last executing test programs: 18m41.773820389s ago: executing program 1 (id=101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 18m36.485178517s ago: executing program 1 (id=111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x408, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000300)="71ed20c6", 0x0}, 0x20) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000700)=0x14) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x68000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) unshare(0x2a020400) r3 = fanotify_init(0x200, 0x0) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000200)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r4, 0x400000000000003a, 0x1, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x200000000000000) 18m35.819857742s ago: executing program 1 (id=112): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = syz_io_uring_setup(0x78ae, &(0x7f0000000180)={0x0, 0x0, 0x400, 0x1, 0x308}, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002440)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r2, &(0x7f0000000040)="89eb27039410c760c07122c3dd53438786dd", 0x12, 0x4, &(0x7f0000000180)={0x11, 0x8100, r4, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000210001002cbd7000fddbdf250a100004ff0000001600010008000600dc6bfc5b140001"], 0x38}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040040) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000001a0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xffffffffffffff9d, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x10}, 0x10}, 0x94) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="00000000150000022abd7000fbdbdf2502408200", @ANYRES32=r4, @ANYBLOB="00000100ac1414aa0000030069705f767469300000000000000000000000030d02add7933b3ebe6acd2af877190076657468305f6d61637674610900050000000000"], 0x28}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x94, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @qdisc_kind_options=@q_cake={{0x9}, {0x30, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0xf9}, @TCA_CAKE_TARGET={0x8, 0x8, 0x83}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_RATE={0x6, 0x5, {0x80, 0x9}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r9) 18m35.356956686s ago: executing program 1 (id=114): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0xffffff63) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4", 0x6d, 0x840, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x006'], 0x48) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') ppoll(&(0x7f00000000c0)=[{r1, 0xa5a0}, {r1, 0x1410}], 0x2, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x0, 0x9, 0x6, 0x32435750, [0x1, 0x4bf], [0x1, 0x2], 0x13a}}) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c001f004000070000feffff00000000017c00001400018006800a000008001300000000", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_mount_image$iso9660(&(0x7f0000000600), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={[], [{@uid_eq}]}, 0x0, 0x519, &(0x7f00000007c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) 18m33.157825652s ago: executing program 1 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x400) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0x90, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x7, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x41100, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r8, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 18m32.411850621s ago: executing program 1 (id=121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) read$FUSE(r2, 0x0, 0x0) socket(0xa, 0x5, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000002061f080020000000000500020000aef200050004000200000000000d0073797a3000dd6c493900032068617338a69a11e7718339a8b8683a6e65742c696661"], 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x10002) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000880) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x72, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @null]}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000000)={0x0, 0xfff, "568b21", 0x0, 0x9}) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x200000000000000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40480d4) 18m31.262155061s ago: executing program 32 (id=121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) read$FUSE(r2, 0x0, 0x0) socket(0xa, 0x5, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000002061f080020000000000500020000aef200050004000200000000000d0073797a3000dd6c493900032068617338a69a11e7718339a8b8683a6e65742c696661"], 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x10002) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000880) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x72, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @null]}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000000)={0x0, 0xfff, "568b21", 0x0, 0x9}) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x200000000000000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40480d4) 10m47.950432886s ago: executing program 4 (id=1236): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffb, 0x0, 0xffffffff}, 0x10) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/38, 0x26}], 0x1}, 0x2174eda0}], 0x1, 0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000080)) 10m47.659821801s ago: executing program 4 (id=1238): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000ac0)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000680)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000001040)={[&(0x7f00000000c0)='-\xf3\x00', &(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f0000001000)='\xb7\xe8\x00']}) 10m47.386869655s ago: executing program 4 (id=1239): ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000000)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x55ce29afe10411a5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff, 0x0, 0x1, 0x1, 0x8, 0x6}, &(0x7f0000019200)=0x20) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x30, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020100000e000000fcffffff0400000005000600000000000a00000000000000fc01ff800000000000000000000000000000000000000000050005000000", @ANYRES32=r5], 0x70}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x400) 10m47.039696464s ago: executing program 4 (id=1241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x10759000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000480), 0x0) recvmmsg(r7, 0x0, 0x0, 0x40, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4004004) recvmsg(0xffffffffffffffff, 0x0, 0x102) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05032200d3fc220000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 10m46.763906298s ago: executing program 4 (id=1243): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2720, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff) 10m46.563909049s ago: executing program 4 (id=1244): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b9108172fc4be002dc7dc8fea97a2df9666", 0xa9}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f073f9fbe1508819dd448be8d9873aa90426f3cf4c187d10215395e8a7807e5893b0bd80f4ff745fe7f9c316d18f69265662694261c0b194ef861", 0x72}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r3 = syz_clone3(&(0x7f0000000440)={0x221a00, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000540)='net/ip6_tables_matches\x00') lseek(r5, 0x1, 0x1) getdents64(r5, 0xffffffffffffffff, 0x43) read$dsp(r5, &(0x7f00000002c0)=""/169, 0xa9) writev(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) syz_open_procfs(r3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r6, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r6, &(0x7f0000000100)=""/253, 0xfd, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x3}, 0x18, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0x0) connect$unix(r8, &(0x7f0000000640)=@file={0x1, './file0/file0\x00'}, 0x6e) 10m31.226178845s ago: executing program 33 (id=1244): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b9108172fc4be002dc7dc8fea97a2df9666", 0xa9}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f073f9fbe1508819dd448be8d9873aa90426f3cf4c187d10215395e8a7807e5893b0bd80f4ff745fe7f9c316d18f69265662694261c0b194ef861", 0x72}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r3 = syz_clone3(&(0x7f0000000440)={0x221a00, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000540)='net/ip6_tables_matches\x00') lseek(r5, 0x1, 0x1) getdents64(r5, 0xffffffffffffffff, 0x43) read$dsp(r5, &(0x7f00000002c0)=""/169, 0xa9) writev(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) syz_open_procfs(r3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r6, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r6, &(0x7f0000000100)=""/253, 0xfd, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x3}, 0x18, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0x0) connect$unix(r8, &(0x7f0000000640)=@file={0x1, './file0/file0\x00'}, 0x6e) 2m26.018971058s ago: executing program 2 (id=4154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 2m25.879208675s ago: executing program 2 (id=4156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x800}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xffff}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m25.349183473s ago: executing program 2 (id=4159): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) pread64(r0, 0x0, 0x0, 0x78f2a36b) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) socket$igmp6(0xa, 0x3, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x3, 0xfffffffffffffffd, 0x1000000009, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x56d92c8a, 0x0, 0xfffffffffffffffc, 0x9, 0x10}, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r2, 0x0, 0x7, 0x1f5, 0x1, 0x0, {0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x373, 0x8001, 0xfffffffb, "b4bc3244f77d1f000071849800000800"}}) 2m25.168084383s ago: executing program 2 (id=4160): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x48042) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) 2m25.072540358s ago: executing program 2 (id=4162): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000340)=[{0x6, 0x4a11, 0x0, 0x0}, {0xff, 0x201, 0x0, 0x0}], 0x2}) 2m22.503911044s ago: executing program 2 (id=4191): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) unshare(0x28000600) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="020500090a00000000000000000000020300060000000e0002000000e00000090000000000010000000000000000d3f0ffff060200000000030005390000000002018000001414bb00000000000000005abee97c3eff2d"], 0x50}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) mknod$loop(&(0x7f0000000140)='./file0/file0\x00', 0x10, 0x1) r3 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='user\x00N\xac]\xda\x18\xa3\x7f\x00\v\xb6tH\xa6\x1c\x12GD/\x04\xc3\x99\xd5\xa6{)\'\x04\xeb', &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080)='\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="04bcf9fc1878786d0a", 0x9}], 0x1}, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 2m7.019199024s ago: executing program 34 (id=4191): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) unshare(0x28000600) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="020500090a00000000000000000000020300060000000e0002000000e00000090000000000010000000000000000d3f0ffff060200000000030005390000000002018000001414bb00000000000000005abee97c3eff2d"], 0x50}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) mknod$loop(&(0x7f0000000140)='./file0/file0\x00', 0x10, 0x1) r3 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='user\x00N\xac]\xda\x18\xa3\x7f\x00\v\xb6tH\xa6\x1c\x12GD/\x04\xc3\x99\xd5\xa6{)\'\x04\xeb', &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080)='\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="04bcf9fc1878786d0a", 0x9}], 0x1}, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 13.320396315s ago: executing program 3 (id=4976): syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1463, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x120002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.921009508s ago: executing program 3 (id=5017): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) io_uring_setup(0xb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r3, r3, 0x0, 0x800007) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0x1, 