last executing test programs: 2m35.13060659s ago: executing program 2 (id=3656): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffff8}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000019c0)=""/4107, 0x100b}, {&(0x7f0000000040)=""/99, 0x63}, {0x0}, {&(0x7f0000001700)=""/121, 0x79}, {&(0x7f0000001780)=""/250, 0xfa}, {&(0x7f0000001880)=""/162, 0xa2}], 0x6}, 0xaa}, {{0x0, 0x0, 0x0}, 0x3}], 0x5, 0x0, 0x0) 2m35.10015886s ago: executing program 2 (id=3657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x0, 0xfff}}]}) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) 2m34.904273424s ago: executing program 2 (id=3659): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000002240)="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", 0x457, 0x4004085, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0x5, 0x4) 2m34.817498017s ago: executing program 2 (id=3660): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000002c40), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0x0, 0x2000000000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x4, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) mount$fuse(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x404, 0x0) syz_fuse_handle_req(r1, &(0x7f000000e0c0)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x90, 0x0, 0xf, {0x3, 0x0, 0x200001, 0x0, 0x0, 0x707, {0x0, 0x3, 0xb2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20000000, 0x4000, 0x8, 0x0, 0xffffffffffffffff, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m33.899167816s ago: executing program 2 (id=3677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x5, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2m33.454440792s ago: executing program 2 (id=3680): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffff8}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000019c0)=""/4107, 0x100b}, {&(0x7f0000000040)=""/99, 0x63}, {0x0}, {&(0x7f0000001700)=""/121, 0x79}, {&(0x7f0000001780)=""/250, 0xfa}, {&(0x7f0000001880)=""/162, 0xa2}], 0x6}, 0xaa}, {{0x0, 0x0, 0x0}, 0x3}], 0x5, 0x0, 0x0) 2m33.243182017s ago: executing program 32 (id=3680): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffff8}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000019c0)=""/4107, 0x100b}, {&(0x7f0000000040)=""/99, 0x63}, {0x0}, {&(0x7f0000001700)=""/121, 0x79}, {&(0x7f0000001780)=""/250, 0xfa}, {&(0x7f0000001880)=""/162, 0xa2}], 0x6}, 0xaa}, {{0x0, 0x0, 0x0}, 0x3}], 0x5, 0x0, 0x0) 12.540285401s ago: executing program 4 (id=4485): unshare(0x40400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0x5, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0xfe3, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x401, 0x2, 0xfe, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x3, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x0, 0x36ae765f, 0x401, 0x9, 0x200000, 0x4, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x400) dup3(r1, r0, 0x80000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 12.378655669s ago: executing program 4 (id=4486): ioperm(0x7, 0x81, 0xfffffffffffffffe) r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) syslog(0x2, &(0x7f0000000180)=""/117, 0x75) 12.207900009s ago: executing program 4 (id=4487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200affd14120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 8.996875128s ago: executing program 5 (id=4497): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000300), 0x5c) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db8000000000000000000000001ff0e"], 0x0) 8.098408604s ago: executing program 1 (id=4500): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r2}, &(0x7f00000016c0), &(0x7f0000001700)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r2, &(0x7f0000000300)}, 0x20) 7.761682332s ago: executing program 0 (id=4502): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000100)=0xdb, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x2000000) mkdirat(0xffffffffffffff9c, 0x0, 0x1b9) 7.602121289s ago: executing program 1 (id=4503): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e000108000740000000011800068014000400000000000000"], 0xac}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000000c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 7.112938761s ago: executing program 0 (id=4504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x9, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "f9fbffffffffffff"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x40) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)}, 0x20000885) 6.929522229s ago: executing program 3 (id=4505): socket$kcm(0xa, 0x3, 0x87) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfefbfff, 0x1000, 0x5, 0x1}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x100000000, 0x200008, 0x4000000000011, 0x1, 0xfffffffffffffffc, 0x3fffffffffffffff, 0x1000000000000007, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000100), 0x10) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) bind$can_raw(r4, &(0x7f0000000080)={0x1d, r8}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8, 0xf}, {0x7, 0xf}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x4000098) 4.814393575s ago: executing program 1 (id=4506): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000180)=@keyring) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000180)=ANY=[], 0xffdd) 4.738315081s ago: executing program 5 (id=4507): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x44}}, 0x0) 4.737946865s ago: executing program 4 (id=4508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}]]}, 0x30}}, 0x0) 4.706102787s ago: executing program 3 (id=4509): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/214, 0x100000, 0x1000, 0x9}, 0x20) 4.684572704s ago: executing program 0 (id=4510): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) 4.637882219s ago: executing program 1 (id=4511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf2507000000080001000200000008000300", @ANYRES32=r3], 0x98}, 0x1, 0x0, 0x0, 0x91}, 0x24004884) 4.60855137s ago: executing program 5 (id=4512): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x2000cc80) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20000004) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40010, &(0x7f0000000840)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="4060000002400000140012800800010067726500080002800400120008001f00ff"], 0x3c}, 0x1, 0x0, 0x0, 0x40c0000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001500010300000000000000000b000000fffa7b208cef4d4660909bc85572ad21923632778dca32b3c73b21e2064796ac44161997e66fb9b4806a818043b98a537ed167db4c0c45"], 0x14}}, 0x40088c0) 4.562743357s ago: executing program 0 (id=4513): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x40005}, 0x2004a002) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) socket$inet(0x2, 0xa, 0x9268) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x5}, &(0x7f00000002c0)=0x8) read$dsp(0xffffffffffffffff, &(0x7f00000017c0)=""/4086, 0xff6) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 4.505792836s ago: executing program 4 (id=4514): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x7}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x182, 0x2, 0x10, 0xf1, 0x10000000000003, 0x1, 0x5, 0x0, 0x29, 0x0, 0xf48, 0x9, 0xfffffffffffffffa], 0xe000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x7529, 0x8000000009, 0x400000000000803, 0x0, 0x9, 0x2], 0xeeee8000, 0x306780}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xf, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0xe, 0x2, 0x87}, {0x3000, 0xdddd0000, 0x4, 0x5, 0x3, 0x6, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0xfec00000, 0xeeee0000, 0x4, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x6, 0x2, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0xdddd0000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x8, 0x3, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xf, 0x5, 0xcd, 0x7, 0x9, 0x9, 0x7, 0xc, 0xb0, 0x91}, {0xffff1000, 0x30}, {0x100000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0x2, 0xdc01, 0x100000, [0x6800000000000000, 0x3, 0x4, 0x8]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.434420715s ago: executing program 1 (id=4515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfa0f, 0xffffffff}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = socket$key(0xf, 0x3, 0x2) fcntl$getflags(r4, 0x40a) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create1(0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) fcntl$setstatus(r5, 0x4, 0x2000) shutdown(r5, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) sched_getattr(r6, &(0x7f0000000340)={0x38}, 0x38, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000840)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035517030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r7) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r8, 0x0, 0xf501}, &(0x7f00000007c0)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) 4.433918811s ago: executing program 3 (id=4516): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e000108000740000000011800068014000400000000000000"], 0xac}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000000c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 4.230068272s ago: executing program 5 (id=4517): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x24008080) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f028, 0x1001}) io_submit(0x0, 0x7, &(0x7f0000000980)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xf8d2, r2, &(0x7f0000000180)="5a8a7fca5ed826bc95be2191e579e4cd9d8fd69d4da9cea19c1374a6f6", 0x1d, 0x101}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x9, r2, &(0x7f0000000240)="257cee585b6896c80ca30c76f8ac71533926311298baa9355a1367a5801fe4584711899b657ee53c29909e386ddebf0a10b2fed8e76b494879", 0x39, 0x3, 0x0, 0x3, r4}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x5, r3, &(0x7f0000000300)="b2e35dda68a72a56a38e4493916ad784af9549f7e90fdb2e29acd654235afd89dee67c5f94cc2c5fb925557817947b41895780450f827fd274963f7cbaee38ce", 0x40, 0x7, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x5, r5, &(0x7f0000000440)="8b78cd4a66705c024fe94a4d48165c03befa60e497e367390e51cad85eac14f47896ca685c19b4ec5943e01f15bfa52fa8feb515106d46a85b683e83a7be27ab144294d54f1c39a33376462facc3289af79eb21811fe9382f33a276a93e8ffc3aaedaccbafdbfd6e3a8f23c2615b98a08c5626d9358c67c1fd4b36af83794e9c95eccc3807a7fc42a80b64281478", 0x8e, 0x3, 0x0, 0x6}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0xb34, r2, &(0x7f0000000680)="dc64351d6eee2597bb566ee922d9fdc2ff77088f96a2544f200e1013d1360a5ad6f1dec72ab12de8406e1069a08e4fa0827acf2a0f8b2ae1961b2d7aeb4b2b072391a1dbf70f343f49729867530ca8dab1975521dc1e87d1849701aa28114ea2dbb00bf7a848f042748de56a563e9e16283c40f0beadbc498926cbba66b6f746c011", 0x82, 0x1ff, 0x0, 0x1}, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000008c0)="f9e362da4d3e2668141fbaf4ebedab44079a20f78551dd85c48748a65ecbe137736b19ce2126ed5be5fa3b7e4b4904a6b88f", 0x32, 0x0, 0x0, 0x2}]) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x3}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201510100000010da092b"], 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000040), 0x12) syz_usb_control_io$hid(r10, 0x0, 0x0) 4.166415682s ago: executing program 3 (id=4518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x5, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) 3.783846471s ago: executing program 3 (id=4519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200affd14120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 3.678812401s ago: executing program 4 (id=4520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x9, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "f9fbffffffffffff"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x40) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)}, 0x20000885) 2.988266182s ago: executing program 1 (id=4521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) 2.002124299s ago: executing program 0 (id=4522): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x44}}, 0x0) 1.888531563s ago: executing program 0 (id=4523): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb81003000080600010800060400"], 0x0) 946.363126ms ago: executing program 5 (id=4524): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 62.006736ms ago: executing program 5 (id=4525): syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x8800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 0s ago: executing program 3 (id=4526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) writev(r0, &(0x7f0000001800)=[{&(0x7f0000000300)="1e8e81cff69486651c9166b506f5", 0xe}], 0x1) kernel console output (not intermixed with test programs): 60 now attached to major 180 minor 0 [ 427.164587][T13835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.250882][T13835] veth0_vlan: entered promiscuous mode [ 427.268667][T13835] veth1_vlan: entered promiscuous mode [ 427.336416][T13835] veth0_macvtap: entered promiscuous mode [ 427.342378][T13835] veth1_macvtap: entered promiscuous mode [ 427.386081][T13835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.392719][T13835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.434802][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.434851][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.435266][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.435418][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.463952][ T5706] wiimote 0005:057E:0330.0011: detected device: Nintendo Wii Remote Plus (Gen 2) [ 427.509111][ T5706] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0011/input/input40 [ 427.528594][ T5706] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0011/input/input41 [ 427.568309][ T5706] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0011/input/input39 [ 427.731375][T14003] JFS: charset not found [ 427.808124][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.808148][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.909228][ T25] usb 4-1: USB disconnect, device number 17 [ 427.912701][T12566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.912720][T12566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.956662][ T25] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 428.119798][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3202'. [ 428.124317][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3202'. [ 428.129641][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3202'. [ 428.132493][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3202'. [ 428.133568][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3202'. [ 428.188214][T14016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3140'. [ 428.500771][T13085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 428.527615][T13085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 428.549208][T13085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 428.567443][ T4935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 428.572826][ T4935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 428.826281][T14028] syzkaller0: entered promiscuous mode [ 428.826303][T14028] syzkaller0: entered allmulticast mode [ 428.855030][T14028] tipc: Started in network mode [ 428.855062][T14028] tipc: Node identity 32d71800875f, cluster identity 4711 [ 428.855287][T14028] tipc: Enabled bearer , priority 0 [ 428.857649][T14027] tipc: Resetting bearer [ 428.876105][T14027] tipc: Disabling bearer [ 429.045370][ T5630] Bluetooth: hci1: command tx timeout [ 429.301249][T14047] netlink: 15 bytes leftover after parsing attributes in process `syz.0.3214'. [ 429.442231][T14025] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.442363][T14025] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.442467][T14025] bridge_slave_0: entered allmulticast mode [ 429.444175][T14025] bridge_slave_0: entered promiscuous mode [ 429.458000][T14025] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.458430][T14025] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.459248][T14025] bridge_slave_1: entered allmulticast mode [ 429.463266][T14025] bridge_slave_1: entered promiscuous mode [ 429.524017][T14025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.538416][T14025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.571321][T14025] team0: Port device team_slave_0 