077] usb 6-1: config 0 has no interfaces? [ 1019.614287][T22128] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1020.271880][T16077] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1021.128360][T16077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.153589][T16077] usb 6-1: config 0 descriptor?? [ 1021.583030][ T5927] usb 6-1: USB disconnect, device number 26 [ 1021.969434][T22165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4958'. [ 1022.242006][T22166] ALSA: mixer_oss: invalid OSS volume '' [ 1022.672812][T22166] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1022.679360][T22166] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1023.021324][T22166] vhci_hcd vhci_hcd.0: Device attached [ 1023.223323][T16897] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1023.795158][T16897] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 1026.359618][T22242] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1028.112010][T22264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4981'. [ 1028.169818][T22258] smc: net device bond0 applied user defined pnetid SYZ2 [ 1030.060514][T22297] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1030.060545][T22297] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1030.060797][T22297] vhci_hcd vhci_hcd.0: Device attached [ 1030.098309][T22190] vhci_hcd: connection reset by peer [ 1030.115279][ T3460] vhci_hcd vhci_hcd.3: stop threads [ 1030.115367][ T3460] vhci_hcd vhci_hcd.3: release socket [ 1030.116630][ T3460] vhci_hcd vhci_hcd.3: disconnect device [ 1030.237141][T16897] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1030.370617][ T5895] usb 44-1: SetAddress Request (6) to port 0 [ 1030.406629][ T5895] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1030.658569][T22304] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1030.744556][T22298] vhci_hcd: connection reset by peer [ 1030.788299][ T3460] vhci_hcd vhci_hcd.5: stop threads [ 1030.808451][ T3460] vhci_hcd vhci_hcd.5: release socket [ 1030.836830][ T3460] vhci_hcd vhci_hcd.5: disconnect device [ 1031.965635][T22321] batman_adv: batadv0: Adding interface: dummy0 [ 1031.971918][T22321] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.055238][T22321] batman_adv: batadv0: Interface activated: dummy0 [ 1032.118297][T22326] batadv0: mtu less than device minimum [ 1032.126180][T22326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1032.137769][T22326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1032.148941][T22326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1032.160105][T22326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1032.171223][T22326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1032.182320][T22326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1032.193575][T22326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1032.204697][T22326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1032.215846][T22326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1034.002048][T22357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5011'. [ 1034.420731][T22358] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1034.427286][T22358] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1034.522874][T22358] vhci_hcd vhci_hcd.0: Device attached [ 1034.586995][T22360] vhci_hcd: connection closed [ 1034.587980][T16438] vhci_hcd vhci_hcd.1: stop threads [ 1034.597998][T16438] vhci_hcd vhci_hcd.1: release socket [ 1034.606561][T16438] vhci_hcd vhci_hcd.1: disconnect device [ 1034.792344][T22368] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1034.859369][T22368] netlink: 'syz.5.5013': attribute type 10 has an invalid length. [ 1035.707873][ T5895] usb 44-1: device descriptor read/8, error -110 [ 1036.538377][ T5895] usb usb44-port1: attempt power cycle [ 1037.444372][ T5895] usb usb44-port1: unable to enumerate USB device [ 1037.511003][T22409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5026'. [ 1038.530127][ T30] audit: type=1326 audit(1764114167.311:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22406 comm="syz.0.5023" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc4ed8f749 code=0x0 [ 1042.063240][ T5824] Bluetooth: unknown link type 128 [ 1044.134196][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 1044.855117][T22543] ip6gre1: entered promiscuous mode [ 1044.860371][T22543] ip6gre1: entered allmulticast mode [ 1044.899293][T22543] team0: Device ip6gre1 is of different type [ 1045.357903][T22546] block nbd2: not configured, cannot reconfigure [ 1045.440297][T22556] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1046.706701][T22586] ALSA: mixer_oss: invalid OSS volume '' [ 1047.685871][T22593] ip6gre1: entered promiscuous mode [ 1047.691098][T22593] ip6gre1: entered allmulticast mode [ 1047.746457][T22593] team0: Device ip6gre1 is of different type [ 1048.179912][T22605] block nbd0: not configured, cannot reconfigure [ 