0x4, 0x0, 0x8, 0x1, 0x6, 0x1, 0x8, 0x4, 0x4, 0x40, 0x0, 0x7, 0x8, 0x5, 0x7, 0xce, 0x9, '\x00', 0x9, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) 8.49998097s ago: executing program 5 (id=5023): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 8.366900947s ago: executing program 5 (id=5025): syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003"], 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1463, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x120002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.80889003s ago: executing program 3 (id=5041): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x6}}, 0x18) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x0, {0x2, 0xff, 0x4}, {0x1, 0x0, 0x4}, 0x101, 0xff}, {0x2, 0x2, {0x1, 0x1}, {0x0, 0x0, 0x3}, 0xff, 0xfe}, {0x1, 0x2, {0x0, 0x0, 0x3}, {0x0, 0xf0}, 0xfc}], 0x60) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)}}], 0x1, 0x41) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 6.564110523s ago: executing program 3 (id=5044): syz_open_dev$admmidi(0x0, 0x20, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.442340799s ago: executing program 6 (id=5046): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x405, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c) listen(r0, 0x200b) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 6.381657872s ago: executing program 3 (id=5048): r0 = fsopen(&(0x7f00000002c0)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4,,:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) 6.303323086s ago: executing program 6 (id=5049): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) io_uring_setup(0xb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r3, r3, 0x0, 0x800007) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0x1, 0x4, 0x0, 0x8, 0x1, 0x6, 0x1, 0x8, 0x4, 0x4, 0x40, 0x0, 0x7, 0x8, 0x5, 0x7, 0xce, 0x9, '\x00', 0x9, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) 6.163804924s ago: executing program 3 (id=5051): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x2a000) syz_usb_disconnect(r0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 6.04584228s ago: executing program 0 (id=5052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006a9000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000b24000/0x2000)=nil, &(0x7f0000257000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 5.799671523s ago: executing program 0 (id=5053): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000005c0), 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @random="000863ee0a3d"}, 0x14) 5.614789353s ago: executing program 0 (id=5054): pipe2$watch_queue(&(0x7f0000002240), 0x80) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="a9", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) 5.276726861s ago: executing program 0 (id=5055): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x18, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 5.151778428s ago: executing program 5 (id=5056): syz_open_dev$admmidi(0x0, 0x20, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.138927328s ago: executing program 6 (id=5057): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x140341) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x1800000000]}}) 5.119436969s ago: executing program 5 (id=5058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x81, 0x8, 0x4, 0x1, 0x9}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0xc884) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 4.607032407s ago: executing program 6 (id=5059): syz_open_procfs(0x0, 0x0) socket(0xa, 0x800, 0xfffffffb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000001, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r4 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'geneve0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x6, 0x1}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x800) 226.470279ms ago: executing program 0 (id=5061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0x6, 0x2}, 0x1}}]}, {}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 225.348908ms ago: executing program 6 (id=5062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x2}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x7, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0xfffffffe, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x1, 0x7, 0x7, 0x6, 0x1000, 0x2007, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x8226, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x3ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x1000, 0x5, 0x7, 0x40, 0x4d27, 0x2, 0x6, 0x8226, 0xe, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x7f43, 0x9, 0x2, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2, 0xd098, 0x9, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0xb, 0x1, 0x4, 0x4c, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x4, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x2, 0x1, 0x4a0, 0x6, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x676, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) 225.028559ms ago: executing program 5 (id=5063): pipe2$watch_queue(&(0x7f0000002240), 0x80) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="a9", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) 105.136474ms ago: executing program 0 (id=5064): syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003"], 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1463, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x120002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 98.794455ms ago: executing program 5 (id=5065): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) io_uring_setup(0xb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) sendfile(r3, r3, 0x0, 0x800007) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0x1, 0x4, 0x0, 0x8, 0x1, 0x6, 0x1, 0x8, 0x4, 0x4, 0x40, 0x0, 0x7, 0x8, 0x5, 0x7, 0xce, 0x9, '\x00', 0x9, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) 0s ago: executing program 6 (id=5066): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): ][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.401122][ T5854] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1077.410634][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.430391][ T5854] usb 4-1: config 0 descriptor?? [ 1077.582354][ T5773] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1077.767265][ T5773] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1077.780135][ T5773] usb 6-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1077.792493][ T5835] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1077.792805][ T5773] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1077.816485][ T5773] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1077.836779][T18590] tipc: Enabled bearer , priority 0 [ 1077.845548][ T5773] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1077.855536][T18590] syzkaller0: entered promiscuous mode [ 1077.862455][ T5773] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1077.870604][ T5773] usb 6-1: Product: syz [ 1077.875070][T18590] syzkaller0: entered allmulticast mode [ 1077.882625][ T5773] usb 6-1: Manufacturer: syz [ 1077.902297][T18590] tipc: Resetting bearer [ 1077.910870][T18589] tipc: Resetting bearer [ 1077.911854][ T5773] cdc_wdm 6-1:1.0: skipping garbage [ 1077.923451][ T5773] cdc_wdm 6-1:1.0: skipping garbage [ 1077.928824][ T5773] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 1077.937838][ T5854] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 1077.955624][ T5854] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 1077.968931][T18589] tipc: Disabling bearer [ 1077.993753][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 1077.999762][ T5835] usb 3-1: no configurations [ 1078.007469][ T5835] usb 3-1: can't read configurations, error -22 [ 1078.071081][T18592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3743'. [ 1078.140734][ T5773] usb 6-1: USB disconnect, device number 60 [ 1078.164864][ T5835] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1078.180335][ T5854] ft260 0003:0403:6030.001B: chip code: 0000 0000 [ 1078.382346][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 1078.391898][ T5854] ft260 0003:0403:6030.001B: failed to retrieve system status [ 1078.408146][ T5835] usb 3-1: no configurations [ 1078.418480][ T5854] ft260: probe of 0003:0403:6030.001B failed with error -5 [ 1078.426298][ T5835] usb 3-1: can't read configurations, error -22 [ 1078.439653][ T5835] usb usb3-port1: attempt power cycle [ 1078.594534][T18601] netlink: 'syz.0.3747': attribute type 1 has an invalid length. [ 1078.630080][T18601] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1078.737260][ T28] audit: type=1326 audit(1777254092.925:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18603 comm="syz.5.3748" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f110879cdd9 code=0x0 [ 1078.872489][ T5835] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1078.915054][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 1078.921482][ T5835] usb 3-1: no configurations [ 1078.930754][ T5835] usb 3-1: can't read configurations, error -22 [ 1079.093827][ T5835] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1079.145718][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 1079.156776][ T5835] usb 3-1: no configurations [ 1079.161452][ T5835] usb 3-1: can't read configurations, error -22 [ 1079.181848][ T5835] usb usb3-port1: unable to enumerate USB device [ 1079.721692][T18620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3751'. [ 1080.163370][T18626] xt_hashlimit: size too large, truncated to 1048576 [ 1080.605166][ T5835] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1080.721697][ T5854] usb 4-1: USB disconnect, device number 100 [ 1080.946983][ T11] tipc: Subscription rejected, illegal request [ 1080.999639][ T5835] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1081.010736][ T5835] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1081.020066][ T5835] usb 6-1: can't read configurations, error -71 [ 1081.092568][ T28] audit: type=1326 audit(1777254095.275:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18642 comm="syz.3.3759" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f708779cdd9 code=0x0 [ 1081.801065][T18655] tipc: Enabled bearer , priority 0 [ 1081.820778][T18655] syzkaller0: entered promiscuous mode [ 1081.826967][T18655] syzkaller0: entered allmulticast mode [ 1081.859910][T18655] tipc: Resetting bearer [ 1081.923688][T18654] tipc: Resetting bearer [ 1081.972211][T18654] tipc: Disabling bearer [ 1082.562308][ T5835] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1082.782177][ T5835] usb 6-1: Using ep0 maxpacket: 16 [ 1082.788430][ T5835] usb 6-1: no configurations [ 1082.822132][ T5835] usb 6-1: can't read configurations, error -22 [ 1082.935785][T18668] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1083.132493][T18674] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1083.242289][ T5835] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1083.321110][T18681] syzkaller0: entered promiscuous mode [ 1083.328001][T18681] syzkaller0: entered allmulticast mode [ 1083.432427][ T5835] usb 6-1: Using ep0 maxpacket: 16 [ 1083.442393][ T5835] usb 6-1: no configurations [ 1083.448665][ T5835] usb 6-1: can't read configurations, error -22 [ 1083.485897][ T5835] usb usb6-port1: attempt power cycle [ 1083.602275][ T5854] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1083.782429][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 1083.795893][ T5854] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1083.804634][ T5854] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1083.813873][ T5854] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.826802][ T5854] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1083.836486][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1083.847373][ T5854] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1083.886532][ T5854] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1083.901706][ T5854] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1083.915800][ T5835] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1083.925160][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.940000][ T5854] usb 3-1: config 0 descriptor?? [ 1083.952902][ T5835] usb 6-1: Using ep0 maxpacket: 16 [ 1083.959442][ T5835] usb 6-1: no configurations [ 1083.964987][ T5835] usb 6-1: can't read configurations, error -22 [ 1084.136059][ T5835] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1084.182932][ T5835] usb 6-1: Using ep0 maxpacket: 16 [ 1084.194825][ T5835] usb 6-1: no configurations [ 1084.202857][ T5835] usb 6-1: can't read configurations, error -22 [ 1084.220193][ T5835] usb usb6-port1: unable to enumerate USB device [ 1084.629692][T18697] tipc: Enabled bearer , priority 0 [ 1084.637928][T18697] syzkaller0: entered promiscuous mode [ 1084.645329][T18697] syzkaller0: entered allmulticast mode [ 1084.667816][T18696] tipc: Resetting bearer [ 1084.696783][T18696] tipc: Disabling bearer [ 1085.304055][T18709] binder: 18708:18709 ioctl c0306201 0 returned -14 [ 1085.519200][T18713] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1085.758083][T18716] tipc: Enabled bearer , priority 0 [ 1085.793703][T18716] syzkaller0: entered promiscuous mode [ 1085.799341][T18716] syzkaller0: entered allmulticast mode [ 1085.828400][T18716] tipc: Resetting bearer [ 1085.845078][T18715] tipc: Resetting bearer [ 1085.919919][T18715] tipc: Disabling bearer [ 1085.930004][ T28] audit: type=1326 audit(1777254100.115:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.3.3789" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f708779cdd9 code=0x0 [ 1086.202299][T11621] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1086.320444][ T5152] usb 3-1: USB disconnect, device number 109 [ 1086.392475][T11621] usb 1-1: Using ep0 maxpacket: 32 [ 1086.403936][T11621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.415394][T11621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.425754][T11621] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1086.436220][T11621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.444572][ T5773] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1086.460526][T11621] usb 1-1: config 0 descriptor?? [ 1086.642251][ T5773] usb 6-1: Using ep0 maxpacket: 16 [ 1086.648293][ T5773] usb 6-1: no configurations [ 1086.653053][ T5773] usb 6-1: can't read configurations, error -22 [ 1086.809440][ T5773] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1086.877380][T11621] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 1086.884700][T11621] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 1086.995499][ T5773] usb 6-1: Using ep0 maxpacket: 16 [ 1087.003855][ T5773] usb 6-1: no configurations [ 1087.008518][ T5773] usb 6-1: can't read configurations, error -22 [ 1087.015463][ T5773] usb usb6-port1: attempt power cycle [ 1087.076851][T11621] ft260 0003:0403:6030.001C: chip code: 0000 0000 [ 1087.282999][T11621] ft260 0003:0403:6030.001C: failed to retrieve system status [ 1087.301849][T11621] ft260: probe of 0003:0403:6030.001C failed with error -5 [ 1087.433184][ T5773] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1087.467976][T18743] tipc: Enabled bearer , priority 0 [ 1087.475469][ T5773] usb 6-1: Using ep0 maxpacket: 16 [ 1087.476316][T18743] syzkaller0: entered promiscuous mode [ 1087.481496][ T5773] usb 6-1: no configurations [ 1087.486442][T18743] syzkaller0: entered allmulticast mode [ 1087.503116][ T5773] usb 6-1: can't read configurations, error -22 [ 1087.537515][T18743] tipc: Resetting bearer [ 1087.546308][T18742] tipc: Resetting bearer [ 1087.576955][T18742] tipc: Disabling bearer [ 1087.673783][ T5773] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1087.723146][ T5773] usb 6-1: Using ep0 maxpacket: 16 [ 1087.729298][ T5773] usb 6-1: no configurations [ 1087.735674][ T5773] usb 6-1: can't read configurations, error -22 [ 1087.745064][ T5773] usb usb6-port1: unable to enumerate USB device [ 1087.992308][ T5854] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1088.175871][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 1088.185128][ T5854] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1088.192351][ T28] audit: type=1326 audit(1777254102.375:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.3.3807" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f708779cdd9 code=0x0 [ 1088.196720][ T5854] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1088.231242][ T5854] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.241523][ T5854] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1088.251063][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1088.263204][ T5854] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1088.273272][ T5854] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1088.288579][ T5854] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1088.298156][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.310174][ T5854] usb 3-1: config 0 descriptor?? [ 1089.281114][ T5835] usb 1-1: USB disconnect, device number 75 [ 1089.406963][ T35] tipc: Subscription rejected, illegal request [ 1089.508360][T18772] tipc: Enabled bearer , priority 0 [ 1089.527790][T18772] syzkaller0: entered promiscuous mode [ 1089.533915][T18772] syzkaller0: entered allmulticast mode [ 1089.570432][T18772] tipc: Resetting bearer [ 1089.601570][T18771] tipc: Resetting bearer [ 1089.643208][T18771] tipc: Disabling bearer [ 1090.142236][T11621] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1090.302225][ T5773] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1090.326483][T11621] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1090.336146][T11621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.344649][T11621] usb 6-1: Product: syz [ 1090.349039][T11621] usb 6-1: Manufacturer: syz [ 1090.354238][T11621] usb 6-1: SerialNumber: syz [ 1090.361065][T11621] usb 6-1: config 0 descriptor?? [ 1090.488859][ T5773] usb 4-1: Using ep0 maxpacket: 16 [ 1090.497172][ T5773] usb 4-1: no configurations [ 1090.501837][ T5773] usb 4-1: can't read configurations, error -22 [ 1090.601485][T11621] usb 6-1: USB disconnect, device number 71 [ 1090.654389][ T5773] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1090.758682][ T5152] usb 3-1: USB disconnect, device number 110 [ 1090.829151][T18796] tipc: Enabled bearer , priority 0 [ 1090.837623][T18796] syzkaller0: entered promiscuous mode [ 1090.843802][ T5773] usb 4-1: Using ep0 maxpacket: 16 [ 1090.849121][T18796] syzkaller0: entered allmulticast mode [ 1090.878052][ T5773] usb 4-1: no configurations [ 1090.883318][ T5773] usb 4-1: can't read configurations, error -22 [ 1090.893761][ T5773] usb usb4-port1: attempt power cycle [ 1090.901817][T18795] tipc: Resetting bearer [ 1090.945818][T18795] tipc: Disabling bearer [ 1091.045284][ T28] audit: type=1326 audit(1777254105.235:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.0.3823" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3610f9cdd9 code=0x0 [ 1091.079639][T18804] binder: 18803:18804 ioctl c0306201 0 returned -14 [ 1091.322443][ T5773] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1091.365077][ T5773] usb 4-1: Using ep0 maxpacket: 16 [ 1091.383401][ T5773] usb 4-1: no configurations [ 1091.388276][ T5773] usb 4-1: can't read configurations, error -22 [ 1091.542296][ T5773] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1091.572798][ T5773] usb 4-1: Using ep0 maxpacket: 16 [ 1091.578612][ T5773] usb 4-1: no configurations [ 1091.583760][ T5773] usb 4-1: can't read configurations, error -22 [ 1091.590369][ T5773] usb usb4-port1: unable to enumerate USB device [ 1091.712254][ T5835] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1091.917369][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 1091.927686][ T5835] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1091.937544][ T5835] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1091.946840][ T5835] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.957394][ T5835] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1091.966689][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1091.978215][ T5835] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1091.989626][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1092.003235][ T5835] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1092.012455][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.025924][ T5835] usb 3-1: config 0 descriptor?? [ 1092.499820][T18827] tipc: Enabled bearer , priority 0 [ 1092.511226][T18827] tipc: Resetting bearer [ 1092.521116][T18825] tipc: Disabling bearer [ 1093.020755][T18847] binder: 18846:18847 ioctl c0306201 0 returned -14 [ 1094.458168][ T5854] usb 3-1: USB disconnect, device number 111 [ 1095.052302][ T5854] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1095.252289][ T5854] usb 3-1: Using ep0 maxpacket: 16 [ 1095.258099][ T5854] usb 3-1: no configurations [ 1095.265361][ T5854] usb 3-1: can't read configurations, error -22 [ 1095.422361][ T5854] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1095.634591][ T5854] usb 3-1: Using ep0 maxpacket: 16 [ 1095.663059][ T5854] usb 3-1: no configurations [ 1095.667747][ T5854] usb 3-1: can't read configurations, error -22 [ 1095.691093][ T5854] usb usb3-port1: attempt power cycle [ 1096.102356][ T5854] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1096.133479][ T5854] usb 3-1: Using ep0 maxpacket: 16 [ 1096.141665][ T5854] usb 3-1: no configurations [ 1096.146870][ T5854] usb 3-1: can't read configurations, error -22 [ 1096.302335][ T5854] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1096.348102][ T5854] usb 3-1: Using ep0 maxpacket: 16 [ 1096.395921][ T5854] usb 3-1: no configurations [ 1096.401318][ T5854] usb 3-1: can't read configurations, error -22 [ 1096.411180][ T5854] usb usb3-port1: unable to enumerate USB device [ 1097.674483][T18929] syzkaller0: entered promiscuous mode [ 1097.687403][T18929] syzkaller0: entered allmulticast mode [ 1097.888749][T18935] binder: BINDER_SET_CONTEXT_MGR already set [ 1097.912353][T18935] binder: 18933:18935 ioctl 4018620d 200000004a80 returned -16 [ 1098.512389][ T786] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1098.702128][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 1098.711102][ T786] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1098.719765][ T786] usb 1-1: can't read configurations, error -61 [ 1098.872258][ T786] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1099.072179][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 1099.090520][ T786] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1099.101873][ T786] usb 1-1: can't read configurations, error -61 [ 1099.109104][ T786] usb usb1-port1: attempt power cycle [ 1099.352221][ T5773] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1099.522576][ T786] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1099.532145][ T5773] usb 3-1: Using ep0 maxpacket: 8 [ 1099.541480][ T5773] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1099.551682][ T5773] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1099.561774][ T5773] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1099.571736][ T5773] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1099.573454][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 1099.583099][ T5773] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1099.597774][ T786] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1099.601910][ T5773] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1099.613749][ T786] usb 1-1: can't read configurations, error -61 [ 1099.618961][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.772198][ T786] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1099.804484][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 1099.813253][ T786] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1099.820905][ T786] usb 1-1: can't read configurations, error -61 [ 1099.827738][ T786] usb usb1-port1: unable to enumerate USB device [ 1099.847459][ T5773] usb 3-1: usb_control_msg returned -32 [ 1099.853673][ T5773] usbtmc 3-1:16.0: can't read capabilities [ 1099.876244][ T5773] usb 3-1: USB disconnect, device number 116 [ 1100.461165][T18994] tipc: Enabled bearer , priority 0 [ 1100.470622][T18994] syzkaller0: entered promiscuous mode [ 1100.476551][T18994] syzkaller0: entered allmulticast mode [ 1100.519199][T18994] tipc: Resetting bearer [ 1100.528383][T18993] tipc: Resetting bearer [ 1100.557371][T18993] tipc: Disabling bearer [ 1100.568284][T18995] syzkaller0: entered