added [ 429.573759][T14025] team0: Port device team_slave_1 added [ 429.608528][T14025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.608551][T14025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.608571][T14025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.610127][T14025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.610142][T14025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.610170][T14025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.614651][ T925] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 429.733912][T14025] hsr_slave_0: entered promiscuous mode [ 429.741615][T14025] hsr_slave_1: entered promiscuous mode [ 429.742264][T14025] debugfs: 'hsr0' already exists in 'hsr' [ 429.742289][T14025] Cannot create hsr debugfs directory [ 429.784686][ T925] usb 1-1: Using ep0 maxpacket: 32 [ 429.787213][ T925] usb 1-1: unable to get BOS descriptor or descriptor too short [ 429.787260][ T925] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 429.789602][ T925] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 429.789627][ T925] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 429.789648][ T925] usb 1-1: config 14 has no interface number 0 [ 429.789664][ T925] usb 1-1: config 14 has no interface number 1 [ 429.789721][ T925] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 429.789738][ T925] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 429.789756][ T925] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 429.789776][ T925] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 429.789795][ T925] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 429.789826][ T925] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.789844][ T925] usb 1-1: config 14 interface 57 has no altsetting 0 [ 429.789855][ T925] usb 1-1: config 14 interface 228 has no altsetting 0 [ 429.791900][ T925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.791922][ T925] usb 1-1: Product: syz [ 429.791936][ T925] usb 1-1: Manufacturer: syz [ 429.791950][ T925] usb 1-1: SerialNumber: syz [ 430.286243][ T925] legousbtower 1-1:14.57: interrupt endpoints not found [ 430.309558][T14063] geneve0: entered promiscuous mode [ 430.314779][T14063] batman_adv: batadv0: Adding interface: macvlan2 [ 430.314797][T14063] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.314857][T14063] batman_adv: batadv0: Interface activated: macvlan2 [ 430.413849][T14025] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 430.648870][ T5630] Bluetooth: hci0: command tx timeout [ 430.687970][ T925] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 430.692094][ T925] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 430.785995][T14071] netlink: 15 bytes leftover after parsing attributes in process `syz.4.3224'. [ 430.869353][T14073] syzkaller0: entered promiscuous mode [ 430.869374][T14073] syzkaller0: entered allmulticast mode [ 430.887247][T14025] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 430.903646][T14025] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.930713][T14025] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 430.933634][T14025] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.950169][T14025] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 430.953890][T14025] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.985240][T14025] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 430.993108][T14025] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.241001][T14085] netlink: 'syz.3.3228': attribute type 1 has an invalid length. [ 431.273047][T14086] IPVS: length: 8 != 383101893624 [ 431.273866][T14086] JFS: charset not found [ 431.421790][ T82] batman_adv: batadv0: Interface deactivated: macvlan1 [ 431.444205][ T82] batman_adv: batadv0: Removing interface: macvlan1 [ 431.464688][ T5619] usb 1-1: USB disconnect, device number 20 [ 431.497179][ T5619] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 431.541589][ T82] bond0 (unregistering): Released all slaves [ 431.552305][ T82] bond1 (unregistering): Released all slaves [ 431.567302][ T82] bond2 (unregistering): Released all slaves [ 431.586140][ T82] bond3 (unregistering): Released all slaves [ 431.605199][ T82] bond4 (unregistering): Released all slaves [ 431.631831][ T82] bond5 (unregistering): Released all slaves [ 431.650101][ T82] bond6 (unregistering): Released all slaves [ 431.670450][ T82] bond7 (unregistering): Released all slaves [ 431.692230][ T82] bond8 (unregistering): Released all slaves [ 431.712577][ T82] bond9 (unregistering): Released all slaves [ 431.743065][ T82] bond10 (unregistering): Released all slaves [ 431.770278][ T82] bond11 (unregistering): Released all slaves [ 431.798738][ T82] bond12 (unregistering): (slave bond13): Releasing backup interface [ 431.799809][ T82] bond12 (unregistering): Released all slaves [ 431.829274][ T82] bond13 (unregistering): Released all slaves [ 431.848391][ T82] bond14 (unregistering): Released all slaves [ 431.929960][T14025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.977384][T14025] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.998529][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.998621][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.038285][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.038386][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.168679][T14025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 432.168705][T14025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 432.243378][T14025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.287922][ T82] tipc: Disabling bearer [ 432.288056][ T82] tipc: Left network mode [ 432.352065][T14025] veth0_vlan: entered promiscuous mode [ 432.364276][T14100] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3234'. [ 432.389386][T14025] veth1_vlan: entered promiscuous mode [ 432.481393][T14025] veth0_macvtap: entered promiscuous mode [ 432.493609][T14025] veth1_macvtap: entered promiscuous mode [ 432.558194][T14025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.736548][ T5630] Bluetooth: hci0: command tx timeout [ 432.742996][T14025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.761367][T14105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3236'. [ 433.086780][T14111] batman_adv: batadv0: Adding interface: syzkaller0 [ 433.086803][T14111] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.086828][T14111] batman_adv: batadv0: Interface activated: syzkaller0 [ 433.174738][ T3383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.176257][ T145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.176321][ T145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.176359][ T145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.225519][T14109] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 433.252840][T14109] batman_adv: batadv0: Removing interface: syzkaller0 [ 433.278243][ T82] hsr_slave_0: left promiscuous mode [ 433.613292][ T305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.613316][ T305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.634475][ T5683] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 433.740335][ T3383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.740357][ T3383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.824810][ T5683] usb 1-1: Using ep0 maxpacket: 32 [ 433.853243][ T5683] usb 1-1: unable to get BOS descriptor or descriptor too short [ 433.853296][ T5683] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 433.872088][ T5683] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 433.872129][ T5683] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 433.872151][ T5683] usb 1-1: config 14 has no interface number 0 [ 433.872212][ T5683] usb 1-1: config 14 has no interface number 1 [ 433.872275][ T5683] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 433.872301][ T5683] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 433.872329][ T5683] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 433.872358][ T5683] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 433.872388][ T5683] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 433.872415][ T5683] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.872444][ T5683] usb 1-1: config 14 interface 57 has no altsetting 0 [ 433.872463][ T5683] usb 1-1: config 14 interface 228 has no altsetting 0 [ 433.981867][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.981898][ T5683] usb 1-1: Product: syz [ 433.981930][ T5683] usb 1-1: Manufacturer: syz [ 433.981946][ T5683] usb 1-1: SerialNumber: syz [ 434.370078][T14137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3248'. [ 434.417800][ T5683] legousbtower 1-1:14.57: interrupt endpoints not found [ 434.804836][ T5630] Bluetooth: hci0: command tx timeout [ 434.824844][ T5683] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 434.846101][ T5683] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 435.078839][T14154] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3255'. [ 435.095935][T14151] syzkaller0: entered promiscuous mode [ 435.095961][T14151] syzkaller0: entered allmulticast mode [ 435.338076][T14167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3261'. [ 435.341790][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'. [ 435.342402][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'. [ 435.342774][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'. [ 435.343128][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'. [ 435.343302][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'. [ 435.427277][T14168] IPVS: length: 8 != 383101893624 [ 435.431802][T14168] JFS: charset not found [ 435.606319][T14173] syz_tun: entered allmulticast mode [ 435.632968][ T5691] usb 1-1: USB disconnect, device number 21 [ 435.641563][T14171] wg2: entered allmulticast mode [ 435.716527][ T5691] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 435.772248][T14169] syz_tun: left allmulticast mode [ 435.892069][T14177] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 435.892187][T14177] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 436.317151][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3274'. [ 436.411747][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3278'. [ 436.580930][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.580992][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.581027][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.581060][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.850182][T14221] syzkaller0: entered promiscuous mode [ 436.850206][T14221] syzkaller0: entered allmulticast mode [ 436.884769][ T5630] Bluetooth: hci0: command tx timeout [ 437.166481][T14234] netlink: 'syz.3.3291': attribute type 1 has an invalid length. [ 437.214983][ T925] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 437.374459][ T925] usb 1-1: Using ep0 maxpacket: 32 [ 437.377534][ T925] usb 1-1: unable to get BOS descriptor or descriptor too short [ 437.377598][ T925] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 437.380373][ T925] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 437.380401][ T925] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 437.380422][ T925] usb 1-1: config 14 has no interface number 0 [ 437.380440][ T925] usb 1-1: config 14 has no interface number 1 [ 437.380504][ T925] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 437.380531][ T925] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 437.380558][ T925] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 437.380587][ T925] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 437.380617][ T925] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 437.380646][ T925] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.380676][ T925] usb 1-1: config 14 interface 57 has no altsetting 0 [ 437.380695][ T925] usb 1-1: config 14 interface 228 has no altsetting 0 [ 437.391411][ T925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.391483][ T925] usb 1-1: Product: syz [ 437.391523][ T925] usb 1-1: Manufacturer: syz [ 437.391557][ T925] usb 1-1: SerialNumber: syz [ 437.857156][ T925] legousbtower 1-1:14.57: interrupt endpoints not found [ 438.012338][T14258] syzkaller0: entered promiscuous mode [ 438.012363][T14258] syzkaller0: entered allmulticast mode [ 438.194938][T14268] syzkaller0: entered promiscuous mode [ 438.194964][T14268] syzkaller0: entered allmulticast mode [ 438.264190][ T925] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 438.290571][ T925] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 438.750484][T14290] bridge_slave_0: left allmulticast mode [ 438.750514][T14290] bridge_slave_0: left promiscuous mode [ 438.753533][T14290] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.780537][T14290] bridge_slave_1: left allmulticast mode [ 438.780565][T14290] bridge_slave_1: left promiscuous mode [ 438.781340][T14290] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.822983][T14290] bond0: (slave bond_slave_0): Releasing backup interface [ 438.862940][T14290] bond0: (slave bond_slave_1): Releasing backup interface [ 438.872283][T14295] IPVS: length: 8 != 383101893624 [ 438.883790][T14295] JFS: charset not found [ 438.933132][T14290] team0: Port device team_slave_0 removed [ 438.949506][T14290] team0: Port device team_slave_1 removed [ 438.953716][T14290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.953745][T14290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.979613][T14290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.979641][T14290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.004198][T14290] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 439.055298][ T5619] usb 1-1: USB disconnect, device number 22 [ 439.062456][T14291] tipc: Started in network mode [ 439.062491][T14291] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 439.062711][T14291] tipc: Enabled bearer , priority 0 [ 439.092667][ T5619] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 439.112406][ T12] tipc: Resetting bearer [ 439.235545][T14306] syzkaller0: entered promiscuous mode [ 439.235570][T14306] syzkaller0: entered allmulticast mode [ 439.350349][T14312] tipc: New replicast peer: 255.255.255.255 [ 439.351002][T14312] tipc: Enabled bearer , priority 10 [ 439.422060][T14318] __nla_validate_parse: 10 callbacks suppressed [ 439.422084][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3329'. [ 439.447145][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3329'. [ 439.447764][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3329'. [ 439.448114][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3329'. [ 439.448422][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3329'. [ 439.448606][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3329'. [ 439.580272][T14324] syzkaller0: entered promiscuous mode [ 439.580298][T14324] syzkaller0: entered allmulticast mode [ 439.753178][T14328] syzkaller0: entered promiscuous mode [ 439.753205][T14328] syzkaller0: entered allmulticast mode [ 439.998636][T14341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3334'. [ 440.092012][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.092071][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.582564][ T925] tipc: Node number set to 11578026 [ 442.598143][ T5706] tipc: Node number set to 1703674191 [ 442.760310][T14355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3339'. [ 442.845346][T14358] syzkaller0: entered promiscuous mode [ 442.845371][T14358] syzkaller0: entered allmulticast mode [ 442.973348][T14365] syzkaller0: entered promiscuous mode [ 442.973372][T14365] syzkaller0: entered allmulticast mode [ 443.207578][T14379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3351'. [ 443.299307][T14381] syzkaller0: entered promiscuous mode [ 443.299336][T14381] syzkaller0: entered allmulticast mode [ 443.303715][T14376] syzkaller0: entered promiscuous mode [ 443.303736][T14376] syzkaller0: entered allmulticast mode [ 446.189159][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3359'. [ 446.189194][T14407] netlink: 'syz.1.3359': attribute type 30 has an invalid length. [ 446.208102][T14407] vxlan1: entered promiscuous mode [ 446.208182][T14407] vxlan1: entered allmulticast mode [ 446.240529][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3359'. [ 446.240565][T14408] netlink: 'syz.1.3359': attribute type 30 has an invalid