1048.292695][T22599] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1048.299245][T22599] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1048.333480][T22604] vhci_hcd: connection closed [ 1048.334002][T22599] vhci_hcd vhci_hcd.0: Device attached [ 1048.347996][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1048.353469][ T36] vhci_hcd vhci_hcd.2: release socket [ 1048.379697][T22586] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1048.386245][T22586] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1048.408680][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1049.132710][T22586] vhci_hcd vhci_hcd.0: Device attached [ 1050.054916][T10273] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1050.143416][T10273] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 1050.379224][T22623] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1050.410835][T22625] fuse: Unknown parameter 'grou00000000000000000000' [ 1051.746478][T22651] ip6gre1: entered promiscuous mode [ 1051.776531][T22651] ip6gre1: entered allmulticast mode [ 1051.821643][T22651] team0: Device ip6gre1 is of different type [ 1051.914422][T22652] block nbd5: not configured, cannot reconfigure [ 1053.100298][T22673] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1053.106832][T22673] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1053.237257][T22673] vhci_hcd vhci_hcd.0: Device attached [ 1053.300798][T22677] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1053.763359][T22674] vhci_hcd: connection closed [ 1053.763692][ T36] vhci_hcd vhci_hcd.3: stop threads [ 1053.899678][ T36] vhci_hcd vhci_hcd.3: release socket [ 1053.907973][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 1054.439631][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.010116][T22700] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1055.016674][T22700] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1055.068753][T22700] vhci_hcd vhci_hcd.0: Device attached [ 1055.121383][T22610] vhci_hcd: connection reset by peer [ 1055.127004][ T6267] vhci_hcd vhci_hcd.1: stop threads [ 1055.132274][ T6267] vhci_hcd vhci_hcd.1: release socket [ 1055.146365][ T6267] vhci_hcd vhci_hcd.1: disconnect device [ 1055.443749][T10273] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1055.543358][T16077] usb 44-1: SetAddress Request (10) to port 0 [ 1055.549486][T16077] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1055.574297][T22701] vhci_hcd: connection closed [ 1055.579805][ T36] vhci_hcd vhci_hcd.5: stop threads [ 1055.600189][ T36] vhci_hcd vhci_hcd.5: release socket [ 1055.608712][ T36] vhci_hcd vhci_hcd.5: disconnect device [ 1055.639252][T22710] fuse: Unknown parameter 'grou00000000000000000000' [ 1056.704324][T22732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5115'. [ 1056.829737][T22731] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1059.301566][T22756] fuse: Unknown parameter 'group_i00000000000000000000' [ 1060.254283][T22789] fuse: Unknown parameter 'group_i00000000000000000000' [ 1060.716971][T16077] usb 44-1: device descriptor read/8, error -110 [ 1061.506353][T16077] usb usb44-port1: attempt power cycle [ 1062.064274][T16077] usb usb44-port1: unable to enumerate USB device [ 1062.935229][T22823] fuse: Unknown parameter 'group_i00000000000000000000' [ 1063.127809][T22830] ip6gre1: entered promiscuous mode [ 1063.133025][T22830] ip6gre1: entered allmulticast mode [ 1063.153692][T22832] ieee802154 phy0 wpan0: encryption failed: -22 [ 1063.185337][T22830] team0: Device ip6gre1 is of different type [ 1063.261474][T22835] block nbd5: not configured, cannot reconfigure [ 1063.830262][T22840] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1063.836814][T22840] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1063.850833][T22840] vhci_hcd vhci_hcd.0: Device attached [ 1063.873572][T22840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5146'. [ 1064.175771][T22848] vhci_hcd: connection closed [ 1064.362522][ T6283] vhci_hcd vhci_hcd.2: stop threads [ 1064.407242][T10273] usb 38-1: SetAddress Request (19) to port 0 [ 1064.448633][ T6283] vhci_hcd vhci_hcd.2: release socket [ 1064.470709][T10273] usb 38-1: new SuperSpeed USB device number 19 using vhci_hcd [ 1064.499177][ T6283] vhci_hcd vhci_hcd.2: disconnect device [ 1066.637878][T22869] fuse: Unknown parameter 'group_id00000000000000000000' [ 1067.273778][T22881] ip6gre1: entered promiscuous mode [ 1067.729687][T22881] ip6gre1: entered allmulticast mode [ 1067.780450][T22881] team0: Device ip6gre1 is of different type [ 1068.669742][T22892] block nbd5: not configured, cannot reconfigure [ 1069.606787][T10273] usb 38-1: device descriptor read/8, error -110 [ 1069.675484][T22933] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1069.682027][T22933] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1069.770540][T22933] vhci_hcd vhci_hcd.0: Device attached [ 1069.789798][T22941] ALSA: mixer_oss: invalid OSS volume '' [ 1070.005256][T10273] usb usb38-port1: attempt power cycle [ 1070.779940][T20124] usb 