promiscuous mode [ 1100.574129][T18995] syzkaller0: entered allmulticast mode [ 1101.072200][ T5773] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1101.094512][ T28] audit: type=1326 audit(1777254115.285:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19007 comm="syz.2.3904" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79f8b9cdd9 code=0x0 [ 1101.261467][T19014] netlink: 'syz.0.3906': attribute type 1 has an invalid length. [ 1101.292612][T19014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1101.305438][ T5773] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1101.323363][ T5773] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1101.340510][ T5773] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1101.359502][ T5773] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1101.370475][ T5773] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1101.386664][ T5773] usb 6-1: Product: syz [ 1101.391389][ T5773] usb 6-1: Manufacturer: syz [ 1101.399256][ T5773] usb 6-1: SerialNumber: syz [ 1101.415765][ T5773] usb 6-1: config 0 descriptor?? [ 1101.447345][ T5773] usb 6-1: selecting invalid altsetting 0 [ 1101.664117][ T5854] usb 6-1: USB disconnect, device number 72 [ 1102.585180][T19036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3913'. [ 1103.258090][T19056] syzkaller0: entered promiscuous mode [ 1103.264702][T19056] syzkaller0: entered allmulticast mode [ 1103.442776][T19061] binder: 19060:19061 ioctl c0306201 0 returned -14 [ 1103.549163][T19063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3924'. [ 1104.092427][T19087] netlink: 'syz.2.3931': attribute type 1 has an invalid length. [ 1104.200964][T19087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1104.879197][T19096] syzkaller0: entered promiscuous mode [ 1104.902318][T19096] syzkaller0: entered allmulticast mode [ 1104.912012][T19097] binder: 19094:19097 ioctl c0306201 0 returned -14 [ 1105.037811][T19103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3935'. [ 1105.915583][T19123] binder: 19122:19123 ioctl c0306201 0 returned -14 [ 1105.972217][ T786] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1106.172678][ T786] usb 4-1: Using ep0 maxpacket: 8 [ 1106.185523][ T786] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1106.195531][ T786] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1106.206232][ T786] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1106.217913][ T786] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1106.238340][ T786] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1106.272826][ T786] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1106.287787][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.442281][ T5835] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1106.667414][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 1106.680310][ T5835] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.735886][ T5835] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1106.769557][ T5835] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1106.789635][ T5835] usb 3-1: Product: syz [ 1106.835757][ T5835] usb 3-1: Manufacturer: syz [ 1106.859338][ T5835] hub 3-1:4.0: bad descriptor, ignoring hub [ 1106.887534][ T5835] hub: probe of 3-1:4.0 failed with error -5 [ 1106.908566][ T5835] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 1107.226511][ T786] usb 4-1: usb_control_msg returned -71 [ 1107.237541][ T786] usbtmc 4-1:16.0: can't read capabilities [ 1107.311048][ T786] usb 4-1: USB disconnect, device number 105 [ 1109.572220][ T786] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1109.759200][ T786] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1109.768419][ T786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.776642][ T786] usb 6-1: Product: syz [ 1109.780849][ T786] usb 6-1: Manufacturer: syz [ 1109.785629][ T786] usb 6-1: SerialNumber: syz [ 1109.793085][ T786] usb 6-1: config 0 descriptor?? [ 1109.943025][ T5773] usb 3-1: USB disconnect, device number 117 [ 1110.027707][ T786] usb 6-1: USB disconnect, device number 73 [ 1110.477557][T19184] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1111.850465][T19213] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3971'. [ 1112.470152][T19232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3979'. [ 1112.506355][T19228] tipc: Enabled bearer , priority 0 [ 1112.512478][T19235] binder: BINDER_SET_CONTEXT_MGR already set [ 1112.519275][T19235] binder: 19234:19235 ioctl 4018620d 2000000002c0 returned -16 [ 1112.577037][T19228] tipc: Resetting bearer [ 1112.587320][T19227] tipc: Disabling bearer [ 1113.024134][ T5854] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 1113.228912][ T5854] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 1113.240698][ T5854] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.256499][ T5854] usb 6-1: config 8 has no interface number 0 [ 1113.264083][ T5854] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1113.280184][ T5854] usb 6-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1113.299072][ T5854] usb 6-1: config 8 interface 177 has no altsetting 0 [ 1113.310383][ T5854] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1113.328484][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.340333][T19244] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1113.528034][ T28] audit: type=1326 audit(1777254127.715:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19256 comm="syz.2.3992" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79f8b9cdd9 code=0x0 [ 1114.722620][ T5835] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1114.960724][ T5835] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1114.984012][ T5835] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1114.997560][ T5835] usb 3-1: can't read configurations, error -71 [ 1115.812537][ T5854] usb 6-1: string descriptor 0 read error: -71 [ 1115.826282][ T5854] ir_toy 6-1:8.177: required endpoints not found [ 1115.837099][ T5854] usb 6-1: USB disconnect, device number 74 [ 1115.947375][ T28] audit: type=1326 audit(1777254130.115:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19295 comm="syz.5.4007" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f110879cdd9 code=0x0 [ 1116.153601][T19300] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1116.412619][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.419161][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.210048][T19321] binder: BINDER_SET_CONTEXT_MGR already set [ 1117.218761][T19321] binder: 19320:19321 ioctl 4018620d 2000000002c0 returned -16 [ 1117.554987][T19326] tipc: Enabled bearer , priority 0 [ 1117.577681][T19326] tipc: Resetting bearer [ 1117.589019][T19325] tipc: Disabling bearer [ 1117.912456][ T5152] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1118.109060][ T5152] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1118.120712][ T5152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.130576][ T5152] usb 6-1: Product: syz [ 1118.137163][ T5152] usb 6-1: Manufacturer: syz [ 1118.141834][ T5152] usb 6-1: SerialNumber: syz [ 1118.149455][ T5152] usb 6-1: config 0 descriptor?? [ 1118.237715][T19347] input: syz1 as /devices/virtual/input/input60 [ 1118.919609][T19366] binder: 19365:19366 ioctl c0306201 0 returned -14 [ 1118.987484][T19330] kvm: kvm [19329]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x1 [ 1119.655112][ T5152] usb 6-1: f81604_read: reg: 200f failed: -EPROTO [ 1119.670690][ T5152] usb 6-1: USB disconnect, device number 75 [ 1119.692673][ T5152] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 1119.731533][ T5433] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 1119.750731][ T5152] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 1120.968144][T19401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4041'. [ 1121.262405][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4042'. [ 1121.400755][T19411] binder: 19409:19411 ioctl c0306201 0 returned -14 [ 1121.961850][T19437] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4050'. [ 1122.336833][T19451] tipc: Enabled bearer , priority 0 [ 1122.349393][T19451] tipc: Resetting bearer [ 1122.357472][T19450] tipc: Disabling bearer [ 1122.553914][T19457] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4060'. [ 1122.567093][ T5835] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1122.778464][ T5835] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1122.788034][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.796169][ T5835] usb 3-1: Product: syz [ 1122.800491][ T5835] usb 3-1: Manufacturer: syz [ 1122.807015][ T5835] usb 3-1: SerialNumber: syz [ 1122.815757][ T5835] usb 3-1: config 0 descriptor?? [ 1122.922261][T11619] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1123.033797][ T5835] usb 3-1: USB disconnect, device number 120 [ 1123.102132][T11619] usb 1-1: Using ep0 maxpacket: 32 [ 1123.113164][T11619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.128595][T11619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.138739][T11619] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1123.150590][T11619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.160775][T11619] usb 1-1: config 0 descriptor?? [ 1123.587047][T11619] ft260 0003:0403:6030.001D: unknown main item tag 0x0 [ 1123.597406][T11619] ft260 0003:0403:6030.001D: unknown main item tag 0x0 [ 1123.802298][T11619] ft260 0003:0403:6030.001D: chip code: 0000 0000 [ 1123.996568][T11619] ft260 0003:0403:6030.001D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1124.068987][T19483] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4071'. [ 1124.202610][T11619] ft260 0003:0403:6030.001D: failed to retrieve status: -32, no wakeup [ 1124.214437][T11619] ft260 0003:0403:6030.001D: failed to retrieve status: -5 [ 1124.418229][T11619] ft260 0003:0403:6030.001D: failed to reset I2C controller: -71 [ 1124.459388][T11619] usb 1-1: USB disconnect, device number 80 [ 1126.024347][T19522] netlink: 'syz.0.4086': attribute type 1 has an invalid length. [ 1126.083085][T19522] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1126.100302][T19526] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4088'. [ 1126.282159][ T5152] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1126.472642][ T5152] usb 3-1: Using ep0 maxpacket: 32 [ 1126.486930][ T5152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.503023][ T5152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.529482][ T5152] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1126.550778][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.577345][ T5152] usb 3-1: config 0 descriptor?? [ 1127.037072][ T5152] ft260 0003:0403:6030.001E: unknown main item tag 0x0 [ 1127.051717][ T5152] ft260 0003:0403:6030.001E: unknown main item tag 0x0 [ 1127.226747][ T5152] ft260 0003:0403:6030.001E: chip code: 0000 0000 [ 1127.375080][T19555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4098'. [ 1127.446631][ T5152] ft260 0003:0403:6030.001E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1127.661587][ T5152] ft260 0003:0403:6030.001E: failed to retrieve status: -32, no wakeup [ 1127.666213][T19560] tipc: Enabling of bearer rejected, failed to enable media [ 1127.682648][ T5152] ft260 0003:0403:6030.001E: failed to retrieve status: -5 [ 1127.887720][ T5152] ft260 0003:0403:6030.001E: failed to reset I2C controller: -71 [ 1127.923923][ T5152] usb 3-1: USB disconnect, device number 121 [ 1128.724882][T19594] binder: BINDER_SET_CONTEXT_MGR already set [ 1128.738961][T19594] binder: 19591:19594 ioctl 4018620d 2000000002c0 returned -16 [ 1128.873033][T19588] syzkaller0: entered promiscuous mode [ 1128.888583][T19588] syzkaller0: entered allmulticast mode [ 1129.712892][T19603] fuse: Unknown parameter 'user_i00000000000000000000' [ 1132.885131][T19610] tipc: Enabling of bearer rejected, failed to enable media [ 1133.277680][ T5773] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1133.462199][ T5773] usb 6-1: Using ep0 maxpacket: 32 [ 1133.470725][ T5773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.484607][ T5773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.495919][ T5773] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1133.506298][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.518917][ T5773] usb 6-1: config 0 descriptor?? [ 1133.943349][ T5773] ft260 0003:0403:6030.001F: unknown main item tag 0x0 [ 1133.963327][ T5773] ft260 0003:0403:6030.001F: unknown main item tag 0x0 [ 1134.101479][T19638] kvm: pic: non byte write [ 1134.133537][ T5773] ft260 0003:0403:6030.001F: chip code: 0000 0000 [ 1134.346093][ T5773] ft260 0003:0403:6030.001F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 1134.561738][ T5773] ft260 0003:0403:6030.001F: failed to retrieve status: -32, no wakeup [ 1134.571245][ T5773] ft260 0003:0403:6030.001F: failed to retrieve status: -5 [ 1134.772639][ T5773] ft260 0003:0403:6030.001F: failed to reset I2C controller: -71 [ 1134.811818][ T5773] usb 6-1: USB disconnect, device number 76 [ 1135.309294][T19659] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1135.319388][T19659] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1135.880375][T19671] input: syz0 as /devices/virtual/input/input61 [ 1136.281470][T19683] tipc: Enabling of bearer rejected, failed to enable media [ 1136.328828][T19687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4135'. [ 1136.941793][ T5773] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1137.167293][ T5773] usb 3-1: Using ep0 maxpacket: 32 [ 1137.175469][ T5773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.192086][ T5773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.214008][ T5773] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1137.229809][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.259673][ T5773] usb 3-1: config 0 descriptor?? [ 1137.744938][ T5773] ft260 0003:0403:6030.0020: unknown main item tag 0x0 [ 1137.810366][ T5773] ft260 0003:0403:6030.0020: unknown main item tag 0x0 [ 1137.945451][ T5773] ft260 0003:0403:6030.0020: chip code: 0000 0000 [ 1138.149577][ T5773] ft260 0003:0403:6030.0020: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1138.344109][ T5773] ft260 0003:0403:6030.0020: failed to retrieve status: -32, no wakeup [ 1138.366425][ T5773] ft260 0003:0403:6030.0020: failed to retrieve status: -5 [ 1138.571785][ T5773] ft260 0003:0403:6030.0020: failed to reset I2C controller: -71 [ 1138.624437][ T5773] usb 3-1: USB disconnect, device number 122 [ 1139.409310][T19743] tipc: Enabling of bearer rejected, failed to enable media [ 1140.442172][ T5835] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1140.650973][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 1140.675277][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.692358][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.711300][ T5835] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1140.721304][T19774] tipc: Enabling of bearer rejected, failed to enable media [ 1140.731446][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.752642][ T5835] usb 3-1: config 0 descriptor?? [ 1140.821363][T14500] tipc: Subscription rejected, illegal request [ 1141.189976][ T5835] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 1141.202714][ T5835] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 1141.325172][T19798] netlink: 'syz.3.4174': attribute type 1 has an invalid length. [ 1141.366736][T19798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1141.378774][ T5835] ft260 0003:0403:6030.0021: chip code: 0000 0000 [ 1141.586927][ T5835] ft260 0003:0403:6030.0021: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1141.649871][T19808] tipc: Enabling of bearer rejected, failed to enable media [ 1141.787852][ T5835] ft260 0003:0403:6030.0021: failed to retrieve status: -32, no wakeup [ 1141.818387][ T5835] ft260 0003:0403:6030.0021: failed to retrieve status: -5 [ 1142.020637][ T5835] ft260 0003:0403:6030.0021: failed to reset I2C controller: -71 [ 1142.077933][ T5835] usb 3-1: USB disconnect, device number 123 [ 1142.708977][T19843] fuse: Unknown parameter 'user_i00000000000000000000' [ 1142.713528][T19842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4191'. [ 1142.949855][T19848] kvm: pic: non byte write [ 1143.292492][T19859] binder: 19854:19859 unknown command 1074553619 [ 1143.300278][T19859] binder: 19854:19859 ioctl c0306201 200000000040 returned -22 [ 1143.310470][T19859] binder: 19854:19859 unknown command 1074553620 [ 1143.318606][T19859] binder: 19854:19859 ioctl c0306201 200000000640 returned -22 [ 1143.330946][T19861] binder: 19860:19861 ioctl 4018620d 0 returned -22 [ 1143.520589][T19868] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4199'. [ 1144.339066][T19878] fuse: Unknown parameter 'user_i00000000000000000000' [ 1144.642590][T19886] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1145.038459][T19896] binder: 19895:19896 ioctl 4018620d 0 returned -22 [ 1145.632607][T19908] fuse: Unknown parameter 'user_i00000000000000000000' [ 1146.140666][T19920] netdevsim netdevsim0: Direct firmware load for ýÿÿÿ failed with error -2 [ 1146.157069][T19920] netdevsim netdevsim0: Falling back to sysfs fallback for: ýÿÿÿ [ 1146.260322][T19923] syzkaller0: entered promiscuous mode [ 1146.266185][T19923] syzkaller0: entered allmulticast mode [ 1146.499141][ T786] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1146.670169][ T786] usb 4-1: device descriptor read/64, error -71 [ 1146.942232][ T786] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1147.105969][ T786] usb 4-1: device descriptor read/64, error -71 [ 1147.242629][ T786] usb usb4-port1: attempt power cycle [ 1147.684924][ T786] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1147.737705][ T786] usb 4-1: device descriptor read/8, error -71 [ 1148.024319][ T786] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1148.087446][ T786] usb 4-1: device descriptor read/8, error -71 [ 1148.218396][ T786] usb usb4-port1: unable to enumerate USB device [ 1149.358786][T19933] binder: 19932:19933 ioctl 4018620d 0 returned -22 [ 1151.032436][T11619] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1151.192177][T11619] usb 6-1: device descriptor read/64, error -71 [ 1151.482135][T11619] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1151.628660][T19965] binder: 19964:19965 ioctl c0306201 0 returned -14 [ 1151.662337][T11619] usb 6-1: device descriptor read/64, error -71 [ 1151.714875][T19968] fuse: Unknown parameter 'user_i00000000000000000000' [ 1151.782508][T11619] usb usb6-port1: attempt power cycle [ 1152.214587][T11619] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1152.263039][T11619] usb 6-1: device descriptor read/8, error -71 [ 1152.353053][T19980] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1152.552280][T11619] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1152.585534][T11619] usb 6-1: device descriptor read/8, error -71 [ 1152.724451][T11619] usb usb6-port1: unable to enumerate USB device [ 1153.417447][T19994] fuse: Unknown parameter 'user_i00000000000000000000' [ 1154.712291][T11619] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1154.721077][T20014] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1154.864903][T11619] usb 1-1: device descriptor read/64, error -71 [ 1155.132358][T11619] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1155.302256][T11619] usb 1-1: device descriptor read/64, error -71 [ 1155.425251][T11619] usb usb1-port1: attempt power cycle [ 1155.538822][T20021] syzkaller0: entered promiscuous mode [ 1155.544502][T20021] syzkaller0: entered allmulticast mode [ 1155.636296][ T786] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1155.792332][ T786] usb 6-1: device descriptor read/64, error -71 [ 1155.842147][T11619] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1155.877981][T11619] usb 1-1: device descriptor read/8, error -71 [ 1155.969244][T20027] netlink: 'syz.3.4260': attribute type 72 has an invalid length. [ 1155.977587][T20027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4260'. [ 1156.062317][ T786] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1156.152189][T11619] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1156.182913][T11619] usb 1-1: device descriptor read/8, error -71 [ 1156.222853][ T786] usb 6-1: device descriptor read/64, error -71 [ 1156.307311][T11619] usb usb1-port1: unable to enumerate USB device [ 1156.342339][ T786] usb usb6-port1: attempt power cycle [ 1156.762235][ T786] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1156.793488][ T786] usb 6-1: device descriptor read/8, error -71 [ 1156.996509][T20038] netlink: 'syz.3.4264': attribute type 1 has an invalid length. [ 1157.026913][T20038] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1157.082147][ T786] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1157.118192][ T786] usb 6-1: device descriptor read/8, error -71 [ 1157.242457][ T786] usb usb6-port1: unable to enumerate USB device [ 1157.312194][T20042] binder: 20041:20042 ioctl c0306201 0 returned -14 [ 1157.498215][T20046] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1158.370449][T20051] netlink: 'syz.0.4269': attribute type 72 has an invalid length. [ 1158.381015][T20051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4269'. [ 1158.973766][T10746] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1158.988985][T10746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1159.005570][T10746] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1159.033796][T10746] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1159.053111][T10746] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1159.060730][T10746] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1159.378629][T20066] netlink: 'syz.3.4273': attribute type 1 has an invalid length. [ 1159.430121][T20066] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1159.543895][T20059] chnl_net:caif_netlink_parms(): no params data found [ 1159.902837][T20059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.911607][T20059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.919086][T20059] bridge_slave_0: entered allmulticast mode [ 1159.934763][T20059] bridge_slave_0: entered promiscuous mode [ 1159.947281][T20059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.957733][T20059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.967713][T20059] bridge_slave_1: entered allmulticast mode [ 1159.979116][T20059] bridge_slave_1: entered promiscuous mode [ 1160.022485][ T786] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1160.059459][T20059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.080110][T20059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.175479][T20059] team0: Port device team_slave_0 added [ 1160.192499][ T786] usb 6-1: device descriptor read/64, error -71 [ 1160.195149][T20059] team0: Port device team_slave_1 added [ 1160.255736][T20059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.262866][T20059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.290207][T20059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.304011][T20059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.310994][T20059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.338501][T20059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.385686][T20059] hsr_slave_0: entered promiscuous mode [ 1160.392645][T20059] hsr_slave_1: entered promiscuous mode [ 1160.399574][T20059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1160.407636][T20059] Cannot create hsr debugfs directory [ 1160.492365][ T5773] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1160.522280][ T786] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1160.689594][T20059] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1160.696565][ T786] usb 6-1: device descriptor read/64, error -71 [ 1160.697269][ T5773] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1160.715244][ T5773] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1160.716496][T20059] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1160.730050][ T5773] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1160.742615][ T5773] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1160.746360][T20059] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1160.760775][ T5773] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1160.778122][ T5773] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1160.794107][T20059] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1160.807100][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1160.819757][ T5773] usb 1-1: Product: syz [ 1160.832842][ T786] usb usb6-port1: attempt power cycle [ 1160.834627][ T5773] usb 1-1: Manufacturer: syz [ 1160.859828][ T5773] cdc_wdm 1-1:1.0: skipping garbage [ 1160.866265][ T5773] cdc_wdm 1-1:1.0: skipping garbage [ 1160.881857][ T5773] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1160.889020][ T5773] cdc_wdm 1-1:1.0: Unknown control protocol [ 1160.928946][T20059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1160.961460][T20059] 8021q: adding VLAN 0 to HW filter on device team0 [ 1160.988071][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.995265][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.027636][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.035020][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.090594][T20059] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1161.102323][T20059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1161.124608][T10746] Bluetooth: hci4: command tx timeout [ 1161.242891][ T786] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1161.293903][ T786] usb 6-1: device descriptor read/8, error -71 [ 1161.391095][T20092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4278'. [ 1161.428117][T20059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1161.612586][ T786] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1161.653728][ T786] usb 6-1: device descriptor read/8, error -71 [ 1161.794259][ T786] usb usb6-port1: unable to enumerate USB device [ 1161.802863][T20059] veth0_vlan: entered promiscuous mode [ 1161.820295][T20059] veth1_vlan: entered promiscuous mode [ 1162.278047][T20059] veth0_macvtap: entered promiscuous mode [ 1162.291314][T20059] veth1_macvtap: entered promiscuous mode [ 1162.320505][T20059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1162.331775][T20059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.347266][T20059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1162.357997][T20059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.377401][T20059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1162.388126][T20059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.405098][T20059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1162.437715][T20059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1162.454684][T20059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.467164][T20059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1162.479304][T20059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.490144][T20059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1162.501424][T20059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.513243][T20059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1162.541103][T20059] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.555493][T20059] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.566864][T20059] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.578221][T20059] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.752904][T14500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.770843][T14500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.870196][T14500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.890866][T14500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.897562][T20106] netlink: 'syz.3.4280': attribute type 21 has an invalid length. [ 1162.913146][T20108] fuse: Unknown parameter 'user_i00000000000000000000' [ 1163.214273][T10746] Bluetooth: hci4: command tx timeout [ 1163.221971][ T786] usb 1-1: USB disconnect, device number 85 [ 1163.347751][T20119] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1163.740701][T20126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4286'. [ 1163.966270][T20128] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 1163.975385][T20128] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1163.984340][T20128] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1164.392500][ T8] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1164.563259][ T8] usb 1-1: device descriptor read/64, error -71 [ 1164.842395][ T8] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1164.892315][ T786] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1165.002233][ T8] usb 1-1: device descriptor read/64, error -71 [ 1165.084889][ T786] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1165.093859][ T786] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1165.104354][ T786] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1165.113616][ T786] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1165.123095][ T8] usb usb1-port1: attempt power cycle [ 1165.124894][ T786] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1165.144718][ T786] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1165.156804][ T786] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1165.165805][ T786] usb 6-1: Product: syz [ 1165.170131][ T786] usb 6-1: Manufacturer: syz [ 1165.185427][ T786] cdc_wdm 6-1:1.0: skipping garbage [ 1165.191298][ T786] cdc_wdm 6-1:1.0: skipping garbage [ 1165.198465][ T786] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1165.204589][ T786] cdc_wdm 6-1:1.0: Unknown control protocol [ 1165.282324][T10746] Bluetooth: hci4: command tx timeout [ 1165.552207][ T8] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1165.583218][ T8] usb 1-1: device descriptor read/8, error -71 [ 1165.873807][ T8] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1165.916408][ T8] usb 1-1: device descriptor read/8, error -71 [ 1165.988293][T20157] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1166.042456][ T8] usb usb1-port1: unable to enumerate USB device [ 1166.506050][T20159] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 1166.514877][T20159] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1166.523411][T20159] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1167.362632][T10746] Bluetooth: hci4: command tx timeout [ 1167.618835][ T5835] usb 6-1: USB disconnect, device number 89 [ 1167.807256][T20185] syzkaller0: entered promiscuous mode [ 1167.813038][T20185] syzkaller0: entered allmulticast mode [ 1167.892460][T11621] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1167.978610][T20188] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1168.087850][T11621] usb 4-1: Using ep0 maxpacket: 32 [ 1168.096458][T11621] usb 4-1: config 0 has no interfaces? [ 1168.104068][T11621] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1168.117563][T11621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.131603][T11621] usb 4-1: config 0 descriptor?? [ 1168.374168][ T8] usb 4-1: USB disconnect, device number 110 [ 1168.424443][T11621] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1168.582189][ T5152] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1168.592286][T11621] usb 7-1: device descriptor read/64, error -71 [ 1168.820232][ T5152] usb 1-1: Using ep0 maxpacket: 8 [ 1168.832174][ T5152] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1168.840440][ T5152] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.851590][ T5152] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1168.867049][ T5152] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1168.876822][T11621] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1168.886765][ T5152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.907917][ T5152] usbtmc 1-1:16.0: bulk endpoints not found [ 1169.042339][T11621] usb 7-1: device descriptor read/64, error -71 [ 1169.055603][T20203] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 1169.064355][T20203] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1169.073199][T20203] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1169.090855][ T5854] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1169.172476][T11621] usb usb7-port1: attempt power cycle [ 1169.300319][ T5854] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1169.310152][ T5854] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1169.320812][ T5854] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1169.331244][ T5854] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1169.342911][ T5854] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1169.356728][ T5854] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1169.366785][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1169.375314][ T5854] usb 6-1: Product: syz [ 1169.379638][ T5854] usb 6-1: Manufacturer: syz [ 1169.391485][ T5854] cdc_wdm 6-1:1.0: skipping garbage [ 1169.397256][ T5854] cdc_wdm 6-1:1.0: skipping garbage [ 1169.404278][ T5854] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1169.410770][ T5854] cdc_wdm 6-1:1.0: Unknown control protocol [ 1169.592169][T11621] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1169.644734][T11621] usb 7-1: device descriptor read/8, error -71 [ 1169.912174][T11621] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1169.950418][T11621] usb 7-1: device descriptor read/8, error -71 [ 1170.082346][T11621] usb usb7-port1: unable to enumerate USB device [ 1171.331174][ T5854] usb 1-1: USB disconnect, device number 90 [ 1171.817920][T11621] usb 6-1: USB disconnect, device number 90 [ 1172.142223][ T5152] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1172.329200][T20255] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 1172.338043][T20255] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1172.346587][T20255] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1172.693117][ T35] tipc: Subscription rejected, illegal request [ 1172.716520][ T5152] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1172.728693][ T5152] usb 1-1: no configurations [ 1172.742095][ T5152] usb 1-1: can't read configurations, error -22 [ 1173.382385][T11621] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1173.450781][T20278] syzkaller0: entered promiscuous mode [ 1173.461961][T20278] syzkaller0: entered allmulticast mode [ 1173.477088][T20274] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4344'. [ 1173.614255][T11621] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1173.632265][T11621] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1173.662164][T11621] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1173.722135][T11621] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1173.742146][T11621] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1173.793350][T11621] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1173.812229][T11621] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1173.830688][T11621] usb 4-1: Product: syz [ 1173.840831][T11621] usb 4-1: Manufacturer: syz [ 1173.948457][T11621] cdc_wdm 4-1:1.0: skipping garbage [ 1173.957558][T11621] cdc_wdm 4-1:1.0: skipping garbage [ 1173.984692][T11621] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1174.012265][T11621] cdc_wdm 4-1:1.0: Unknown control protocol [ 1174.516582][T11621] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1174.765565][ T11] tipc: Subscription rejected, illegal request [ 1174.854785][T11621] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1174.868251][T11621] usb 1-1: no configurations [ 1174.892272][T11621] usb 1-1: can't read configurations, error -22 [ 1175.973969][T20328] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 1176.012490][T20328] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1176.031607][T20328] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1176.094217][ T5835] usb 4-1: USB disconnect, device number 111 [ 1176.812154][ T5835] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1177.002210][ T5835] usb 6-1: Using ep0 maxpacket: 8 [ 1177.019643][ T5835] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1177.038410][ T5835] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.083132][ T5835] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1177.112070][ T5835] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1177.121947][ T5835] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1177.148951][ T5835] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1177.166093][T20355] fuse: Unknown parameter 'user_i00000000000000000000' [ 1177.175336][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.208206][ T5835] usbtmc 6-1:16.0: bulk endpoints not found [ 1177.660755][T20368] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 