length. [ 446.429262][T14408] vxlan1: entered promiscuous mode [ 446.429289][T14408] vxlan1: entered allmulticast mode [ 446.697086][T14425] syz_tun: entered allmulticast mode [ 446.702893][T14425] wg2: entered allmulticast mode [ 446.771064][T14424] syz_tun: left allmulticast mode [ 446.862729][T14431] syzkaller0: entered promiscuous mode [ 446.862755][T14431] syzkaller0: entered allmulticast mode [ 447.077481][T14429] syzkaller0: entered promiscuous mode [ 447.077503][T14429] syzkaller0: entered allmulticast mode [ 447.151050][T14438] syzkaller0: entered promiscuous mode [ 447.151070][T14438] syzkaller0: entered allmulticast mode [ 447.154203][T14441] syzkaller0: entered promiscuous mode [ 447.154224][T14441] syzkaller0: entered allmulticast mode [ 447.438768][T14450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3373'. [ 452.703936][T14473] netlink: 'syz.4.3383': attribute type 61 has an invalid length. [ 452.703963][T14473] netlink: 'syz.4.3383': attribute type 3 has an invalid length. [ 452.822137][T14477] syzkaller0: entered promiscuous mode [ 452.822164][T14477] syzkaller0: entered allmulticast mode [ 455.553499][T14506] syzkaller0: entered promiscuous mode [ 455.553527][T14506] syzkaller0: entered allmulticast mode [ 455.725754][T14518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3397'. [ 455.752464][T14513] syzkaller0: entered promiscuous mode [ 455.752488][T14513] syzkaller0: entered allmulticast mode [ 456.136000][T14534] syz_tun: entered allmulticast mode [ 456.292774][T14540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3408'. [ 456.351942][T14538] syzkaller0: entered promiscuous mode [ 456.351964][T14538] syzkaller0: entered allmulticast mode [ 458.030867][T14562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3418'. [ 460.265548][ T5619] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 460.364459][ T5754] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 460.415579][ T5619] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 460.416879][ T5619] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 460.416905][ T5619] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 460.416926][ T5619] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 460.416971][ T5619] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 460.417000][ T5619] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 460.420135][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 460.420161][ T5619] usb 1-1: Product: syz [ 460.420177][ T5619] usb 1-1: Manufacturer: syz [ 460.513062][ T5619] cdc_wdm 1-1:1.0: skipping garbage [ 460.513085][ T5619] cdc_wdm 1-1:1.0: skipping garbage [ 460.529972][ T5619] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 460.530122][ T5619] cdc_wdm 1-1:1.0: Unknown control protocol [ 460.630924][ T5754] usb 2-1: unable to get BOS descriptor or descriptor too short [ 460.631574][ T5754] usb 2-1: not running at top speed; connect to a high speed hub [ 460.631608][ T5754] usb 2-1: New USB device found, idVendor=0499, idProduct=7862, bcdDevice=3b.d1 [ 460.640335][ T5754] usb 2-1: config 1 has an invalid interface number: 81 but max is 0 [ 460.640449][ T5754] usb 2-1: config 1 has no interface number 0 [ 460.640613][ T5754] usb 2-1: config 1 interface 81 altsetting 215 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 460.640687][ T5754] usb 2-1: config 1 interface 81 altsetting 215 endpoint 0x7 has invalid wMaxPacketSize 0 [ 460.640750][ T5754] usb 2-1: config 1 interface 81 has no altsetting 0 [ 460.672304][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.672382][ T5754] usb 2-1: Product: syz [ 460.672442][ T5754] usb 2-1: Manufacturer: syz [ 460.672494][ T5754] usb 2-1: SerialNumber: syz [ 461.016282][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 461.020014][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 461.020045][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 461.020257][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 461.020278][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 461.020564][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 461.020587][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 461.020814][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 461.020838][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 461.020947][ T1236] usb 1-1: USB disconnect, device number 23 [ 461.021053][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 461.021075][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 461.021095][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 461.312622][ T145] bond0 (unregistering): Released all slaves [ 461.321552][ T5754] usb 2-1: USB disconnect, device number 37 [ 461.338918][ T145] bond1 (unregistering): Released all slaves [ 461.386456][ T145] bond2 (unregistering): Released all slaves [ 461.386672][ T6265] udevd[6265]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.81/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.462814][ T145] bond3 (unregistering): Released all slaves [ 461.487909][ T145] bond4 (unregistering): Released all slaves [ 461.517128][ T145] bond5 (unregistering): Released all slaves [ 461.549704][ T145] bond6 (unregistering): Released all slaves [ 461.593400][ T145] bond7 (unregistering): Released all slaves [ 461.622877][ T145] bond8 (unregistering): Released all slaves [ 461.644024][ T145] bond9 (unregistering): Released all slaves [ 461.682401][ T145] bond10 (unregistering): Released all slaves [ 461.821153][T14605] syzkaller0: entered promiscuous mode [ 461.821182][T14605] syzkaller0: entered allmulticast mode [ 461.840090][ T145] ovs-dp0: left promiscuous mode [ 462.310305][T14629] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3442'. [ 462.339959][T14630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3438'. [ 464.762797][ T145] tipc: Disabling bearer [ 464.773854][ T145] tipc: Disabling bearer [ 464.780058][ T145] tipc: Disabling bearer [ 464.780218][ T145] tipc: Left network mode [ 465.843053][ T145] veth1_macvtap: left promiscuous mode [ 465.843104][ T145] veth0_macvtap: left promiscuous mode [ 465.843210][ T145] veth1_vlan: left promiscuous mode [ 465.843405][ T145] veth0_vlan: left promiscuous mode [ 466.256200][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3457'. [ 467.548475][T14709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3470'. [ 468.178907][T14725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3476'. [ 469.144995][T14751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3487'. [ 469.416601][ C0] Unknown status report in ack skb [ 469.767675][T14778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3499'. [ 469.792285][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3497'. [ 470.119072][T14790] tipc: Enabling of bearer rejected, failed to enable media [ 470.854543][ T5754] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 470.904668][T14808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3512'. [ 471.004884][ T5754] usb 3-1: Using ep0 maxpacket: 32 [ 471.005773][ T5754] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 471.007124][ T5754] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 471.009505][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.009523][ T5754] usb 3-1: Product: syz [ 471.009533][ T5754] usb 3-1: Manufacturer: syz [ 471.009544][ T5754] usb 3-1: SerialNumber: syz [ 471.013756][ T5754] usb 3-1: config 0 descriptor?? [ 471.023001][T14801] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 471.050262][ T5754] hub 3-1:0.0: bad descriptor, ignoring hub [ 471.050352][ T5754] hub 3-1:0.0: probe with driver hub failed with error -5 [ 471.109841][ T5754] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input42 [ 471.208633][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3515'. [ 471.208673][T14815] netlink: 'syz.3.3515': attribute type 30 has an invalid length. [ 471.226310][ T5619] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 471.242600][T14815] vxlan2: entered promiscuous mode [ 471.242624][T14815] vxlan2: entered allmulticast mode [ 471.259491][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3515'. [ 471.259529][T14815] netlink: 'syz.3.3515': attribute type 30 has an invalid length. [ 471.286856][T14815] vxlan3: entered promiscuous mode [ 471.286881][T14815] vxlan3: entered allmulticast mode [ 471.356243][ T5754] usb 3-1: USB disconnect, device number 31 [ 471.356354][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 471.379014][ T5619] usb 5-1: Using ep0 maxpacket: 32 [ 471.384262][ T5619] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 471.389440][ T5619] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.389511][ T5619] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 471.389631][ T5619] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 471.389727][ T5619] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 471.391643][ T5619] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 471.391714][ T5619] usb 5-1: config 1 interface 1 has no altsetting 0 [ 471.441467][ T5619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.441547][ T5619] usb 5-1: Product: syz [ 471.441591][ T5619] usb 5-1: Manufacturer: syz [ 471.441633][ T5619] usb 5-1: SerialNumber: syz [ 471.775091][ T5619] usb 5-1: selecting invalid altsetting 0 [ 471.780637][ T5619] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 471.783332][ T5619] usb 5-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 471.965845][ T5619] usb 5-1: USB disconnect, device number 20 [ 472.096444][ T9727] udevd[9727]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.459798][T14833] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3522'. [ 472.573115][T14838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3524'. [ 472.707748][T14845] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3527'. [ 473.198455][T14864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3535'. [ 473.363366][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3533'. [ 473.454900][T14875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3537'. [ 473.976977][T14896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3546'. [ 474.066915][T14898] pimreg: entered allmulticast mode [ 474.128579][T14900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3548'. [ 474.266716][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3550'. [ 474.538719][T14920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3558'. [ 474.939062][T14931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3561'. [ 476.060662][T14966] netlink: 'syz.1.3577': attribute type 30 has an invalid length. [ 476.108876][T14966] vxlan1: entered promiscuous mode [ 476.108903][T14966] vxlan1: entered allmulticast mode [ 476.138453][T14969] netlink: 'syz.1.3577': attribute type 30 has an invalid length. [ 476.247163][T14969] vxlan1: entered promiscuous mode [ 476.247181][T14969] vxlan1: entered allmulticast mode [ 476.504075][T14973] input: syz1 as /devices/virtual/input/input43 [ 477.130030][T15004] netlink: 'syz.1.3592': attribute type 30 has an invalid length. [ 477.150999][T15004] vxlan1: entered promiscuous mode [ 477.151023][T15004] vxlan1: entered allmulticast mode [ 477.181489][T15007] netlink: 'syz.1.3592': attribute type 30 has an invalid length. [ 477.212666][T15007] vxlan1: entered promiscuous mode [ 477.212694][T15007] vxlan1: entered allmulticast mode [ 477.811992][T15024] __nla_validate_parse: 13 callbacks suppressed [ 477.812015][T15024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3601'. [ 477.886751][T15029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3605'. [ 477.886791][T15029] netlink: 'syz.4.3605': attribute type 30 has an invalid length. [ 477.937105][T15029] vxlan0: entered promiscuous mode [ 477.937133][T15029] vxlan0: entered allmulticast mode [ 477.955297][ T82] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.955377][ T82] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.960434][ T145] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.960601][ T145] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.969085][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3605'. [ 477.969192][T15032] netlink: 'syz.4.3605': attribute type 30 has an invalid length. [ 478.036693][T15032] vxlan1: entered promiscuous mode [ 478.036720][T15032] vxlan1: entered allmulticast mode [ 478.117315][T15038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3607'. [ 478.134700][ T1236] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 478.265416][T15041] syzkaller0: entered promiscuous mode [ 478.265443][T15041] syzkaller0: entered allmulticast mode [ 478.285779][ T1236] usb 3-1: Using ep0 maxpacket: 32 [ 478.293455][ T1236] usb 3-1: unable to get BOS descriptor or descriptor too short [ 478.293509][ T1236] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 478.312020][ T1236] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 478.312050][ T1236] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 478.312074][ T1236] usb 3-1: config 14 has no interface number 0 [ 478.312092][ T1236] usb 3-1: config 14 has no interface number 1 [ 478.312157][ T1236] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 478.312183][ T1236] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 478.312209][ T1236] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 478.312238][ T1236] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 478.312268][ T1236] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 478.312297][ T1236] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.312325][ T1236] usb 3-1: config 14 interface 57 has no altsetting 0 [ 478.312346][ T1236] usb 3-1: config 14 interface 228 has no altsetting 0 [ 478.416371][ T1236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.416403][ T1236] usb 3-1: Product: syz [ 478.416419][ T1236] usb 3-1: Manufacturer: syz [ 478.416435][ T1236] usb 3-1: SerialNumber: syz [ 478.868430][ T1236] legousbtower 3-1:14.57: interrupt endpoints not found [ 479.274235][ T1236] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 479.285070][ T1236] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 479.852982][T15055] IPVS: length: 8 != 383101893624 [ 479.853730][T15055] JFS: charset not found [ 480.063904][ T1236] usb 3-1: USB disconnect, device number 32 [ 480.090039][ T1236] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 481.266320][T15052] syzkaller0: entered promiscuous mode [ 481.266359][T15052] syzkaller0: entered allmulticast mode [ 481.902073][T15067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3616'. [ 482.047049][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3620'. [ 482.047104][T15075] netlink: 'syz.3.3620': attribute type 30 has an invalid length. [ 482.104126][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3620'. [ 482.104165][T15076] netlink: 'syz.3.3620': attribute type 30 has an invalid length. [ 482.113200][T15075] vxlan4: entered promiscuous mode [ 482.113263][T15075] vxlan4: entered allmulticast mode [ 482.176222][T15076] vxlan5: entered promiscuous mode [ 482.176259][T15076] vxlan5: entered allmulticast mode [ 482.358343][T15084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3626'. [ 482.444491][ T5691] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 482.470381][T15092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3629'. [ 482.594540][ T5691] usb 2-1: Using ep0 maxpacket: 32 [ 482.601420][ T5691] usb 2-1: unable to get BOS descriptor or descriptor too short [ 482.601471][ T5691] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 482.633478][ T5691] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 482.633500][ T5691] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 482.633516][ T5691] usb 2-1: config 14 has no interface number 0 [ 482.633528][ T5691] usb 2-1: config 14 has no interface number 1 [ 482.633573][ T5691] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 482.633591][ T5691] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 482.633610][ T5691] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 482.633629][ T5691] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 482.633650][ T5691] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 482.633669][ T5691] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.633689][ T5691] usb 2-1: config 14 interface 57 has no altsetting 0 [ 482.633702][ T5691] usb 2-1: config 14 interface 