44-1: SetAddress Request (14) to port 0 [ 1070.786151][T20124] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1070.795204][T22934] vhci_hcd: connection closed [ 1070.795528][ T6283] vhci_hcd vhci_hcd.5: stop threads [ 1070.813278][ T6283] vhci_hcd vhci_hcd.5: release socket [ 1070.828674][T22947] ip6gre1: entered promiscuous mode [ 1070.835592][ T6283] vhci_hcd vhci_hcd.5: disconnect device [ 1070.875913][T22947] ip6gre1: entered allmulticast mode [ 1071.382251][T22947] team0: Device ip6gre1 is of different type [ 1071.448327][T10273] usb usb38-port1: unable to enumerate USB device [ 1071.822708][T22953] block nbd0: not configured, cannot reconfigure [ 1072.367799][T22969] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5189'. [ 1074.925588][T22994] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1074.932147][T22994] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1075.126107][T22994] vhci_hcd vhci_hcd.0: Device attached [ 1075.555747][T22995] vhci_hcd: connection closed [ 1075.557003][ T2909] vhci_hcd vhci_hcd.1: stop threads [ 1075.557119][ T2909] vhci_hcd vhci_hcd.1: release socket [ 1075.557191][ T2909] vhci_hcd vhci_hcd.1: disconnect device [ 1075.893474][T20124] usb 44-1: device descriptor read/8, error -110 [ 1075.908075][T23006] ip6gre1: entered promiscuous mode [ 1075.922084][T23006] ip6gre1: entered allmulticast mode [ 1075.933568][T23006] team0: Device ip6gre1 is of different type [ 1076.017915][T23009] block nbd0: not configured, cannot reconfigure [ 1076.052862][T23011] fuse: Unknown parameter 'group_id00000000000000000000' [ 1076.293976][T20124] usb usb44-port1: attempt power cycle [ 1076.863904][T20124] usb usb44-port1: unable to enumerate USB device [ 1078.124397][T23039] syzkaller0: entered promiscuous mode [ 1078.247567][T23039] syzkaller0: entered allmulticast mode [ 1078.502631][T23051] ip6gre1: entered promiscuous mode [ 1078.509506][T23050] fuse: Bad value for 'user_id' [ 1078.533507][T23050] fuse: Bad value for 'user_id' [ 1078.554628][T23051] ip6gre1: entered allmulticast mode [ 1078.597489][T23051] team0: Device ip6gre1 is of different type [ 1078.683647][T23057] block nbd3: not configured, cannot reconfigure [ 1078.792015][T23053] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1079.006116][T23061] 9p: Bad value for 'rfdno' [ 1079.758355][T23060] Process accounting resumed [ 1082.076137][T23101] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1082.082690][T23101] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1082.187380][T23102] vhci_hcd: connection closed [ 1082.188108][T23101] vhci_hcd vhci_hcd.0: Device attached [ 1082.399332][T23109] netlink: 'syz.1.5225': attribute type 4 has an invalid length. [ 1082.409568][T16463] vhci_hcd vhci_hcd.3: stop threads [ 1082.436229][T16463] vhci_hcd vhci_hcd.3: release socket [ 1082.442177][T23109] netlink: 'syz.1.5225': attribute type 4 has an invalid length. [ 1082.461100][T16463] vhci_hcd vhci_hcd.3: disconnect device [ 1083.426234][T23116] ip6gre1: entered promiscuous mode [ 1083.431456][T23116] ip6gre1: entered allmulticast mode [ 1083.594359][T23116] team0: Device ip6gre1 is of different type [ 1083.669401][T23120] block nbd2: not configured, cannot reconfigure [ 1083.873993][ T5824] Bluetooth: unknown link type 128 [ 1085.557785][T23155] 9pnet_virtio: no channels available for device syz [ 1085.893363][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 1086.022191][T23163] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1086.028749][T23163] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1086.043429][T23163] vhci_hcd vhci_hcd.0: Device attached [ 1086.372836][T23164] vhci_hcd: connection closed [ 1086.375738][T16438] vhci_hcd vhci_hcd.3: stop threads [ 1086.396005][T23168] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1086.402550][T23168] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1086.417214][T16438] vhci_hcd vhci_hcd.3: release socket [ 1086.422796][T23168] vhci_hcd vhci_hcd.0: Device attached [ 1086.428490][T22863] usb 40-1: SetAddress Request (8) to port 0 [ 1086.435001][T16438] vhci_hcd vhci_hcd.3: disconnect device [ 1086.473790][T22863] usb 40-1: new SuperSpeed USB device number 8 using vhci_hcd [ 1086.495517][T22863] usb 40-1: enqueue for inactive port 0 [ 1086.623306][T23169] vhci_hcd: connection closed [ 1086.790941][ T6267] vhci_hcd vhci_hcd.2: stop threads [ 1086.800992][ T6267] vhci_hcd vhci_hcd.2: release socket [ 1086.816453][ T6267] vhci_hcd vhci_hcd.2: disconnect device [ 1086.994103][T22863] usb usb40-port1: attempt power cycle [ 1087.128049][T23177] ip6gre1: entered promiscuous mode [ 1087.142929][T23177] ip6gre1: entered allmulticast mode [ 1087.171257][T23177] team0: Device ip6gre1 is of different type [ 1087.218505][T23180] block nbd5: not configured, cannot reconfigure [ 1087.314639][T23181] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1087.321190][T23181] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1087.507038][T23181] vhci_hcd