1177.670865][T20368] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1177.680797][T20368] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1177.722269][T11621] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1177.846438][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.864945][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.917538][T11621] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1177.945956][T11621] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1177.957501][T11621] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1177.966907][T11621] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1177.978305][T11621] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1177.999574][T11621] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1178.009401][T11621] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1178.018010][T11621] usb 1-1: Product: syz [ 1178.023727][T11621] usb 1-1: Manufacturer: syz [ 1178.032190][T11621] cdc_wdm 1-1:1.0: skipping garbage [ 1178.042170][T11621] cdc_wdm 1-1:1.0: skipping garbage [ 1178.049441][T11621] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1178.055838][T11621] cdc_wdm 1-1:1.0: Unknown control protocol [ 1178.582369][ T5773] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1178.812402][ T5773] usb 4-1: Using ep0 maxpacket: 32 [ 1178.873476][ T5773] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1178.889591][ T5773] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1178.919548][ T5773] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1178.932527][ T5773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1178.942753][ T5773] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1178.953213][ T5773] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1178.968022][ T5773] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1178.978739][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.992329][ T5773] usb 4-1: config 0 descriptor?? [ 1179.267950][ T5773] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 112 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1179.293404][ T5773] usb 4-1: USB disconnect, device number 112 [ 1179.322649][ T5773] usblp1: removed [ 1179.357342][T20386] fuse: Unknown parameter 'user_i00000000000000000000' [ 1179.521754][T11621] usb 6-1: USB disconnect, device number 91 [ 1179.902481][ T5773] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1180.172220][ T5773] usb 4-1: Using ep0 maxpacket: 32 [ 1180.190063][ T5773] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1180.200480][ T5773] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1180.210336][ T5773] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1180.222604][ T5773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1180.233244][ T5773] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1180.244129][ T5773] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1180.312552][T20404] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 1180.329664][ T5773] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1180.332359][T20404] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1180.349926][T20404] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1180.362050][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.401974][ T5773] usb 4-1: config 0 descriptor?? [ 1180.409369][ T5835] usb 1-1: USB disconnect, device number 95 [ 1180.544505][T20406] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1180.684347][T20408] fuse: Unknown parameter 'user_i00000000000000000000' [ 1180.784361][ T5773] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 113 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1181.100066][T20417] syzkaller0: entered promiscuous mode [ 1181.108297][T20417] syzkaller0: entered allmulticast mode [ 1181.175521][T11621] usb 4-1: USB disconnect, device number 113 [ 1181.242537][ T5835] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1181.386989][T20377] usblp0: removed [ 1181.452253][ T5835] usb 1-1: Using ep0 maxpacket: 8 [ 1181.458972][ T5835] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1181.470547][ T5835] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.481459][ T5835] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1181.491455][ T5835] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1181.509848][ T5835] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1181.531809][ T5835] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1181.541437][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.571224][ T5835] usbtmc 1-1:16.0: bulk endpoints not found [ 1181.702239][ T5773] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1181.898431][T20430] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1181.915030][ T5773] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1181.924800][ T5773] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1181.935619][ T5773] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1181.945004][ T5773] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1181.956423][ T5773] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1181.970166][ T5773] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1181.979754][ T5773] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1181.988306][ T5773] usb 6-1: Product: syz [ 1181.994855][ T5773] usb 6-1: Manufacturer: syz [ 1182.006672][ T5773] cdc_wdm 6-1:1.0: skipping garbage [ 1182.011955][ T5773] cdc_wdm 6-1:1.0: skipping garbage [ 1182.018854][ T5773] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1182.024848][ T5773] cdc_wdm 6-1:1.0: Unknown control protocol [ 1182.488361][T20445] fuse: Unknown parameter 'user_i00000000000000000000' [ 1183.130806][T20456] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 1183.146389][T20456] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1183.159088][T20456] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1183.960509][ T5835] usb 1-1: USB disconnect, device number 96 [ 1184.432435][T11621] usb 6-1: USB disconnect, device number 92 [ 1184.704969][T20477] fuse: Unknown parameter 'user_i00000000000000000000' [ 1185.030857][T20484] syzkaller0: entered promiscuous mode [ 1185.046817][T10746] Bluetooth: hci3: command 0x0406 tx timeout [ 1185.059300][T20484] syzkaller0: entered allmulticast mode [ 1185.502104][ T5835] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1185.695312][T20504] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4424'. [ 1185.704743][ T5835] usb 6-1: Using ep0 maxpacket: 8 [ 1185.723126][ T5835] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1185.733409][ T5835] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.743863][ T5835] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1185.757551][ T5835] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1185.768207][ T5835] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1185.783850][ T5835] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1185.795769][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.809513][ T5835] usbtmc 6-1:16.0: bulk endpoints not found [ 1186.751322][T20530] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1187.186559][T20542] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 1187.195337][T20542] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1187.219778][T20542] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1188.052209][T20559] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4441'. [ 1188.231189][T11621] usb 6-1: USB disconnect, device number 93 [ 1188.571618][T20576] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1188.826530][T20580] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 1188.842534][T20580] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1188.851201][T20580] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1189.596611][T20597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4455'. [ 1189.664389][ T5835] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1189.772870][T20601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1189.780572][T20601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1189.790790][T20601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1189.799576][T20601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.872490][ T5835] usb 1-1: Using ep0 maxpacket: 8 [ 1189.885924][ T5835] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1189.895049][ T5835] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1189.906272][ T5835] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1189.917528][ T5835] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1189.929225][ T5835] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1189.942802][ T5835] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1189.953143][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.966781][ T5835] usbtmc 1-1:16.0: bulk endpoints not found [ 1190.323197][T20614] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1190.486925][T20618] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 1190.496436][T20618] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1190.508729][T20618] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1190.931296][T20621] syzkaller0: entered promiscuous mode [ 1190.937675][T20621] syzkaller0: entered allmulticast mode [ 1191.540177][T20640] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1192.333863][T20649] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 1192.348614][T20649] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1192.359799][T20649] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1192.426040][ T5835] usb 1-1: USB disconnect, device number 97 [ 1194.149804][T20692] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1194.356864][T20696] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 1194.365457][T20696] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1194.374099][T20696] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1194.746128][T20703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4491'. [ 1195.270500][T20715] syz_tun: entered allmulticast mode [ 1195.278236][T20715] lo: entered allmulticast mode [ 1195.306791][T20714] syz_tun: left allmulticast mode [ 1195.443994][ T5773] IPVS: starting estimator thread 0... [ 1195.532275][T20723] IPVS: using max 21 ests per chain, 50400 per kthread [ 1195.649061][T20727] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 1195.658045][T20727] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1195.666485][T20727] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1196.030480][T20734] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1196.056463][T20733] syzkaller1: entered promiscuous mode [ 1196.141005][T20733] syzkaller1: entered allmulticast mode [ 1197.290807][T20771] binder: 20766:20771 ioctl c0306201 0 returned -14 [ 1198.012260][T20782] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1198.233689][T20789] syz_tun: entered allmulticast mode [ 1198.241075][T20789] lo: entered allmulticast mode [ 1198.248711][T20788] syz_tun: left allmulticast mode [ 1198.441334][T20795] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4520'. [ 1198.682893][T20802] fuse: Unknown parameter 'user_i00000000000000000000' [ 1199.097504][T20815] binder: 20812:20815 ioctl c0306201 0 returned -14 [ 1200.284477][T20838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4537'. [ 1201.858313][T20862] binder: 20859:20862 ioctl c0306201 0 returned -14 [ 1202.237801][T20864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4543'. [ 1202.596196][T20867] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4544'. [ 1202.840238][T20871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4546'. [ 1203.502554][T20889] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4550'. [ 1204.840949][T20915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4558'. [ 1204.924676][T20918] syz_tun: entered allmulticast mode [ 1204.933894][T20917] syz_tun: left allmulticast mode [ 1205.630544][T20934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4566'. [ 1205.701361][T20938] binder: BINDER_SET_CONTEXT_MGR already set [ 1205.708463][T20938] binder: 20937:20938 ioctl 4018620d 2000000002c0 returned -16 [ 1205.824202][T20941] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4567'. [ 1207.021054][T20956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4571'. [ 1207.375363][T20959] syz_tun: entered allmulticast mode [ 1207.414556][T20959] lo: entered allmulticast mode [ 1207.428875][T20958] syz_tun: left allmulticast mode [ 1207.640972][T20970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4577'. [ 1207.755179][T20974] fuse: Unknown parameter 'user_i00000000000000000000' [ 1207.957049][T20980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4581'. [ 1208.133492][ T5854] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1208.251593][ T28] audit: type=1326 audit(1777254222.435:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20981 comm="syz.5.