228 has no altsetting 0 [ 482.657813][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.657893][ T5691] usb 2-1: Product: syz [ 482.657935][ T5691] usb 2-1: Manufacturer: syz [ 482.657974][ T5691] usb 2-1: SerialNumber: syz [ 483.099302][T15105] mmap: syz.3.3634 (15105): VmData 37429248 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 483.172634][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3635'. [ 483.172717][T15107] netlink: 'syz.0.3635': attribute type 30 has an invalid length. [ 483.203230][ T5691] legousbtower 2-1:14.57: interrupt endpoints not found [ 483.222509][T15110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3635'. [ 483.222572][T15110] netlink: 'syz.0.3635': attribute type 30 has an invalid length. [ 483.253289][T15107] vxlan0: entered promiscuous mode [ 483.253306][T15107] vxlan0: entered allmulticast mode [ 483.337161][T15110] vxlan1: entered promiscuous mode [ 483.337188][T15110] vxlan1: entered allmulticast mode [ 483.367024][ T145] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.378510][ T82] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.379180][ T82] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.379320][ T82] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.634154][ T5691] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 483.648905][ T5691] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 483.783537][T15121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3642'. [ 483.862824][T15123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3643'. [ 484.247435][T15131] IPVS: length: 8 != 383101893624 [ 484.252452][T15131] JFS: charset not found [ 484.398536][T15137] netlink: 'syz.4.3648': attribute type 61 has an invalid length. [ 484.471138][T15136] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 8) Raw Capture 0:snk:480x2160 (0x33424752, 8, 0, 0, 0) [ 484.768327][T15147] syzkaller0: entered promiscuous mode [ 484.768353][T15147] syzkaller0: entered allmulticast mode [ 484.797445][T15151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3654'. [ 484.801087][T15149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3653'. [ 485.283581][ T5683] usb 2-1: USB disconnect, device number 38 [ 485.301913][ T5683] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 485.634046][T15180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3666'. [ 485.947010][ T5754] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 486.096644][ T5754] usb 2-1: Using ep0 maxpacket: 32 [ 486.097387][ T5754] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 486.099882][ T5754] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.099907][ T5754] usb 2-1: config 0 has no interfaces? [ 486.104787][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 486.104814][ T5754] usb 2-1: Product: syz [ 486.104830][ T5754] usb 2-1: Manufacturer: syz [ 486.104845][ T5754] usb 2-1: SerialNumber: syz [ 486.132350][ T5754] usb 2-1: config 0 descriptor?? [ 486.184782][ T1236] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 486.287725][T15201] syzkaller0: entered promiscuous mode [ 486.287745][T15201] syzkaller0: entered allmulticast mode [ 486.334584][ T1236] usb 1-1: Using ep0 maxpacket: 32 [ 486.337342][ T1236] usb 1-1: unable to get BOS descriptor or descriptor too short [ 486.337395][ T1236] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 486.339110][ T1236] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 486.339137][ T1236] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 486.339159][ T1236] usb 1-1: config 14 has no interface number 0 [ 486.339176][ T1236] usb 1-1: config 14 has no interface number 1 [ 486.339249][ T1236] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 486.339274][ T1236] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 486.339301][ T1236] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 486.339329][ T1236] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 486.339357][ T1236] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 486.339384][ T1236] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.339411][ T1236] usb 1-1: config 14 interface 57 has no altsetting 0 [ 486.339430][ T1236] usb 1-1: config 14 interface 228 has no altsetting 0 [ 486.344844][ T1236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.344882][ T1236] usb 1-1: Product: syz [ 486.344900][ T1236] usb 1-1: Manufacturer: syz [ 486.344914][ T1236] usb 1-1: SerialNumber: syz [ 486.466807][T15205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3679'. [ 486.807688][ T1236] legousbtower 1-1:14.57: interrupt endpoints not found [ 486.843088][ T5619] usb 2-1: USB disconnect, device number 39 [ 487.013832][ T4935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 487.036852][ T4935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 487.037821][ T4935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 487.068981][ T4935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 487.069675][ T4935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 487.214022][ T1236] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 487.224269][ T1236] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 487.774755][T15214] IPVS: length: 8 != 383101893624 [ 487.775325][T15214] JFS: charset not found [ 488.978827][ T5683] usb 1-1: USB disconnect, device number 24 [ 489.034830][ T5683] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 489.286621][ T5630] Bluetooth: hci0: command tx timeout [ 489.808423][ T1169] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.808466][ T1169] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.860908][T15228] tipc: New replicast peer: 172.20.20.187 [ 489.862906][T15228] tipc: Enabled bearer , priority 10 [ 490.246591][ T1169] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.246632][ T1169] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.479684][ T5691] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 490.481197][ T1169] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.481233][ T1169] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.561978][T15245] syzkaller0: entered promiscuous mode [ 490.562003][T15245] syzkaller0: entered allmulticast mode [ 490.580106][T15250] tipc: Enabled bearer , priority 0 [ 490.693869][ T5691] usb 2-1: Using ep0 maxpacket: 32 [ 490.694861][T15239] tipc: Resetting bearer [ 490.783992][ T5691] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 490.796755][ T5691] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.796832][ T5691] usb 2-1: config 0 has no interfaces? [ 490.803734][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 490.803801][ T5691] usb 2-1: Product: syz [ 490.803843][ T5691] usb 2-1: Manufacturer: syz [ 490.803887][ T5691] usb 2-1: SerialNumber: syz [ 490.838194][ T5691] usb 2-1: config 0 descriptor?? [ 490.880712][T15239] tipc: Disabling bearer [ 491.038751][ T1169] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.038793][ T1169] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.365119][ T5630] Bluetooth: hci0: command tx timeout [ 491.551299][ T5691] usb 2-1: USB disconnect, device number 40 [ 491.609290][T15257] syzkaller0: entered promiscuous mode [ 491.609327][T15257] syzkaller0: entered allmulticast mode [ 492.601555][T15269] kvm: emulating exchange as write [ 492.601653][T15269] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 493.454576][ T5630] Bluetooth: hci0: command tx timeout [ 494.243882][T15261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.277452][T15261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.046309][T15289] syzkaller0: entered promiscuous mode [ 495.046336][T15289] syzkaller0: entered allmulticast mode [ 495.049797][T15286] bridge0: port 1(syz_tun) entered blocking state [ 495.049866][T15286] bridge0: port 1(syz_tun) entered disabled state [ 495.083524][T15286] syz_tun: entered promiscuous mode [ 495.091885][T15286] bridge0: port 1(syz_tun) entered blocking state [ 495.092003][T15286] bridge0: port 1(syz_tun) entered forwarding state [ 495.160320][ T1169] bridge_slave_1: left allmulticast mode [ 495.160350][ T1169] bridge_slave_1: left promiscuous mode [ 495.160553][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.196068][ T1169] bridge_slave_0: left allmulticast mode [ 495.196088][ T1169] bridge_slave_0: left promiscuous mode [ 495.196250][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.529811][ T5630] Bluetooth: hci0: command tx timeout [ 495.575190][ T5691] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 495.844524][ T5691] usb 2-1: Using ep0 maxpacket: 32 [ 495.845426][ T5691] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 495.846788][ T5691] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.846836][ T5691] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 495.849305][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 495.849357][ T5691] usb 2-1: Product: syz [ 495.849379][ T5691] usb 2-1: Manufacturer: syz [ 495.849395][ T5691] usb 2-1: SerialNumber: syz [ 495.862835][ T5691] usb 2-1: config 0 descriptor?? [ 495.886820][ T5691] hub 2-1:0.0: bad descriptor, ignoring hub [ 495.886851][ T5691] hub 2-1:0.0: probe with driver hub failed with error -5 [ 496.170573][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.209104][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.210456][ T1169] bond0 (unregistering): Released all slaves [ 496.232022][T15297] tipc: Started in network mode [ 496.232056][T15297] tipc: Node identity 064356c17af5, cluster identity 4711 [ 496.232218][T15297] tipc: Enabled bearer , priority 0 [ 496.232431][T15210] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.232539][T15210] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.232702][T15210] bridge_slave_0: entered allmulticast mode [ 496.251378][T15210] bridge_slave_0: entered promiscuous mode [ 496.286882][T15210] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.286966][T15210] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.287063][T15210] bridge_slave_1: entered allmulticast mode [ 496.292635][T15210] bridge_slave_1: entered promiscuous mode [ 496.461217][T15210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.463456][T15284] tipc: Resetting bearer [ 496.519172][T15284] tipc: Disabling bearer [ 496.541407][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 496.570715][T15321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3708'. [ 496.605417][ T5619] usb 2-1: USB disconnect, device number 41 [ 496.677519][T15210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.895371][T15210] team0: Port device team_slave_0 added [ 496.941543][T15210] team0: Port device team_slave_1 added [ 496.978188][T15331] »»»»»»: renamed from vlan0 (while UP) [ 497.175887][T15329] syzkaller0: entered promiscuous mode [ 497.175916][T15329] syzkaller0: entered allmulticast mode [ 497.198318][ T1169] hsr_slave_0: left promiscuous mode [ 497.200829][ T1169] hsr_slave_1: left promiscuous mode [ 497.202837][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.202866][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.203684][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.203703][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.327394][ T1169] veth1_macvtap: left promiscuous mode [ 497.327437][ T1169] veth0_macvtap: left promiscuous mode [ 497.327541][ T1169] veth1_vlan: left promiscuous mode [ 497.328517][ T1169] veth0_vlan: left promiscuous mode [ 498.037963][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 498.061565][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 498.194632][T15210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.194653][T15210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.194680][T15210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.747047][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 500.791762][T15210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.791783][T15210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.791813][T15210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.060734][T15371] syzkaller0: entered promiscuous mode [ 501.060761][T15371] syzkaller0: entered allmulticast mode [ 501.088751][T15210] hsr_slave_0: entered promiscuous mode [ 501.092292][T15210] hsr_slave_1: entered promiscuous mode [ 501.097524][T15210] debugfs: 'hsr0' already exists in 'hsr' [ 501.097614][T15210] Cannot create hsr debugfs directory [ 501.139074][T15378] tipc: Enabled bearer , priority 0 [ 501.155693][T15370] tipc: Resetting bearer [ 501.220343][T15370] tipc: Disabling bearer [ 501.384704][ T5754] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 501.385242][ T5683] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 501.526316][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.526379][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.540336][ T5683] usb 5-1: Using ep0 maxpacket: 32 [ 501.552322][ T5754] usb 2-1: Using ep0 maxpacket: 32 [ 501.553412][ T5754] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 501.559977][ T5683] usb 5-1: unable to get BOS descriptor or descriptor too short [ 501.560037][ T5683] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 501.570498][ T5683] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 501.570572][ T5683] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 501.570644][ T5683] usb 5-1: config 14 has no interface number 0 [ 501.570687][ T5683] usb 5-1: config 14 has no interface number 1 [ 501.570854][ T5683] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 501.570921][ T5683] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 501.570994][ T5683] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 501.571069][ T5683] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 501.571148][ T5683] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 501.571219][ T5683] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.571337][ T5683] usb 5-1: config 14 interface 57 has no altsetting 0 [ 501.571383][ T5683] usb 5-1: config 14 interface 228 has no altsetting 0 [ 501.609241][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.609314][ T5683] usb 5-1: Product: syz [ 501.609357][ T5683] usb 5-1: Manufacturer: syz [ 501.609405][ T5683] usb 5-1: SerialNumber: syz [ 501.617053][ T5754] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.617107][ T5754] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 501.704060][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 501.704092][ T5754] usb 2-1: Product: syz [ 501.704109][ T5754] usb 2-1: Manufacturer: syz [ 501.704125][ T5754] usb 2-1: SerialNumber: syz [ 501.785334][ T5754] usb 2-1: config 0 descriptor?? [ 501.790241][ T5754] hub 2-1:0.0: bad descriptor, ignoring hub [ 501.790268][ T5754] hub 2-1:0.0: probe with driver hub failed with error -5 [ 502.155566][ T5683] legousbtower 5-1:14.57: interrupt endpoints not found [ 502.233881][T15374] syz.3.3719 (15374): drop_caches: 2 [ 502.361483][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3727'. [ 502.562062][ T5683] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 502.574931][ T5754] usb 2-1: USB disconnect, device number 42 [ 502.592121][ T5683] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 502.776328][T15407] syzkaller0: entered promiscuous mode [ 502.776348][T15407] syzkaller0: entered allmulticast mode [ 502.807138][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 502.839824][T15415] IPVS: length: 8 != 383101893624 [ 502.840279][T15415] JFS: charset not found [ 503.845830][T15381] usb 5-1: LEGO USB Tower reset control request failed [ 503.867196][ T5691] usb 5-1: USB disconnect, device number 21 [ 503.910721][ T5691] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 505.833064][T15210] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 505.861973][T15210] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.875354][T15210] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 505.914024][T15210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 505.953273][T15210] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 505.970946][T15210] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.971839][T15210] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 505.992864][T15210] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 506.297116][T15210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.355277][T15210] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.397424][ T3383] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.397539][ T3383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.469172][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.469307][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.973164][T15210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.183150][T15210] veth0_vlan: entered promiscuous mode [ 507.221171][T15210] veth1_vlan: entered promiscuous mode [ 507.314479][ T5754] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 507.389577][T15210] veth0_macvtap: entered promiscuous mode [ 507.440613][T15210] veth1_macvtap: entered promiscuous mode [ 507.465776][ T5754] usb 1-1: Using ep0 maxpacket: 32 [ 507.471795][ T5754] usb 1-1: unable to get BOS descriptor or descriptor too short [ 507.471849][ T5754] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 507.476806][ T5754] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 507.476879][ T5754] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 507.476934][ T5754] usb 1-1: config 14 has no interface number 0 [ 507.476979][ T5754] usb 1-1: config 14 has no interface number 1 [ 507.477146][ T5754] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 507.477212][ T5754] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 507.477287][ T5754] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 507.477362][ T5754] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 507.477438][ T5754] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 507.477551][ T5754] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.477640][ T5754] usb 1-1: config 14 interface 57 has no altsetting 0 [ 507.477691][ T5754] usb 1-1: config 14 interface 228 has no altsetting 0 [ 507.502471][ T5754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.502547][ T5754] usb 1-1: Product: syz [ 507.502581][ T5754] usb 1-1: Manufacturer: syz [ 507.502624][ T5754] usb 1-1: SerialNumber: syz [ 507.880621][T15465] syzkaller0: entered promiscuous mode [ 507.880651][T15465] syzkaller0: entered allmulticast mode [ 508.004638][ T5754] legousbtower 1-1:14.57: interrupt endpoints not found [ 508.405822][ T5754] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 508.408410][ T5754] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 508.686971][T15480] IPVS: length: 8 != 383101893624 [ 508.687657][T15480] JFS: charset not found [ 509.696856][T15457] usb 1-1: LEGO USB Tower reset control request failed [ 509.707590][ T1236] usb 1-1: USB disconnect, device number 25 [ 509.739240][ T1236] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 510.661702][T15482] loop6: detected capacity change from 0 to 1 [ 510.698820][T15482] Dev loop6: unable to read RDB block 1 [ 510.698917][T15482] loop6: unable to read partition table [ 510.699095][T15482] loop6: partition table beyond EOD, truncated [ 510.699145][T15482] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 511.097039][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 511.201268][T15210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.228433][T15210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.515464][T12566] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.515521][T12566] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.515560][T12566] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.515599][T12566] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.581259][T15510] bridge_slave_0: left allmulticast mode [ 511.581282][T15510] bridge_slave_0: left promiscuous mode [ 511.581450][T15510] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.607913][T15510] bridge_slave_1: left allmulticast mode [ 511.607933][T15510] bridge_slave_1: left promiscuous mode [ 511.609581][T15510] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.637885][T15510] bond0: (slave bond_slave_0): Releasing backup interface [ 511.642857][T15510] bond0: (slave bond_slave_1): Releasing backup interface [ 511.661826][T15510] team0: Port device team_slave_0 removed [ 511.672394][T15510] team0: Port device team_slave_1 removed [ 511.674590][T15510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.674653][T15510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.683712][T15510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.683767][T15510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.712644][T15510] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 511.836983][T15512] team0: Port device xfrm0 added [ 512.099958][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.099983][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.402442][T12566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.402468][T12566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.619631][T15537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3760'. [ 512.789869][T15535] syzkaller0: entered promiscuous mode [ 512.789889][T15535] syzkaller0: entered allmulticast mode [ 512.947597][ T4935] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 512.947639][ T4935] CPU: 1 UID: 0 PID: 4935 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.947671][ T4935] Tainted: [L]=SOFTLOCKUP [ 512.947680][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.947696][ T4935] Workqueue: hci5 hci_rx_work [ 512.947761][ T4935] Call Trace: [ 512.947775][ T4935] [ 512.947786][ T4935] dump_stack_lvl+0xe8/0x150 [ 512.947824][ T4935] sysfs_create_dir_ns+0x271/0x2a0 [ 512.947865][ T4935] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 512.947905][ T4935] ? do_raw_spin_unlock+0xf5/0x200 [ 512.947944][ T4935] kobject_add_internal+0x622/0xcd0 [ 512.947984][ T4935] kobject_add+0x163/0x240 [ 512.948020][ T4935] ? __pfx_kobject_add+0x10/0x10 [ 512.948056][ T4935] ? get_device_parent+0x366/0x3a0 [ 512.948085][ T4935] device_add+0x3fa/0xb80 [ 512.948112][ T4935] hci_conn_add_sysfs+0xd5/0x210 [ 512.948152][ T4935] le_conn_complete_evt+0xfe3/0x16d0 [ 512.948183][ T4935] ? le_conn_complete_evt+0x1b1/0x16d0 [ 512.948213][ T4935] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 512.948243][ T4935] ? __mutex_unlock_slowpath+0x731/0x900 [ 512.948272][ T4935] ? skb_pull_data+0xf0/0x200 [ 512.948310][ T4935] hci_le_enh_conn_complete_evt+0x189/0x490 [ 512.948340][ T4935] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 512.948372][ T4935] hci_event_packet+0x67a/0xf10 [ 512.948416][ T4935] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 512.948440][ T4935] ? __pfx_hci_event_packet+0x10/0x10 [ 512.948486][ T4935] ? audit_filter_rules+0x5760/0x5d10 [ 512.948518][ T4935] ? hci_send_to_monitor+0xe2/0x590 [ 512.948551][ T4935] hci_rx_work+0x3ee/0x1020 [ 512.948595][ T4935] ? process_scheduled_works+0x97a/0x1630 [ 512.948627][ T4935] process_scheduled_works+0xc3d/0x1630 [ 512.948692][ T4935] ? __pfx_process_scheduled_works+0x10/0x10 [ 512.948739][ T4935] ? assign_work+0x3cf/0x5d0 [ 512.948777][ T4935] worker_thread+0xa47/0xfb0 [ 512.948838][ T4935] kthread+0x38b/0x480 [ 512.948862][ T4935] ? __pfx_worker_thread+0x10/0x10 [ 512.948890][ T4935] ? __pfx_kthread+0x10/0x10 [ 512.948914][ T4935] ret_from_fork+0x514/0xb70 [ 512.948939][ T4935] ? __pfx_ret_from_fork+0x10/0x10 [ 512.948976][ T4935] ? __switch_to+0xc89/0x1420 [ 512.949011][ T4935] ? __pfx_kthread+0x10/0x10 [ 512.949035][ T4935] ret_from_fork_asm+0x1a/0x30 [ 512.949090][ T4935] [ 512.951027][ T4935] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 512.951071][ T4935] Bluetooth: hci5: failed to register connection device [ 513.860438][ T4935] Bluetooth: hci5: command 0x0406 tx timeout [ 515.924539][ T4935] Bluetooth: hci5: command 0x0406 tx timeout [ 515.999605][T15553] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 516.003284][T15553] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 516.099943][T15553] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 516.136939][T15553] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 516.137064][T15553] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 516.178924][T15553] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 516.237619][T15553] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 516.239354][T15553] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 516.279997][T15553] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 516.283869][T15553] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 516.284016][T15553] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 516.345766][T15553] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 516.348530][T15553] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 516.348664][T15553] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 516.381573][T15553] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 517.593406][T15607] syzkaller0: entered promiscuous mode [ 517.593436][T15607] syzkaller0: entered allmulticast mode [ 518.004493][ T5630] Bluetooth: hci5: command 0x0406 tx timeout [ 518.164942][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout [ 518.249486][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 518.337168][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 518.404462][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 520.092767][ T5630] Bluetooth: hci5: command 0x0406 tx timeout [ 520.251606][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout [ 520.330058][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 520.404448][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 520.484514][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 522.164621][ T5630] Bluetooth: hci5: command 0x0406 tx timeout [ 522.324492][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout [ 522.404581][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 522.485983][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 522.570270][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 522.661194][T15637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3790'. [ 523.699201][T15673] syzkaller0: entered promiscuous mode [ 523.699228][T15673] syzkaller0: entered allmulticast mode [ 523.723650][T15673] tipc: Enabled bearer , priority 0 [ 523.750504][T15670] tipc: Resetting bearer [ 523.825040][T15670] tipc: Disabling bearer [ 524.092479][T15680] syzkaller0: entered promiscuous mode [ 524.092506][T15680] syzkaller0: entered allmulticast mode [ 524.632791][T15690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3804'. [ 525.118269][T15708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3810'. [ 525.322757][T15708] bridge1: port 1(dummy0) entered blocking state [ 525.322885][T15708] bridge1: port 1(dummy0) entered disabled state [ 525.346296][T15708] dummy0: entered allmulticast mode [ 525.367298][T15715] netlink: 'syz.3.3810': attribute type 10 has an invalid length. [ 525.367315][T15715] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3810'. [ 525.399411][T15708] dummy0: entered promiscuous mode [ 525.419145][T15713] syzkaller0: entered promiscuous mode [ 525.419170][T15713] syzkaller0: entered allmulticast mode [ 525.440116][T15713] tipc: Enabled bearer , priority 0 [ 525.455152][T15712] tipc: Resetting bearer [ 525.563653][T15712] tipc: Disabling bearer [ 525.602428][T15715] bridge1: port 1(dummy0) entered blocking state [ 525.603260][T15715] bridge1: port 1(dummy0) entered forwarding state [ 525.648572][T15715] dummy0: left allmulticast mode [ 525.650283][T15715] bridge1: port 1(dummy0) entered disabled state [ 525.911991][T15734] syzkaller0: entered promiscuous mode [ 525.912015][T15734] syzkaller0: entered allmulticast mode [ 526.070823][T15738] syzkaller0: entered promiscuous mode [ 526.070849][T15738] syzkaller0: entered allmulticast mode [ 526.817085][ T925] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 526.964635][ T925] usb 5-1: Using ep0 maxpacket: 32 [ 526.968158][ T925] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 526.973525][ T925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 526.973549][ T925] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 526.981583][ T925] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 526.981612][ T925] usb 5-1: Product: syz [ 526.981628][ T925] usb 5-1: Manufacturer: syz [ 526.981644][ T925] usb 5-1: SerialNumber: syz [ 527.001747][ T925] usb 5-1: config 0 descriptor?? [ 527.020143][ T925] hub 5-1:0.0: bad descriptor, ignoring hub [ 527.020174][ T925] hub 5-1:0.0: probe with driver hub failed with error -5 [ 527.568919][T15783] syzkaller0: entered promiscuous mode [ 527.568943][T15783] syzkaller0: entered allmulticast mode [ 527.786085][ T925] usb 5-1: USB disconnect, device number 22 [ 528.248842][T15819] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3841'. [ 528.397363][T15824] syzkaller0: entered promiscuous mode [ 528.397611][T15824] syzkaller0: entered allmulticast mode [ 528.799174][ T5630] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 529.105400][T15856] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3855'. [ 529.376211][ T925] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 529.524823][ T925] usb 2-1: Using ep0 maxpacket: 32 [ 529.527510][ T925] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 529.530190][ T925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 529.530254][ T925] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 529.578830][ T925] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 529.578869][ T925] usb 2-1: Product: syz [ 529.578881][ T925] usb 2-1: Manufacturer: syz [ 529.578892][ T925] usb 2-1: SerialNumber: syz [ 529.610173][ T925] usb 2-1: config 0 descriptor?? [ 529.629434][ T925] hub 2-1:0.0: bad descriptor, ignoring hub [ 529.629456][ T925] hub 2-1:0.0: probe with driver hub failed with error -5 [ 529.699327][T15875] syzkaller0: entered promiscuous mode [ 529.699345][T15875] syzkaller0: entered allmulticast mode [ 529.754503][ T5691] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 529.914447][ T5691] usb 6-1: Using ep0 maxpacket: 32 [ 529.919607][ T5691] usb 6-1: unable to get BOS descriptor or descriptor too short [ 529.919662][ T5691] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 529.920983][ T5691] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 529.921003][ T5691] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 529.921017][ T5691] usb 6-1: config 14 has no interface number 0 [ 529.921029][ T5691] usb 6-1: config 14 has no interface number 1 [ 529.921075][ T5691] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 529.921093][ T5691] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 529.921119][ T5691] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 529.921139][ T5691] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 529.921159][ T5691] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 529.921178][ T5691] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.921198][ T5691] usb 6-1: config 14 interface 57 has no altsetting 0 [ 529.921211][ T5691] usb 6-1: config 14 interface 228 has no altsetting 0 [ 529.970133][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.970163][ T5691] usb 6-1: Product: syz [ 529.970180][ T5691] usb 6-1: Manufacturer: syz [ 529.970195][ T5691] usb 6-1: SerialNumber: syz [ 530.095085][ T1236] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 530.246297][ T1236] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 530.247653][ T1236] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 530.247681][ T1236] usb 5-1: config 0 has no interface number 0 [ 530.247720][ T1236] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 530.247766][ T1236] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 530.247808][ T1236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.265853][ T1236] usb 5-1: config 0 descriptor?? [ 530.273344][T15877] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 530.343984][ T1236] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 530.377592][ T925] usb 2-1: USB disconnect, device number 43 [ 530.533301][ T5691] legousbtower 6-1:14.57: interrupt endpoints not found [ 530.533544][ T925] usb 5-1: USB disconnect, device number 23 [ 530.533608][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 530.741468][T15871] IPVS: length: 8 != 383101893624 [ 530.742019][T15871] JFS: charset not found [ 530.764828][ T5691] legousbtower 6-1:14.228: get version request failed: -71 [ 530.765013][ T5691] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 530.801983][ T5691] usb 6-1: USB disconnect, device number 2 [ 