vhci_hcd.0: Device attached [ 1087.555164][T22863] usb usb40-port1: unable to enumerate USB device [ 1087.633268][T23182] vhci_hcd: connection closed [ 1087.646590][T15650] vhci_hcd vhci_hcd.0: stop threads [ 1087.686364][T15650] vhci_hcd vhci_hcd.0: release socket [ 1087.704133][T15650] vhci_hcd vhci_hcd.0: disconnect device [ 1087.844873][T23193] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5245'. [ 1088.645951][T23191] net_ratelimit: 10 callbacks suppressed [ 1088.645971][T23191] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1092.000464][T23229] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1092.007016][T23229] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1092.113423][T23229] vhci_hcd vhci_hcd.0: Device attached [ 1092.338940][T23231] vhci_hcd: connection closed [ 1092.371263][T16438] vhci_hcd vhci_hcd.1: stop threads [ 1092.393691][T20124] usb 36-1: SetAddress Request (16) to port 0 [ 1092.430284][T20124] usb 36-1: new SuperSpeed USB device number 16 using vhci_hcd [ 1092.502335][T16438] vhci_hcd vhci_hcd.1: release socket [ 1092.551379][T16438] vhci_hcd vhci_hcd.1: disconnect device [ 1093.560075][T23253] ip6gre1: entered promiscuous mode [ 1093.634122][T23253] ip6gre1: entered allmulticast mode [ 1093.635594][T23253] team0: Device ip6gre1 is of different type [ 1093.637519][T23257] 9pnet_virtio: no channels available for device syz [ 1093.724307][T23261] block nbd5: not configured, cannot reconfigure [ 1094.679665][T23273] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1097.355433][T23285] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1097.573676][T20124] usb 36-1: device descriptor read/8, error -110 [ 1098.035192][T20124] usb usb36-port1: attempt power cycle [ 1098.385861][T23306] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2670080939 (5340161878 ns) > initial count (411158038 ns). Using initial count to start timer. [ 1098.754433][T20124] usb usb36-port1: unable to enumerate USB device [ 1098.771003][T23319] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1098.777561][T23319] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1098.800299][T23319] vhci_hcd vhci_hcd.0: Device attached [ 1099.000062][T23320] vhci_hcd: connection closed [ 1099.001531][ T2909] vhci_hcd vhci_hcd.5: stop threads [ 1099.041842][ T2909] vhci_hcd vhci_hcd.5: release socket [ 1099.053027][ T2909] vhci_hcd vhci_hcd.5: disconnect device [ 1100.357635][T23342] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1100.364165][T23342] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1100.420986][T23343] vhci_hcd: connection closed [ 1100.424935][T23342] vhci_hcd vhci_hcd.0: Device attached [ 1100.467976][T16463] vhci_hcd vhci_hcd.1: stop threads [ 1100.494068][T16463] vhci_hcd vhci_hcd.1: release socket [ 1100.536276][T16463] vhci_hcd vhci_hcd.1: disconnect device [ 1102.949908][T23384] FAT-fs (loop5): unable to read boot sector [ 1105.498858][T23427] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1105.505403][T23427] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1106.375742][T23427] vhci_hcd vhci_hcd.0: Device attached [ 1106.663263][T16389] usb 38-1: SetAddress Request (24) to port 0 [ 1106.677975][T23428] vhci_hcd: connection closed [ 1106.678201][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1106.688657][T16389] usb 38-1: new SuperSpeed USB device number 24 using vhci_hcd [ 1106.805292][ T36] vhci_hcd vhci_hcd.2: release socket [ 1106.826318][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1109.575221][T23463] netlink: 'syz.0.5326': attribute type 13 has an invalid length. [ 1109.583309][T23463] netlink: 'syz.0.5326': attribute type 17 has an invalid length. [ 1110.035710][T23463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1111.935848][T16389] usb 38-1: device descriptor read/8, error -110 [ 1112.128198][T23490] FAT-fs (loop2): unable to read boot sector [ 1112.693860][T16389] usb usb38-port1: attempt power cycle [ 1113.345578][T23493] syzkaller0: entered promiscuous mode [ 1113.382109][T23493] syzkaller0: entered allmulticast mode [ 1113.596469][T16389] usb usb38-port1: unable to enumerate USB device [ 1114.027041][T23526] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1114.027069][T23526] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1114.027233][T23526] vhci_hcd vhci_hcd.0: Device attached [ 1114.183694][T23527] vhci_hcd: connection closed [ 1114.184379][T16679] vhci_hcd vhci_hcd.2: stop threads [ 1114.195341][T16679] vhci_hcd vhci_hcd.2: release socket [ 1114.200881][T16679] vhci_hcd vhci_hcd.2: disconnect device [ 1114.249143][T23533] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2670080939 (5340161878 ns) > initial count (411158038 ns). Using initial count to start timer. [ 1115.559391][T23552] syzkaller0: entered promiscuous mode [ 1115.566053][T23552] syzkaller0: entered allmulticast mode [ 1115.829153][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.402246][T23567] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1117.240909][T23578] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2670080939 (5340161878 ns) > initial count (411158038 ns). Using initial count to start timer. [ 1117.371265][T23581] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1118.414478][T23599] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1118.421033][T23599] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1118.766698][T23599] vhci_hcd vhci_hcd.0: Device attached [ 1119.063349][T11143] usb 44-1: SetAddress Request (19) to port 0 [ 1119.072619][T11143] usb 44-1: new SuperSpeed USB device number 19 using vhci_hcd [ 1119.244843][T23600] vhci_hcd: connection reset by peer [ 1119.270149][T15650] vhci_hcd vhci_hcd.5: stop threads [ 1119.307595][T15650] vhci_hcd vhci_hcd.5: release socket [ 1119.345120][T15650] vhci_hcd vhci_hcd.5: disconnect device [ 1119.625006][T23616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5373'. [ 1120.347945][T23618] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1121.642820][T23630] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1121.736218][T23632] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1121.742769][T23632] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1121.759914][T23632] vhci_hcd vhci_hcd.0: Device attached [ 1122.099499][T23633] vhci_hcd: connection closed [ 1122.107482][T16679] vhci_hcd vhci_hcd.1: stop threads [ 1122.409526][T16679] vhci_hcd vhci_hcd.1: release socket [ 1122.437000][ T5935] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 1122.441162][T16679] vhci_hcd vhci_hcd.1: disconnect device [ 1122.854706][T23651] netlink: 'syz.5.5383': attribute type 13 has an invalid length. [ 1122.862620][T23651] netlink: 'syz.5.5383': attribute type 17 has an invalid length. [ 1123.223164][T23660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5386'. [ 1124.109615][T23651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1124.213276][T11143] usb 44-1: device descriptor read/8, error -110 [ 1124.411458][T23662] geneve3: entered promiscuous mode [ 1124.421515][T23662] geneve3: entered allmulticast mode [ 1124.504998][ T3460] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1124.513979][ T3460] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1124.522818][T16438] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1124.590117][T16438] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1124.663903][T11143] usb usb44-port1: attempt power cycle [ 1124.734828][T23677] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1124.741378][T23677] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1124.754836][T23677] vhci_hcd vhci_hcd.0: Device attached [ 1124.944064][T23678] vhci_hcd: connection closed [ 1124.944209][T16679] vhci_hcd vhci_hcd.1: stop threads [ 1124.965488][T16679] vhci_hcd vhci_hcd.1: release socket [ 1124.965625][T16679] vhci_hcd vhci_hcd.1: disconnect device [ 1125.644540][T11143] usb usb44-port1: unable to enumerate USB device [ 1125.987726][T23693] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1126.550123][T23709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5400'. [ 1127.214052][T23715] netlink: 'syz.3.5401': attribute type 13 has an invalid length. [ 1127.221875][T23715] netlink: 'syz.3.5401': attribute type 17 has an invalid length. [ 1127.586301][T23723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5414'. [ 1127.596413][ T5935] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1128.360892][T23715] erspan0: left promiscuous mode [ 1128.589647][T23715] bridge0: port 3(gretap0) entered blocking state [ 1128.589766][T23715] bridge0: port 3(gretap0) entered forwarding state [ 1128.612095][T23715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.614213][T23715] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.618654][T23715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1128.695292][T23726] geneve3: entered promiscuous mode [ 1128.695317][T23726] geneve3: entered allmulticast mode [ 1129.046485][T23737] FAT-fs (loop5): unable to read boot sector [ 1129.934785][T22863] usb usb36-port1: attempt power cycle [ 1130.446722][T23762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5418'. [ 1130.972101][T22863] usb usb36-port1: unable to enumerate USB device [ 1131.872477][T23769] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1131.879038][T23769] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1131.895089][T23769] vhci_hcd vhci_hcd.0: Device attached [ 1132.117574][T23776] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1132.141887][T23770] vhci_hcd: connection closed [ 1132.142256][ T6283] vhci_hcd vhci_hcd.3: stop threads [ 1132.160760][ T6283] vhci_hcd vhci_hcd.3: release socket [ 1132.168205][ T6283] vhci_hcd vhci_hcd.3: disconnect device [ 1135.053355][T23800] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1136.229735][T23815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5432'. [ 