530.963231][T15891] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3867'. [ 531.075589][T15895] syzkaller0: entered promiscuous mode [ 531.075615][T15895] syzkaller0: entered allmulticast mode [ 531.079075][T15895] tipc: Enabled bearer , priority 0 [ 531.102203][T15894] tipc: Resetting bearer [ 531.157759][T15894] tipc: Disabling bearer [ 531.589388][T15909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3870'. [ 531.698212][T15913] netlink: 'syz.5.3876': attribute type 1 has an invalid length. [ 531.698233][T15913] netlink: 'syz.5.3876': attribute type 3 has an invalid length. [ 531.917697][T15918] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3878'. [ 531.989669][T15921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3879'. [ 532.434626][ T925] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 532.586564][ T925] usb 6-1: Using ep0 maxpacket: 32 [ 532.593875][ T925] usb 6-1: unable to get BOS descriptor or descriptor too short [ 532.593930][ T925] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 532.624723][ T925] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 532.624756][ T925] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 532.624778][ T925] usb 6-1: config 14 has no interface number 0 [ 532.624797][ T925] usb 6-1: config 14 has no interface number 1 [ 532.624863][ T925] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 532.624889][ T925] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 532.624916][ T925] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 532.624944][ T925] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 532.624972][ T925] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 532.625000][ T925] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.625029][ T925] usb 6-1: config 14 interface 57 has no altsetting 0 [ 532.625049][ T925] usb 6-1: config 14 interface 228 has no altsetting 0 [ 532.632555][ T925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.632583][ T925] usb 6-1: Product: syz [ 532.632594][ T925] usb 6-1: Manufacturer: syz [ 532.632605][ T925] usb 6-1: SerialNumber: syz [ 533.077893][ T925] legousbtower 6-1:14.57: interrupt endpoints not found [ 533.287954][T15928] IPVS: length: 8 != 383101893624 [ 533.291962][T15928] JFS: charset not found [ 533.314510][ T925] legousbtower 6-1:14.228: get version request failed: -71 [ 533.314680][ T925] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 533.351700][ T925] usb 6-1: USB disconnect, device number 3 [ 533.604269][T15955] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3892'. [ 533.646609][T15960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3894'. [ 533.923108][T15969] tipc: Enabled bearer , priority 0 [ 534.760909][T15991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3907'. [ 534.798296][T15992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3906'. [ 535.164463][ T864] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 535.324405][ T864] usb 4-1: Using ep0 maxpacket: 32 [ 535.350385][ T864] usb 4-1: unable to get BOS descriptor or descriptor too short [ 535.350442][ T864] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 535.362258][ T864] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 535.362280][ T864] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 535.362295][ T864] usb 4-1: config 14 has no interface number 0 [ 535.362307][ T864] usb 4-1: config 14 has no interface number 1 [ 535.362360][ T864] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 535.362378][ T864] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 535.362401][ T864] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 535.362420][ T864] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 535.362439][ T864] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 535.362459][ T864] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 535.362478][ T864] usb 4-1: config 14 interface 57 has no altsetting 0 [ 535.362492][ T864] usb 4-1: config 14 interface 228 has no altsetting 0 [ 535.441865][ T864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.441896][ T864] usb 4-1: Product: syz [ 535.441912][ T864] usb 4-1: Manufacturer: syz [ 535.441936][ T864] usb 4-1: SerialNumber: syz [ 535.574480][ T925] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 535.727898][ T925] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 535.728756][ T925] usb 5-1: config 0 has no interfaces? [ 535.734077][ T925] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 535.734103][ T925] usb 5-1: Product: syz [ 535.734118][ T925] usb 5-1: Manufacturer: syz [ 535.734133][ T925] usb 5-1: SerialNumber: syz [ 535.779107][ T925] usb 5-1: config 0 descriptor?? [ 535.932840][ T864] legousbtower 4-1:14.57: interrupt endpoints not found [ 536.157638][T15997] IPVS: length: 8 != 383101893624 [ 536.178679][T15997] JFS: charset not found [ 536.200222][ T864] legousbtower 4-1:14.228: get version request failed: -71 [ 536.202038][ T864] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 536.252316][ T864] usb 4-1: USB disconnect, device number 18 [ 536.322160][ T1236] usb 5-1: USB disconnect, device number 24 [ 537.109242][T16022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3919'. [ 537.856062][T16050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3933'. [ 538.403690][T16070] syzkaller0: entered promiscuous mode [ 538.403714][T16070] syzkaller0: entered allmulticast mode [ 538.550345][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3944'. [ 538.561700][T16082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3946'. [ 538.766246][T16086] tipc: Enabled bearer , priority 0 [ 538.783611][T16085] tipc: Disabling bearer [ 539.096262][ T1236] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 539.175436][ T5683] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 539.254477][ T1236] usb 5-1: Using ep0 maxpacket: 32 [ 539.263394][ T1236] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 539.280157][ T1236] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 539.280200][ T1236] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 539.280241][ T1236] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 539.280288][ T1236] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 539.280331][ T1236] usb 5-1: config 0 interface 0 has no altsetting 0 [ 539.282496][ T1236] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 539.282523][ T1236] usb 5-1: Product: syz [ 539.282540][ T1236] usb 5-1: Manufacturer: syz [ 539.282555][ T1236] usb 5-1: SerialNumber: syz [ 539.305714][ T1236] usb 5-1: config 0 descriptor?? [ 539.365468][ T5683] usb 4-1: Using ep0 maxpacket: 32 [ 539.371255][ T5683] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 539.372586][ T5683] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 539.373043][ T1236] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 539.383989][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 539.384016][ T5683] usb 4-1: Product: syz [ 539.384032][ T5683] usb 4-1: Manufacturer: syz [ 539.384048][ T5683] usb 4-1: SerialNumber: syz [ 539.444696][ T5683] usb 4-1: config 0 descriptor?? [ 539.459124][T16096] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 539.459979][ T1236] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 539.460886][ T5683] hub 4-1:0.0: bad descriptor, ignoring hub [ 539.460909][ T5683] hub 4-1:0.0: probe with driver hub failed with error -5 [ 539.661041][ T5683] usb 5-1: USB disconnect, device number 25 [ 539.663666][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 539.728868][ T5683] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 539.950037][T16114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3960'. [ 540.245639][ T1236] usb 4-1: USB disconnect, device number 19 [ 540.317766][T16122] tipc: Started in network mode [ 540.317797][T16122] tipc: Node identity 3619bcb3dc92, cluster identity 4711 [ 540.317961][T16122] tipc: Enabled bearer , priority 0 [ 540.368804][T16121] tipc: Disabling bearer [ 540.661126][T16139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3972'. [ 540.824651][ T25] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 540.984427][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 541.001535][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 541.001589][ T25] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 541.003852][ T25] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 541.003880][ T25] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 541.003903][ T25] usb 5-1: config 14 has no interface number 0 [ 541.003921][ T25] usb 5-1: config 14 has no interface number 1 [ 541.003995][ T25] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 541.004023][ T25] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 541.004051][ T25] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 541.004081][ T25] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 541.004111][ T25] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 541.004139][ T25] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 541.004168][ T25] usb 5-1: config 14 interface 57 has no altsetting 0 [ 541.004188][ T25] usb 5-1: config 14 interface 228 has no altsetting 0 [ 541.140571][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.140604][ T25] usb 5-1: Product: syz [ 541.140621][ T25] usb 5-1: Manufacturer: syz [ 541.140637][ T25] usb 5-1: SerialNumber: syz [ 541.322019][T16156] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 541.603529][ T25] legousbtower 5-1:14.57: interrupt endpoints not found [ 541.808441][T16136] IPVS: length: 8 != 383101893624 [ 541.810777][T16136] JFS: charset not found [ 541.826172][ T25] legousbtower 5-1:14.228: get version request failed: -71 [ 541.826354][ T25] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 541.853074][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3985'. [ 541.877660][ T25] usb 5-1: USB disconnect, device number 26 [ 542.612401][T16204] ALSA: mixer_oss: invalid OSS volume 'W' [ 543.102709][T16212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4002'. [ 543.584437][T12125] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 543.756381][T12125] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 543.757979][T12125] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 543.758009][T12125] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.758030][T12125] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 543.758077][T12125] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.760268][T12125] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 543.760296][T12125] usb 6-1: Product: syz [ 543.760312][T12125] usb 6-1: Manufacturer: syz [ 543.840122][T12125] cdc_wdm 6-1:1.0: skipping garbage [ 543.840148][T12125] cdc_wdm 6-1:1.0: skipping garbage [ 543.856007][T12125] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 543.856070][T12125] cdc_wdm 6-1:1.0: Unknown control protocol [ 545.414432][ T5691] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 545.565298][ T5691] usb 5-1: Using ep0 maxpacket: 32 [ 545.567491][ T5691] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 545.568233][ T5691] usb 5-1: config 0 has no interfaces? [ 545.573652][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.573681][ T5691] usb 5-1: Product: syz [ 545.573697][ T5691] usb 5-1: Manufacturer: syz [ 545.573712][ T5691] usb 5-1: SerialNumber: syz [ 545.637099][ T5691] usb 5-1: config 0 descriptor?? [ 546.062264][T12125] usb 5-1: USB disconnect, device number 27 [ 546.309332][T12125] usb 6-1: USB disconnect, device number 4 [ 546.337768][T16283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4033'. [ 546.726666][ T31] audit: type=1326 audit(1790152882.090:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16295 comm="syz.4.4040" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 546.726721][ T31] audit: type=1326 audit(1790152882.100:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16295 comm="syz.4.4040" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 546.732235][ T31] audit: type=1326 audit(1790152882.100:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16295 comm="syz.4.4040" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 546.732702][ T31] audit: type=1326 audit(1790152882.100:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16295 comm="syz.4.4040" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 546.734136][ T31] audit: type=1326 audit(1790152882.100:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16295 comm="syz.4.4040" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 546.750030][ T31] audit: type=1326 audit(1790152882.110:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16295 comm="syz.4.4040" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 546.750188][ T31] audit: type=1326 audit(1790152882.110:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16295 comm="syz.4.4040" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 546.754459][ T31] audit: type=1326 audit(1790152882.110:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16295 comm="syz.4.4040" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 547.314515][ T25] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 547.468217][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 547.471585][ T25] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 547.480019][ T25] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 547.480039][ T25] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 547.480053][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 547.480086][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 547.480101][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 547.480117][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 547.480146][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.572006][ T25] usb 2-1: config 0 descriptor?? [ 547.810770][ T25] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 548.032277][ T25] usb 2-1: USB disconnect, device number 44 [ 548.050626][ T25] usblp0: removed [ 548.220419][T16328] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[13568] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[16328] [ 548.463913][T16332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4056'. [ 549.509375][T16360] syzkaller0: entered promiscuous mode [ 549.509402][T16360] syzkaller0: entered allmulticast mode [ 549.659508][T16369] input: syz0 as /devices/virtual/input/input45 [ 550.746546][ T1169] IPVS: starting estimator thread 0... [ 550.808760][T16396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4073'. [ 550.834603][T16394] IPVS: using max 25 ests per chain, 60000 per kthread [ 551.061202][T16399] tipc: Enabled bearer , priority 0 [ 551.071477][T16399] syzkaller0: entered promiscuous mode [ 551.071502][T16399] syzkaller0: entered allmulticast mode [ 551.152517][T16399] tipc: Resetting bearer [ 551.165985][T16398] tipc: Resetting bearer [ 551.261736][T16398] tipc: Disabling bearer [ 552.795576][T16419] syzkaller0: entered promiscuous mode [ 552.795596][T16419] syzkaller0: entered allmulticast mode [ 553.305440][T16421] syzkaller0: entered promiscuous mode [ 553.305468][T16421] syzkaller0: entered allmulticast mode [ 553.632076][T16432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.092412][T16444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4094'. [ 557.627513][T12566] IPVS: starting estimator thread 0... [ 557.714946][T16466] IPVS: using max 27 ests per chain, 64800 per kthread [ 557.884934][T16471] syzkaller0: entered promiscuous mode [ 557.884959][T16471] syzkaller0: entered allmulticast mode [ 560.314440][ T864] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 560.464691][ T864] usb 5-1: Using ep0 maxpacket: 32 [ 560.469518][T16540] ucma_write: process 591 (syz.1.4131) changed security contexts after opening file descriptor, this is not allowed. [ 560.523155][ T864] usb 5-1: unable to get BOS descriptor or descriptor too short [ 560.523211][ T864] usb 5-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 560.524137][ T864] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 560.524176][ T864] usb 5-1: can't read configurations, error -71 [ 560.834825][ T25] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 560.984666][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 560.987208][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 560.988545][ T25] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 560.988573][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.988587][ T25] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 560.988613][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.038260][ T25] usb 4-1: config 0 descriptor?? [ 561.189263][T16550] syzkaller0: entered promiscuous mode [ 561.189289][T16550] syzkaller0: entered allmulticast mode [ 562.972092][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.972159][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.312733][T16598] syzkaller0: entered promiscuous mode [ 563.314872][T16598] syzkaller0: entered allmulticast mode [ 563.492062][T12129] usb 4-1: USB disconnect, device number 20 [ 563.502531][ T3383] IPVS: starting estimator thread 0... [ 563.608459][T16604] IPVS: using max 28 ests per chain, 67200 per kthread [ 563.876827][T12125] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 564.025730][T12125] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 564.026873][T12125] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 564.026893][T12125] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.026906][T12125] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 564.026935][T12125] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 564.028574][T12125] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 564.028602][T12125] usb 5-1: Product: syz [ 564.028643][T12125] usb 5-1: Manufacturer: syz [ 564.119986][T12125] cdc_wdm 5-1:1.0: skipping garbage [ 564.120019][T12125] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 564.262356][T16616] syzkaller0: entered promiscuous mode [ 564.262383][T16616] syzkaller0: entered allmulticast mode [ 564.564032][T16628] netlink: 'syz.4.4158': attribute type 21 has an invalid length. [ 564.820775][ T82] IPVS: starting estimator thread 0... [ 564.905070][T16636] IPVS: using max 29 ests per chain, 69600 per kthread [ 569.157075][T16628] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4158'. [ 569.212899][T12129] usb 5-1: USB disconnect, device number 30 [ 569.411599][T12566] IPVS: starting estimator thread 0... [ 569.451300][T16674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4184'. [ 569.495380][T16682] IPVS: using max 38 ests per chain, 91200 per kthread [ 569.707245][T16692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4189'. [ 569.928824][T16698] syzkaller0: entered promiscuous mode [ 569.928851][T16698] syzkaller0: entered allmulticast mode [ 573.095419][T16723] tipc: Enabling of bearer rejected, failed to enable media [ 573.215948][ T31] audit: type=1326 audit(1790152908.590:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.1.4203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 573.216197][ T31] audit: type=1326 audit(1790152908.590:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.1.4203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 573.219268][ T31] audit: type=1326 audit(1790152908.590:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.1.4203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 573.219322][ T31] audit: type=1326 audit(1790152908.590:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.1.4203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 573.219369][ T31] audit: type=1326 audit(1790152908.590:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.1.4203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 573.220337][ T31] audit: type=1326 audit(1790152908.590:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.1.4203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 573.220386][ T31] audit: type=1326 audit(1790152908.590:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.1.4203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 573.220431][ T31] audit: type=1326 audit(1790152908.590:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.1.4203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 573.220886][ T31] audit: type=1326 audit(1790152908.590:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.1.4203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 573.221111][ T31] audit: type=1326 audit(1790152908.590:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.1.4203" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 573.540531][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4200'. [ 573.893410][T16744] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4208'. [ 574.212782][T16750] syzkaller0: entered promiscuous mode [ 574.212802][T16750] syzkaller0: entered allmulticast mode [ 577.258687][T16764] tipc: Enabling of bearer rejected, failed to enable media [ 577.475977][T16784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4220'. [ 577.576005][T16783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4219'. [ 577.656159][T12125] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 577.805441][T12125] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 577.805485][T12125] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 577.808337][T12125] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.808451][T12125] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.808479][T12125] usb 2-1: config 0 interface 0 has no altsetting 0 [ 577.810003][T12125] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.810049][T12125] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.810076][T12125] usb 2-1: config 0 interface 0 has no altsetting 0 [ 577.813079][T12125] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.813127][T12125] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.813155][T12125] usb 2-1: config 0 interface 0 has no altsetting 0 [ 577.913528][T12125] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.913567][T12125] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.913587][T12125] usb 2-1: config 0 interface 0 has no altsetting 0 [ 577.941945][T12125] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.941999][T12125] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.942027][T12125] usb 2-1: config 0 interface 0 has no altsetting 0 [ 577.969634][T12125] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.969688][T12125] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.969716][T12125] usb 2-1: config 0 interface 0 has no altsetting 0 [ 577.997682][T12125] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.997736][T12125] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.997765][T12125] usb 2-1: config 0 interface 0 has no altsetting 0 [ 577.998913][T12125] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.998963][T12125] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.998991][T12125] usb 2-1: config 0 interface 0 has no altsetting 0 [ 578.002444][T12125] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 578.002470][T12125] usb 2-1: Product: syz [ 578.002487][T12125] usb 2-1: Manufacturer: syz [ 578.002503][T12125] usb 2-1: SerialNumber: syz [ 578.052528][T12125] usb 2-1: config 0 descriptor?? [ 578.096088][T12125] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 578.401216][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 578.401994][ T5691] usb 2-1: USB disconnect, device number 45 [ 578.429737][ T5691] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 579.590420][T16821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4233'. [ 579.590438][T16821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4233'. [ 579.691478][T16814] syzkaller0: entered promiscuous mode [ 579.691496][T16814] syzkaller0: entered allmulticast mode [ 580.264877][T16837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4235'. [ 582.516575][T16817] syzkaller0: entered promiscuous mode [ 582.516593][T16817] syzkaller0: entered allmulticast mode [ 582.541525][T16823] tipc: Enabled bearer , priority 0 [ 582.612872][T16815] tipc: Resetting bearer [ 582.689311][T16815] tipc: Disabling bearer [ 583.153780][T16863] netlink: 'syz.1.4245': attribute type 1 has an invalid length. [ 583.153805][T16863] netlink: 'syz.1.4245': attribute type 2 has an invalid length. [ 583.653626][T16869] syzkaller0: entered promiscuous mode [ 583.653663][T16869] syzkaller0: entered allmulticast mode [ 584.005780][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4249'. [ 584.005799][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4249'. [ 587.352391][T16894] tipc: Enabling of bearer rejected, failed to enable media [ 587.527540][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4252'. [ 588.026957][ T925] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 588.194764][ T925] usb 2-1: Using ep0 maxpacket: 8 [ 588.196995][ T925] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 588.198472][ T925] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 588.198502][ T925] usb 2-1: config 0 has no interface number 0 [ 588.198544][ T925] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 588.198569][ T925] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 588.198596][ T925] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 588.198658][ T925] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 588.198704][ T925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.202493][ T925] usb 2-1: config 0 descriptor?? [ 588.300828][ T925] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 588.580942][T16929] netlink: 'syz.5.4264': attribute type 1 has an invalid length. [ 588.629408][ T5691] usb 2-1: USB disconnect, device number 46 [ 588.629523][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 588.650931][T16913] ldusb 2-1:0.55: Couldn't submit interrupt_out_urb -19 [ 588.755739][ T5691] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 589.213207][T16938] syzkaller0: entered promiscuous mode [ 589.213234][T16938] syzkaller0: entered allmulticast mode [ 589.227453][T16938] tipc: Enabled bearer , priority 0 [ 589.239589][T16937] tipc: Resetting bearer [ 589.328957][T16937] tipc: Disabling bearer [ 589.603800][T16947] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4272'. [ 589.603845][T16947] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4272'. [ 589.769177][T16949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4270'. [ 589.810223][T16958] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 589.877996][T16952] syzkaller0: entered promiscuous mode [ 589.878026][T16952] syzkaller0: entered allmulticast mode [ 590.039963][T16964] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 591.221235][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4284'. [ 591.278266][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4284'. [ 593.458482][T16990] vxlan2: entered promiscuous mode [ 593.458508][T16990] vxlan2: entered allmulticast mode [ 593.515212][T16991] vxlan2: entered promiscuous mode [ 593.515239][T16991] vxlan2: entered allmulticast mode [ 593.751827][T17004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4290'. [ 594.204485][T12129] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 594.366991][T12129] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 594.369697][T12129] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 594.369734][T12129] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.369781][T12129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.683337][T12129] usb 1-1: GET_CAPABILITIES returned 0 [ 594.683383][T12129] usbtmc 1-1:16.0: can't read capabilities [ 594.711000][T17018] block device autoloading is deprecated and will be removed. [ 594.912125][T12129] usb 1-1: USB disconnect, device number 26 [ 595.020913][T17025] key id 000004d2 not found [ 595.037636][T17024] syzkaller0: entered promiscuous mode [ 595.037661][T17024] syzkaller0: entered allmulticast mode [ 595.067236][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4300'. [ 595.118728][T17030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4300'. [ 595.808094][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4305'. [ 595.878973][T17042] syzkaller0: entered promiscuous mode [ 595.879003][T17042] syzkaller0: entered allmulticast mode [ 596.535141][T17069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4314'. [ 596.589361][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4314'. [ 599.066178][T17069] vxlan0: entered promiscuous mode [ 599.066204][T17069] vxlan0: entered allmulticast mode [ 599.085941][ T3383] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.086031][ T3383] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.086229][ T3383] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.104864][ T3383] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.182174][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4316'. [ 599.423794][T17085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4321'. [ 599.878316][T17099] syzkaller0: entered promiscuous mode [ 599.878357][T17099] syzkaller0: entered allmulticast mode [ 599.913494][T17107] syzkaller0: entered promiscuous mode [ 599.913520][T17107] syzkaller0: entered allmulticast mode [ 603.276740][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4337'. [ 603.825520][T17148] syzkaller0: entered promiscuous mode [ 603.825547][T17148] syzkaller0: entered allmulticast mode [ 606.800246][T17176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4353'. [ 607.434874][T17197] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 607.434893][T17197] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 607.602469][T17205] syzkaller0: entered promiscuous mode [ 607.602496][T17205] syzkaller0: entered allmulticast mode [ 608.026374][T17214] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.4367'. [ 608.246968][T17216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4370'. [ 608.354915][T17219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4369'. [ 608.807937][T17236] syzkaller0: entered promiscuous mode [ 608.807961][T17236] syzkaller0: entered allmulticast mode [ 609.074204][T17247] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.4382'. [ 609.245371][T17250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4383'. [ 609.435894][T17255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4385'. [ 610.115036][T17276] syzkaller0: entered promiscuous mode [ 610.115061][T17276] syzkaller0: entered allmulticast mode [ 610.146427][T17280] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4386'. [ 610.454966][T17287] syzkaller0: entered promiscuous mode [ 610.454993][T17287] syzkaller0: entered allmulticast mode [ 610.890524][T17297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4401'. [ 611.910534][T17317] syzkaller0: entered promiscuous mode [ 611.910553][T17317] syzkaller0: entered allmulticast mode [ 612.272366][T17325] syzkaller0: entered promiscuous mode [ 612.272394][T17325] syzkaller0: entered allmulticast mode [ 612.480320][T17329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4414'. [ 613.084407][T12125] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 613.236285][T12125] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 613.257080][T12125] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 613.257133][T12125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.283834][T12125] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 613.283862][T12125] usb 2-1: Manufacturer: syz [ 613.315131][T12125] usb 2-1: config 0 descriptor?? [ 613.456273][T17351] syzkaller0: entered promiscuous mode [ 613.456299][T17351] syzkaller0: entered allmulticast mode [ 613.470068][T12125] rc_core: IR keymap rc-hauppauge not found [ 613.470087][T12125] Registered IR keymap rc-empty [ 613.492316][T12125] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 613.512502][T12125] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input46 [ 613.552123][T12125] usb 2-1: USB disconnect, device number 47 [ 613.663543][T17359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4424'. [ 613.801240][T17360] syzkaller0: entered promiscuous mode [ 613.801259][T17360] syzkaller0: entered allmulticast mode [ 613.993479][T17365] syzkaller0: entered promiscuous mode [ 613.993507][T17365] syzkaller0: entered allmulticast mode [ 614.147526][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4427'. [ 614.919326][T17388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4433'. [ 614.919349][T17388] openvswitch: netlink: Flow key attr not present in new flow. [ 617.320152][T17398] syzkaller0: entered promiscuous mode [ 617.320177][T17398] syzkaller0: entered allmulticast mode [ 617.360465][T17399] syzkaller0: entered promiscuous mode [ 617.360489][T17399] syzkaller0: entered allmulticast mode [ 617.917387][T17424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4447'. [ 617.949666][T17422] syzkaller0: entered promiscuous mode [ 617.949698][T17422] syzkaller0: entered allmulticast mode [ 618.674868][T17444] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4454'. [ 618.801074][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4451'. [ 620.857906][T17452] syzkaller0: entered promiscuous mode [ 620.857933][T17452] syzkaller0: entered allmulticast mode [ 620.886239][T17459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4459'. [ 621.104713][ T864] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 621.276029][ T864] usb 2-1: Using ep0 maxpacket: 32 [ 621.277224][ T864] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 621.278693][ T864] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 621.278727][ T864] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 621.278745][ T864] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 621.278765][ T864] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 621.281247][ T864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.281274][ T864] usb 2-1: Product: syz [ 621.281284][ T864] usb 2-1: Manufacturer: syz [ 621.281295][ T864] usb 2-1: SerialNumber: syz [ 621.496087][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 621.566452][ T864] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input47 [ 621.809291][T17479] netlink: 'syz.3.4466': attribute type 6 has an invalid length. [ 621.809865][ T864] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 621.809885][ T864] (id 0x00) [ 621.974723][ T864] rc_core: IR keymap rc-imon-pad not found [ 621.974744][ T864] Registered IR keymap rc-empty [ 621.974916][ T864] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 621.974937][ T864] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 621.996913][ T864] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 622.040908][ T864] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input48 [ 622.067244][ T864] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:48> initialized [ 622.238172][T17482] syzkaller0: entered promiscuous mode [ 622.238199][T17482] syzkaller0: entered allmulticast mode [ 622.714554][T17499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4470'. [ 622.903995][T17495] imon:send_packet: task interrupted [ 622.904100][T17495] imon:send_packet: packet tx failed (-512) [ 622.904846][T17495] imon:vfd_write: send packet #2 failed [ 622.953916][ T1236] usb 2-1: USB disconnect, device number 48 [ 623.106806][T17503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4472'. [ 624.411874][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.411935][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.130766][T17532] syzkaller0: entered promiscuous mode [ 626.130792][T17532] syzkaller0: entered allmulticast mode [ 629.034544][T17582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4490'. [ 630.734111][T17569] syzkaller0: entered promiscuous mode [ 630.734139][T17569] syzkaller0: entered allmulticast mode [ 633.320034][T17629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4505'. [ 635.480223][T17642] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4511'. [ 635.947074][T17648] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 635.947208][T17648] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 635.952865][T17648] kvm: requested 8380 ns i8254 timer period limited to 200000 ns [ 635.953488][T17648] kvm: requested 31847 ns i8254 timer period limited to 200000 ns [ 635.992474][T17648] kvm: requested 112304 ns i8254 timer period limited to 200000 ns [ 636.003907][T17648] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 636.004155][T17648] kvm: requested 46933 ns i8254 timer period limited to 200000 ns [ 636.038784][T17648] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 636.039147][T17648] kvm: requested 87161 ns i8254 timer period limited to 200000 ns [ 636.042773][T17648] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 636.082061][T17660] syzkaller0: entered promiscuous mode [ 636.082078][T17660] syzkaller0: entered allmulticast mode [ 636.424706][ T864] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 636.471963][T17664] syzkaller0: entered promiscuous mode [ 636.471983][T17664] syzkaller0: entered allmulticast mode [ 636.495868][T17667] syzkaller0: entered promiscuous mode [ 636.495932][T17667] syzkaller0: entered allmulticast mode [ 636.607624][ T864] usb 6-1: New USB device found, idVendor=09da, idProduct=002b, bcdDevice= 0.00 [ 636.607667][ T864] usb 6-1: no configurations [ 636.607680][ T864] usb 6-1: can't read configurations, error -22 [ 636.734588][ T864] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 636.905214][ T864] usb 6-1: New USB device found, idVendor=09da, idProduct=002b, bcdDevice= 0.00 [ 636.905262][ T864] usb 6-1: no configurations [ 636.905276][ T864] usb 6-1: can't read configurations, error -22 [ 636.907326][ T864] usb usb6-port1: attempt power cycle [ 637.264632][ T864] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 637.314070][ T864] usb 6-1: New USB device found, idVendor=09da, idProduct=002b, bcdDevice= 0.00 [ 637.314114][ T864] usb 6-1: no configurations [ 637.314129][ T864] usb 6-1: can't read configurations, error -22 [ 637.482392][ T864] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 637.529698][ T864] usb 6-1: New USB device found, idVendor=09da, idProduct=002b, bcdDevice= 0.00 [ 637.529730][ T864] usb 6-1: no configurations [ 637.529738][ T864] usb 6-1: can't read configurations, error -22 [ 637.530215][ T864] usb usb6-port1: unable to enumerate USB device [ 640.299872][T17674] ------------[ cut here ]------------ [ 640.299891][T17674] !chanctx_conf [ 640.299905][T17674] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5a6/0x630, CPU#1: syz.1.4521/17674 [ 640.321439][T17674] Modules linked in: [ 640.325496][T17674] CPU: 1 UID: 0 PID: 17674 Comm: syz.1.4521 Tainted: G L syzkaller #0 PREEMPT(full) [ 640.336526][T17674] Tainted: [L]=SOFTLOCKUP [ 640.340863][T17674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 640.351303][T17674] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 640.357766][T17674] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3c c5 91 00 cc e8 66 96 71 f6 90 0f 0b 90 eb e1 e8 5b 96 71 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 640.378454][T17674] RSP: 0000:ffffc900079eefc8 EFLAGS: 00010283 [ 640.384703][T17674] RAX: ffffffff8b563435 RBX: ffff888062d98050 RCX: 0000000000080000 [ 640.392756][T17674] RDX: ffffc90018584000 RSI: 00000000000003af RDI: 00000000000003b0 [ 640.400865][T17674] RBP: dffffc0000000000 R08: ffffffff8b562fa7 R09: 0000000000000000 [ 640.409052][T17674] R10: dffffc0000000000 R11: ffffed100c5b3031 R12: ffffffff8b562fa7 [ 640.417196][T17674] R13: ffff88805e610f40 R14: 0000000000000001 R15: 0000000000000000 [ 640.425513][T17674] FS: 0000000000000000(0000) GS:ffff888124dd2000(0063) knlGS:00000000f4fc8b40 [ 640.434691][T17674] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 640.441336][T17674] CR2: 000000002da23ffc CR3: 000000005665e000 CR4: 00000000003526f0 [ 640.449416][T17674] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 640.457447][T17674] DR3: 00000000fee0000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 640.465508][T17674] Call Trace: [ 640.468836][T17674] [ 640.471796][T17674] rate_control_rate_init_all_links+0xf4/0x190 [ 640.478315][T17674] sta_apply_auth_flags+0x1bc/0x430 [ 640.483584][T17674] sta_apply_parameters+0x1291/0x1b50 [ 640.489116][T17674] ieee80211_add_station+0x3de/0x700 [ 640.494556][T17674] rdev_add_station+0xfc/0x290 [ 640.499374][T17674] nl80211_new_station+0x1b4e/0x1fd0 [ 640.504803][T17674] ? trace_contention_end+0x3d/0x140 [ 640.510155][T17674] ? __pfx_nl80211_new_station+0x10/0x10 [ 640.515877][T17674] ? __rtnl_unlock+0xc8/0xf0 [ 640.520583][T17674] ? nl80211_pre_doit+0x53d/0x890 [ 640.525737][T17674] genl_family_rcv_msg_doit+0x233/0x340 [ 640.531342][T17674] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 640.537589][T17674] ? bpf_lsm_capable+0x9/0x20 [ 640.542317][T17674] ? security_capable+0x7e/0x2c0 [ 640.547406][T17674] genl_rcv_msg+0x614/0x7a0 [ 640.551970][T17674] ? __pfx_genl_rcv_msg+0x10/0x10 [ 640.557089][T17674] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 640.562547][T17674] ? __pfx_nl80211_new_station+0x10/0x10 [ 640.568295][T17674] ? __pfx_nl80211_post_doit+0x10/0x10 [ 640.573822][T17674] netlink_rcv_skb+0x226/0x4a0 [ 640.578875][T17674] ? __pfx_genl_rcv_msg+0x10/0x10 [ 640.583950][T17674] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 640.589375][T17674] ? down_read+0x2be/0x330 [ 640.593812][T17674] genl_rcv+0x28/0x40 [ 640.597845][T17674] netlink_unicast+0x7bd/0x940 [ 640.602643][T17674] netlink_sendmsg+0x813/0xb40 [ 640.607498][T17674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.612814][T17674] ? apparmor_socket_sendmsg+0x98/0x360 [ 640.618417][T17674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.623738][T17674] sock_sendmsg_nosec+0x13a/0x180 [ 640.628827][T17674] ____sys_sendmsg+0x54e/0x850 [ 640.633636][T17674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 640.639007][T17674] ___sys_sendmsg+0x2a5/0x360 [ 640.643729][T17674] ? __lock_acquire+0x747/0x2de0 [ 640.648723][T17674] ? __pfx____sys_sendmsg+0x10/0x10 [ 640.653954][T17674] ? do_raw_spin_lock+0x12b/0x2f0 [ 640.659085][T17674] ? __fget_files+0x2a/0x420 [ 640.663696][T17674] ? __fget_files+0x3a2/0x420 [ 640.668435][T17674] __sys_sendmsg+0x177/0x240 [ 640.673045][T17674] ? _raw_spin_unlock_irq+0x2e/0x50 [ 640.678304][T17674] ? __pfx___sys_sendmsg+0x10/0x10 [ 640.683572][T17674] __do_fast_syscall_32+0x27a/0x6a0 [ 640.688994][T17674] ? do_fast_syscall_32+0x33/0x70 [ 640.694060][T17674] ? irqentry_exit+0x10f/0x910 [ 640.698899][T17674] ? trace_irq_disable+0x3b/0x140 [ 640.703939][T17674] do_fast_syscall_32+0x33/0x70 [ 640.708839][T17674] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 640.715257][T17674] RIP: 0023:0xf703f0ec [ 640.719354][T17674] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 640.739074][T17674] RSP: 002b:00000000f4fc850c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 640.747545][T17674] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 640.755574][T17674] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 640.763618][T17674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 640.771667][T17674] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 640.779712][T17674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 640.787890][T17674] [ 640.790953][T17674] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 640.798238][T17674] CPU: 1 UID: 0 PID: 17674 Comm: syz.1.4521 Tainted: G L syzkaller #0 PREEMPT(full) [ 640.809199][T17674] Tainted: [L]=SOFTLOCKUP [ 640.813531][T17674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 640.823619][T17674] Call Trace: [ 640.826913][T17674] [ 640.829867][T17674] vpanic+0x56d/0xa60 [ 640.833985][T17674] ? __pfx__printk+0x10/0x10 [ 640.838600][T17674] ? __pfx_vpanic+0x10/0x10 [ 640.843129][T17674] ? is_bpf_text_address+0x292/0x2b0 [ 640.848428][T17674] ? is_bpf_text_address+0x26/0x2b0 [ 640.853654][T17674] panic+0xc5/0xd0 [ 640.857413][T17674] ? __pfx_panic+0x10/0x10 [ 640.861861][T17674] __warn+0x315/0x4c0 [ 640.865858][T17674] ? rate_control_rate_init+0x5a6/0x630 [ 640.871422][T17674] ? rate_control_rate_init+0x5a6/0x630 [ 640.876980][T17674] __report_bug+0x276/0x570 [ 640.881492][T17674] ? rate_control_rate_init+0x5a6/0x630 [ 640.887056][T17674] ? __pfx___report_bug+0x10/0x10 [ 640.892119][T17674] ? __lock_acquire+0x747/0x2de0 [ 640.897070][T17674] ? __lock_acquire+0x747/0x2de0 [ 640.902042][T17674] ? rate_control_rate_init+0x5a6/0x630 [ 640.907616][T17674] report_bug+0x16b/0x220 [ 640.911975][T17674] ? rate_control_rate_init+0x5a6/0x630 [ 640.917561][T17674] ? rate_control_rate_init+0x5a8/0x630 [ 640.923200][T17674] handle_bug+0x9c/0x200 [ 640.927467][T17674] exc_invalid_op+0x1a/0x50 [ 640.932119][T17674] asm_exc_invalid_op+0x1a/0x20 [ 640.937010][T17674] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 640.943185][T17674] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3c c5 91 00 cc e8 66 96 71 f6 90 0f 0b 90 eb e1 e8 5b 96 71 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 640.962896][T17674] RSP: 0000:ffffc900079eefc8 EFLAGS: 00010283 [ 640.968976][T17674] RAX: ffffffff8b563435 RBX: ffff888062d98050 RCX: 0000000000080000 [ 640.976953][T17674] RDX: ffffc90018584000 RSI: 00000000000003af RDI: 00000000000003b0 [ 640.984933][T17674] RBP: dffffc0000000000 R08: ffffffff8b562fa7 R09: 0000000000000000 [ 640.992933][T17674] R10: dffffc0000000000 R11: ffffed100c5b3031 R12: ffffffff8b562fa7 [ 641.000914][T17674] R13: ffff88805e610f40 R14: 0000000000000001 R15: 0000000000000000 [ 641.008912][T17674] ? rate_control_rate_init+0x117/0x630 [ 641.014483][T17674] ? rate_control_rate_init+0x117/0x630 [ 641.020041][T17674] ? rate_control_rate_init+0x5a5/0x630 [ 641.025622][T17674] ? rate_control_rate_init+0x5a5/0x630 [ 641.031220][T17674] rate_control_rate_init_all_links+0xf4/0x190 [ 641.037420][T17674] sta_apply_auth_flags+0x1bc/0x430 [ 641.042673][T17674] sta_apply_parameters+0x1291/0x1b50 [ 641.048085][T17674] ieee80211_add_station+0x3de/0x700 [ 641.053414][T17674] rdev_add_station+0xfc/0x290 [ 641.058190][T17674] nl80211_new_station+0x1b4e/0x1fd0 [ 641.063512][T17674] ? trace_contention_end+0x3d/0x140 [ 641.068835][T17674] ? __pfx_nl80211_new_station+0x10/0x10 [ 641.074599][T17674] ? __rtnl_unlock+0xc8/0xf0 [ 641.079266][T17674] ? nl80211_pre_doit+0x53d/0x890 [ 641.084314][T17674] genl_family_rcv_msg_doit+0x233/0x340 [ 641.090175][T17674] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 641.096278][T17674] ? bpf_lsm_capable+0x9/0x20 [ 641.100960][T17674] ? security_capable+0x7e/0x2c0 [ 641.105909][T17674] genl_rcv_msg+0x614/0x7a0 [ 641.110470][T17674] ? __pfx_genl_rcv_msg+0x10/0x10 [ 641.115499][T17674] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 641.120882][T17674] ? __pfx_nl80211_new_station+0x10/0x10 [ 641.126524][T17674] ? __pfx_nl80211_post_doit+0x10/0x10 [ 641.132002][T17674] netlink_rcv_skb+0x226/0x4a0 [ 641.136790][T17674] ? __pfx_genl_rcv_msg+0x10/0x10 [ 641.141834][T17674] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 641.147161][T17674] ? down_read+0x2be/0x330 [ 641.151621][T17674] genl_rcv+0x28/0x40 [ 641.155637][T17674] netlink_unicast+0x7bd/0x940 [ 641.160465][T17674] netlink_sendmsg+0x813/0xb40 [ 641.165324][T17674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.170661][T17674] ? apparmor_socket_sendmsg+0x98/0x360 [ 641.176240][T17674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.181554][T17674] sock_sendmsg_nosec+0x13a/0x180 [ 641.186617][T17674] ____sys_sendmsg+0x54e/0x850 [ 641.191431][T17674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 641.196785][T17674] ___sys_sendmsg+0x2a5/0x360 [ 641.201505][T17674] ? __lock_acquire+0x747/0x2de0 [ 641.206485][T17674] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.211734][T17674] ? do_raw_spin_lock+0x12b/0x2f0 [ 641.216834][T17674] ? __fget_files+0x2a/0x420 [ 641.221462][T17674] ? __fget_files+0x3a2/0x420 [ 641.226195][T17674] __sys_sendmsg+0x177/0x240 [ 641.230830][T17674] ? _raw_spin_unlock_irq+0x2e/0x50 [ 641.236082][T17674] ? __pfx___sys_sendmsg+0x10/0x10 [ 641.241254][T17674] __do_fast_syscall_32+0x27a/0x6a0 [ 641.246484][T17674] ? do_fast_syscall_32+0x33/0x70 [ 641.251559][T17674] ? irqentry_exit+0x10f/0x910 [ 641.256366][T17674] ? trace_irq_disable+0x3b/0x140 [ 641.261440][T17674] do_fast_syscall_32+0x33/0x70 [ 641.266334][T17674] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 641.272710][T17674] RIP: 0023:0xf703f0ec [ 641.276816][T17674] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 641.296456][T17674] RSP: 002b:00000000f4fc850c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 641.304914][T17674] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 641.312929][T17674] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 641.320928][T17674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 641.328929][T17674] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 641.336928][T17674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 641.344957][T17674] [ 641.348619][T17674] Kernel Offset: disabled [ 641.352984][T17674] Rebooting in 86400 seconds..