1136.724134][T23817] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1136.730692][T23817] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1136.875034][T23817] vhci_hcd vhci_hcd.0: Device attached [ 1137.122782][T23818] vhci_hcd: connection closed [ 1137.123341][T15653] vhci_hcd vhci_hcd.0: stop threads [ 1137.191369][T15653] vhci_hcd vhci_hcd.0: release socket [ 1137.252320][T15653] vhci_hcd vhci_hcd.0: disconnect device [ 1137.284954][ T5935] usb 34-1: enqueue for inactive port 0 [ 1137.486943][T23832] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1137.493508][T23832] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1137.584404][T23832] vhci_hcd vhci_hcd.0: Device attached [ 1137.722205][T23833] vhci_hcd: connection closed [ 1137.722378][T15650] vhci_hcd vhci_hcd.1: stop threads [ 1137.740149][T15650] vhci_hcd vhci_hcd.1: release socket [ 1137.745930][T15650] vhci_hcd vhci_hcd.1: disconnect device [ 1137.821676][ T5935] usb usb34-port1: attempt power cycle [ 1138.042369][T23839] FAT-fs (loop3): unable to read boot sector [ 1139.044713][ T5935] usb usb34-port1: unable to enumerate USB device [ 1140.640740][T23869] netlink: 'syz.5.5443': attribute type 1 has an invalid length. [ 1140.659224][T23869] netlink: 'syz.5.5443': attribute type 4 has an invalid length. [ 1140.670959][T23869] netlink: 15334 bytes leftover after parsing attributes in process `syz.5.5443'. [ 1142.046508][T23884] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1143.907160][T23907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5455'. [ 1144.594750][T23914] ALSA: mixer_oss: invalid OSS volume '' [ 1144.622696][T23914] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1144.629246][T23914] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1144.747474][T23914] vhci_hcd vhci_hcd.0: Device attached [ 1144.932341][ T5895] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1145.013643][ T5895] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1145.843228][T23915] vhci_hcd: connection reset by peer [ 1145.848818][T15653] vhci_hcd vhci_hcd.5: stop threads [ 1145.857429][T23929] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1145.863951][T23929] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1145.873535][T15653] vhci_hcd vhci_hcd.5: release socket [ 1145.880941][T15653] vhci_hcd vhci_hcd.5: disconnect device [ 1145.903101][T23929] vhci_hcd vhci_hcd.0: Device attached [ 1146.215173][ T24] usb 34-1: SetAddress Request (16) to port 0 [ 1146.221666][ T24] usb 34-1: new SuperSpeed USB device number 16 using vhci_hcd [ 1146.243011][T23930] vhci_hcd: connection closed [ 1146.243445][T15650] vhci_hcd vhci_hcd.0: stop threads [ 1146.256007][T23938] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1146.266079][T15650] vhci_hcd vhci_hcd.0: release socket [ 1146.271564][T15650] vhci_hcd vhci_hcd.0: disconnect device [ 1149.874983][T23967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5472'. [ 1150.682087][ T5895] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1151.161226][T23985] ip6gre1: entered promiscuous mode [ 1151.188216][T23985] ip6gre1: entered allmulticast mode [ 1151.219341][T23985] team0: Device ip6gre1 is of different type [ 1151.410826][ T24] usb 34-1: device descriptor read/8, error -110 [ 1151.584857][T23990] block nbd2: not configured, cannot reconfigure [ 1151.815951][ T24] usb usb34-port1: attempt power cycle [ 1152.445199][ T24] usb usb34-port1: unable to enumerate USB device [ 1152.840061][T24006] FAT-fs (loop3): unable to read boot sector [ 1154.010387][T24013] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1155.393335][T24032] ip6gre1: entered promiscuous mode [ 1155.412876][T24032] ip6gre1: entered allmulticast mode [ 1155.464692][T24032] team0: Device ip6gre1 is of different type [ 1155.578305][T24040] block nbd0: not configured, cannot reconfigure [ 1157.061042][T24053] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1159.408068][T24082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5505'. [ 1159.784768][T24095] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1159.791323][T24095] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1159.799902][T24095] vhci_hcd vhci_hcd.0: Device attached [ 1160.086323][T24096] vhci_hcd: connection closed [ 1160.088890][T16438] vhci_hcd vhci_hcd.1: stop threads [ 1160.102133][T16438] vhci_hcd vhci_hcd.1: release socket [ 1160.107587][T16438] vhci_hcd vhci_hcd.1: disconnect device [ 1160.144578][T16077] usb 36-1: enqueue for inactive port 0 [ 1160.641245][T16077] usb usb36-port1: attempt power cycle [ 1161.460199][T24108] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1161.937248][T16077] usb usb36-port1: unable to enumerate USB device [ 1162.493095][T24117] syzkaller0: entered promiscuous mode [ 1162.498603][T24117] syzkaller0: entered allmulticast mode [ 1162.635031][T24131] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1162.641588][T24131] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1162.664856][T24131] vhci_hcd vhci_hcd.0: Device attached [ 1162.957234][T16389] usb 40-1: SetAddress Request (13) to port 0 [ 1162.965087][T24132] vhci_hcd: connection closed [ 1162.965342][T16679] vhci_hcd vhci_hcd.3: stop threads [ 1162.979766][T16679] vhci_hcd vhci_hcd.3: release socket [ 1162.983071][T16389] usb 40-1: new SuperSpeed USB device number 13 using vhci_hcd [ 1162.993369][T16679] vhci_hcd vhci_hcd.3: disconnect device [ 1163.028699][T16389] usb 40-1: enqueue for inactive port 0 [ 1163.421158][T16389] usb usb40-port1: attempt power cycle [ 1164.119540][T16389] usb usb40-port1: unable to enumerate USB device [ 1164.695108][T24155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5527'. [ 1164.909161][T24163] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1165.073813][T24171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5534'. [ 1167.593232][T24236] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1168.355415][T24247] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1168.361952][T24247] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1168.436483][T24248] vhci_hcd: connection closed [ 1168.457198][T24247] vhci_hcd vhci_hcd.0: Device attached [ 1168.474305][T24213] vhci_hcd vhci_hcd.5: stop threads [ 1168.481843][T24213] vhci_hcd vhci_hcd.5: release socket [ 1168.491650][T24213] vhci_hcd vhci_hcd.5: disconnect device [ 1168.882827][T24264] netlink: 'syz.0.5550': attribute type 4 has an invalid length. [ 1169.308302][T24265] netlink: 'syz.0.5550': attribute type 4 has an invalid length. [ 1173.413956][T24312] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1173.420516][T24312] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1173.436318][T24312] vhci_hcd vhci_hcd.0: Device attached [ 1173.619545][T24319] ip6gre1: entered promiscuous mode [ 1173.655507][T24313] vhci_hcd: connection closed [ 1173.655942][T24213] vhci_hcd vhci_hcd.5: stop threads [ 1173.673040][T24213] vhci_hcd vhci_hcd.5: release socket [ 1173.678539][T24213] vhci_hcd vhci_hcd.5: disconnect device [ 1173.752630][T24319] ip6gre1: entered allmulticast mode [ 1173.770545][T24319] team0: Device ip6gre1 is of different type [ 1173.780170][T24321] block nbd2: not configured, cannot reconfigure [ 1174.278342][T24331] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1174.284882][T24331] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1174.309836][T24331] vhci_hcd vhci_hcd.0: Device attached [ 1174.533341][T24332] vhci_hcd: connection closed [ 1174.553148][ T6267] vhci_hcd vhci_hcd.1: stop threads [ 1174.648570][ T6267] vhci_hcd vhci_hcd.1: release socket [ 1174.662081][T16389] usb 36-1: SetAddress Request (29) to port 0 [ 1174.669246][T16389] usb 36-1: new SuperSpeed USB device number 29 using vhci_hcd [ 1174.791111][ T6267] vhci_hcd vhci_hcd.1: disconnect device [ 1175.651124][T16389] usb 36-1: enqueue for inactive port 0 [ 1176.427434][T16389] usb usb36-port1: attempt power cycle [ 1176.812302][T24359] ip6gre1: entered promiscuous mode [ 1176.817652][T24359] ip6gre1: entered allmulticast mode [ 1176.826125][T24359] team0: Device ip6gre1 is of different type [ 1176.951304][T24361] block nbd5: not configured, cannot reconfigure [ 1177.163957][T24370] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1177.248399][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.333476][T16389] usb usb36-port1: unable to enumerate USB device [ 1179.783717][T24425] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1180.020727][T24436] ip6gre1: entered promiscuous mode [ 1180.059450][T24436] ip6gre1: entered allmulticast mode [ 1180.091021][T24436] team0: Device ip6gre1 is of different type [ 1180.279589][T24446] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1180.286128][T24446] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1180.438863][T24448] block nbd2: not configured, cannot reconfigure [ 1180.851515][T24446] vhci_hcd vhci_hcd.0: Device attached [ 1181.080595][T24449] vhci_hcd: connection closed [ 1181.080781][ T6007] vhci_hcd vhci_hcd.1: stop threads [ 1181.098641][ T6007] vhci_hcd vhci_hcd.1: release socket [ 1181.123644][ T6007] vhci_hcd vhci_hcd.1: disconnect device [ 1181.168376][T16389] usb 36-1: enqueue for inactive port 0 [ 1181.547114][T24474] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1181.629273][T24476] ALSA: mixer_oss: invalid OSS volume '' [ 1181.669144][T16389] usb usb36-port1: attempt power cycle [ 1181.721452][T24476] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1181.727993][T24476] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1182.358957][T16389] usb usb36-port1: unable to enumerate USB device [ 1182.596206][T24476] vhci_hcd vhci_hcd.0: Device attached [ 1182.747866][T22863] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1182.826327][T22863] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 1182.954337][T24491] ip6gre1: entered promiscuous mode [ 1182.975983][T24491] ip6gre1: entered allmulticast mode [ 1182.993015][T24491] team0: Device ip6gre1 is of different type [ 1183.044814][T24496] block nbd1: not configured, cannot reconfigure [ 1183.519859][T24477] vhci_hcd: connection reset by peer [ 1183.528676][ T80] vhci_hcd vhci_hcd.5: stop threads [ 1183.545103][ T80] vhci_hcd vhci_hcd.5: release socket [ 1183.565331][ T80] vhci_hcd vhci_hcd.5: disconnect device [ 1183.999727][T24520] ip6gre1: entered promiscuous mode [ 1184.057726][T24523] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1184.077061][T24520] ip6gre1: entered allmulticast mode [ 1184.164951][T24520] team0: Device ip6gre1 is of different type [ 1184.209100][T24528] block nbd3: not configured, cannot reconfigure [ 1186.959379][T24559] ip6gre1: entered promiscuous mode [ 1186.976943][T24559] ip6gre1: entered allmulticast mode [ 1187.000084][T24559] team0: Device ip6gre1 is of different type [ 1187.069624][T24564] block nbd0: not configured, cannot reconfigure [ 1187.791777][T24585] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1187.798333][T24585] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1187.884631][T24585] vhci_hcd vhci_hcd.0: Device attached [ 1187.964796][T22863] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1188.046464][T24586] vhci_hcd: connection closed [ 1188.046679][ T2909] vhci_hcd vhci_hcd.0: stop threads [ 1188.204296][ T2909] vhci_hcd vhci_hcd.0: release socket [ 1188.228220][ T2909] vhci_hcd vhci_hcd.0: disconnect device [ 1188.792473][ T24] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1189.911419][T24609] ip6gre1: entered promiscuous mode [ 1189.928045][T24609] ip6gre1: entered allmulticast mode [ 1189.938881][T24609] team0: Device ip6gre1 is of different type [ 1190.011519][T24613] block nbd2: not configured, cannot reconfigure [ 1191.873654][T24641] ALSA: mixer_oss: invalid OSS volume '' [ 1192.311984][T24641] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1192.318518][T24641] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1192.698945][T24660] ip6gre1: entered promiscuous mode [ 1192.705625][T24660] ip6gre1: entered allmulticast mode [ 1192.713471][T24641] vhci_hcd vhci_hcd.0: Device attached [ 1192.725710][T24660] team0: Device ip6gre1 is of different type [ 1192.886031][T24666] block nbd1: not configured, cannot reconfigure [ 1192.952121][T22863] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1193.032799][T22863] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 1194.060793][T24658] vhci_hcd: connection reset by peer [ 1194.160525][ T24] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1194.171599][ T2909] vhci_hcd vhci_hcd.5: stop threads [ 1194.176821][ T2909] vhci_hcd vhci_hcd.5: release socket [ 1194.220621][ T2909] vhci_hcd vhci_hcd.5: disconnect device [ 1196.024766][T24698] ip6gre1: entered promiscuous mode [ 1196.045038][T24698] ip6gre1: entered allmulticast mode [ 1196.090896][T24698] team0: Device ip6gre1 is of different type [ 1196.111086][T24699] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 1196.145414][T24699] kvm: requested 109790 ns i8254 timer period limited to 200000 ns [ 1196.186901][T24699] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 1196.191956][T24704] block nbd2: not configured, cannot reconfigure [ 1196.223435][T24699] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 1196.258847][T24699] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 1196.292216][T24699] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 1196.318712][T24699] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 1196.370668][T24699] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 1196.411222][T24699] kvm: requested 118171 ns i8254 timer period limited to 200000 ns [ 1196.440043][T24699] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 1198.198624][T22863] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1200.176728][T24740] ip6gre1: entered promiscuous mode [ 1200.191760][T24740] ip6gre1: entered allmulticast mode [ 1200.219412][T24740] team0: Device ip6gre1 is of different type [ 1200.315724][T24741] block nbd5: not configured, cannot reconfigure [ 1201.606815][T24760] siw: device registration error -23 [ 1204.302839][T24792] block nbd3: not configured, cannot reconfigure [ 1207.495316][T24784] ip6gre1: entered promiscuous mode [ 1207.500569][T24784] ip6gre1: entered allmulticast mode [ 1207.518527][T24784] team0: Device ip6gre1 is of different type [ 1207.802639][T24827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5719'. [ 1209.647193][T24848] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1210.718159][T24858] [ 1210.720531][T24858] ================================================ [ 1210.727028][T24858] WARNING: lock held when returning to user space! [ 1210.733531][T24858] syzkaller #0 Not tainted [ 1210.737941][T24858] ------------------------------------------------ [ 1210.744418][T24858] syz.5.5726/24858 is leaving the kernel with locks still held! [ 1210.752023][T24858] 1 lock held by syz.5.5726/24858: [ 1210.757108][T24858] #0: ffff88805df2c420 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90