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110879cdd9 code=0x7fc00000 [ 1208.279400][ T28] audit: type=1326 audit(1777254222.445:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20981 comm="syz.5.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f110879cdd9 code=0x7fc00000 [ 1208.301888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1208.342106][ T5854] usb 1-1: Using ep0 maxpacket: 32 [ 1208.358006][ T5854] usb 1-1: config 0 has no interfaces? [ 1208.365123][ T5854] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1208.378917][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.391450][ T5854] usb 1-1: config 0 descriptor?? [ 1208.665563][ T8] usb 1-1: USB disconnect, device number 98 [ 1208.745360][T20987] syz_tun: entered allmulticast mode [ 1208.758650][T20986] syz_tun: left allmulticast mode [ 1209.164009][T20997] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4589'. [ 1209.351262][T21002] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1209.611265][T21008] syz_tun: entered allmulticast mode [ 1209.620679][T21007] syz_tun: left allmulticast mode [ 1209.693200][ T786] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1209.705339][T21010] loop2: detected capacity change from 0 to 7 [ 1209.716011][T21010] Dev loop2: unable to read RDB block 7 [ 1209.721904][T21010] loop2: AHDI p1 p2 p3 [ 1209.726683][T21010] loop2: partition table partially beyond EOD, truncated [ 1209.735409][T21010] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1209.742900][T21010] loop2: p3 start 335544320 is beyond EOD, truncated [ 1209.882727][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 1209.923743][ T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.942461][ T786] usb 4-1: config 0 has no interfaces? [ 1209.948132][ T786] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1209.958956][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.971290][ T786] usb 4-1: config 0 descriptor?? [ 1210.308766][T21004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.336739][T21004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.386809][T21024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4601'. [ 1210.572455][ T5854] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1210.670736][T21028] syz_tun: entered allmulticast mode [ 1210.685133][T21027] syz_tun: left allmulticast mode [ 1210.773047][ T5854] usb 7-1: Using ep0 maxpacket: 32 [ 1210.780934][ T5854] usb 7-1: config 0 has no interfaces? [ 1210.796294][ T5854] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1210.808686][ T5854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.820271][ T5854] usb 7-1: config 0 descriptor?? [ 1210.955794][T21037] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1211.043103][ T5854] usb 7-1: USB disconnect, device number 6 [ 1212.028857][T21050] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1212.817705][T21061] tipc: Enabled bearer , priority 0 [ 1212.832523][T21061] syzkaller0: entered promiscuous mode [ 1212.842265][T21061] syzkaller0: entered allmulticast mode [ 1212.846696][T21064] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4616'. [ 1212.859756][T21064] netlink: get zone limit has 8 unknown bytes [ 1212.873448][T21061] tipc: Resetting bearer [ 1212.894039][T21059] tipc: Resetting bearer [ 1212.959776][T21059] tipc: Disabling bearer [ 1212.980757][T11621] usb 4-1: USB disconnect, device number 114 [ 1213.038426][T21067] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1213.093032][ T5835] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1213.120626][T21071] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1213.227205][T21076] fuse: Unknown parameter 'user_i00000000000000000000' [ 1213.294972][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 1213.301923][ T5835] usb 1-1: config 0 has no interfaces? [ 1213.308102][ T5835] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1213.324579][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.335532][ T5835] usb 1-1: config 0 descriptor?? [ 1213.552414][ T5835] usb 1-1: USB disconnect, device number 99 [ 1213.886422][T21092] loop2: detected capacity change from 0 to 7 [ 1213.896217][ T5785] Dev loop2: unable to read RDB block 7 [ 1213.901956][ T5785] loop2: unable to read partition table [ 1213.908234][ T5785] loop2: partition table beyond EOD, truncated [ 1213.928650][T21092] Dev loop2: unable to read RDB block 7 [ 1213.936637][T21092] loop2: unable to read partition table [ 1213.945677][T21092] loop2: partition table beyond EOD, truncated [ 1213.955483][T21092] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1214.174824][T21097] fuse: Unknown parameter 'user_i00000000000000000000' [ 1214.353165][ T28] audit: type=1326 audit(1777254228.545:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21107 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708779cdd9 code=0x7ffc0000 [ 1214.379044][ T28] audit: type=1326 audit(1777254228.545:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21107 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708779cdd9 code=0x7ffc0000 [ 1214.423572][ T28] audit: type=1326 audit(1777254228.545:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21107 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708779cdd9 code=0x7ffc0000 [ 1214.482308][ T8] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1214.532403][ T28] audit: type=1326 audit(1777254228.545:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21107 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708779cdd9 code=0x7ffc0000 [ 1214.554787][ C1] vkms_vblank_simulate: vblank timer overrun [ 1214.604167][ T28] audit: type=1326 audit(1777254228.545:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21107 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f708775d60e code=0x7ffc0000 [ 1214.702155][ T28] audit: type=1326 audit(1777254228.545:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21107 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f708775d60e code=0x7ffc0000 [ 1214.749095][ T28] audit: type=1326 audit(1777254228.545:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21107 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708779cdd9 code=0x7ffc0000 [ 1214.771798][ C1] vkms_vblank_simulate: vblank timer overrun [ 1214.772109][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 1214.797735][ T28] audit: type=1326 audit(1777254228.545:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21107 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708779cdd9 code=0x7ffc0000 [ 1214.820248][ C1] vkms_vblank_simulate: vblank timer overrun [ 1214.847454][ T28] audit: type=1326 audit(1777254228.545:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21107 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708779cdd9 code=0x7ffc0000 [ 1214.870233][ C1] vkms_vblank_simulate: vblank timer overrun [ 1214.879371][ T8] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1214.890129][ T28] audit: type=1326 audit(1777254228.545:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21107 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708779cdd9 code=0x7ffc0000 [ 1214.890744][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1214.992071][ T8] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1215.084685][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.164883][ T8] usb 7-1: config 0 descriptor?? [ 1215.170818][T21120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4640'. [ 1215.639686][ T8] usbhid 7-1:0.0: can't add hid device: -71 [ 1215.656043][ T8] usbhid: probe of 7-1:0.0 failed with error -71 [ 1215.772408][ T8] usb 7-1: USB disconnect, device number 7 [ 1215.994939][T21130] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1216.105592][T21132] syz_tun: entered allmulticast mode [ 1216.114589][T21131] syz_tun: left allmulticast mode [ 1216.183805][T21134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4644'. [ 1216.262486][ T8] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1216.337003][T11621] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1216.350283][T11621] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1216.465878][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 1216.487398][ T8] usb 7-1: config 0 has no interfaces? [ 1216.502407][ T8] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1216.521817][T21141] fido_id[21141]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1216.544229][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.569387][ T8] usb 7-1: config 0 descriptor?? [ 1216.669130][T21143] syzkaller0: entered promiscuous mode [ 1216.677584][T21143] syzkaller0: entered allmulticast mode [ 1216.818457][ T5835] usb 7-1: USB disconnect, device number 8 [ 1220.811324][T21148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4650'. [ 1220.822403][T21156] syz_tun: entered allmulticast mode [ 1220.828017][T21156] syz_tun: left allmulticast mode [ 1220.859258][T21163] tipc: Enabling of bearer rejected, failed to enable media [ 1220.913432][T21164] syzkaller0: entered promiscuous mode [ 1220.939052][T21164] syzkaller0: entered allmulticast mode [ 1221.322514][ T8] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1221.543219][ T8] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1221.558647][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.567505][ T8] usb 6-1: Product: syz [ 1221.571850][ T8] usb 6-1: Manufacturer: syz [ 1221.577316][ T8] usb 6-1: SerialNumber: syz [ 1221.588310][ T8] usb 6-1: config 0 descriptor?? [ 1221.603808][ T8] hub 6-1:0.0: bad descriptor, ignoring hub [ 1221.610003][ T8] hub: probe of 6-1:0.0 failed with error -5 [ 1221.622306][ T5835] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1221.644235][T21198] syzkaller0: entered promiscuous mode [ 1221.649867][T21198] syzkaller0: entered allmulticast mode [ 1221.830932][ T8] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1221.844578][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 1221.852934][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1221.876479][ T8] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1221.885308][ T8] usb 6-1: media controller created [ 1221.886748][ T5835] usb 1-1: config 0 has no interfaces? [ 1221.898982][ T5835] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1221.917721][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1221.925295][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.942937][ T5835] usb 1-1: config 0 descriptor?? [ 1222.041877][ T8] DVB: Unable to find symbol dib7000p_attach() [ 1222.053379][ T8] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1222.057601][T21182] dib0700: tx buffer length is larger than 4. Not supported. [ 1222.165155][ T8] rc_core: IR keymap rc-dib0700-rc5 not found [ 1222.172806][ T8] Registered IR keymap rc-empty [ 1222.177993][ T8] dvb-usb: could not initialize remote control. [ 1222.184914][ T8] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1222.223579][ T8] usb 6-1: USB disconnect, device number 94 [ 1222.261510][ T5854] usb 1-1: USB disconnect, device number 100 [ 1222.317952][ T8] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1226.168788][T21206] syz_tun: entered allmulticast mode [ 1226.174662][T21206] syz_tun: left allmulticast mode [ 1226.205597][T21235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4669'. [ 1226.762126][ T5854] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1226.961313][T21264] syzkaller0: entered promiscuous mode [ 1226.962123][ T5854] usb 7-1: Using ep0 maxpacket: 32 [ 1226.967267][T21264] syzkaller0: entered allmulticast mode [ 1226.989202][ T5854] usb 7-1: config 0 has no interfaces? [ 1226.998428][ T5854] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1227.010188][ T5854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.031234][ T5854] usb 7-1: config 0 descriptor?? [ 1227.291162][ T5854] usb 7-1: USB disconnect, device number 9 [ 1231.277563][T21271] syzkaller0: entered promiscuous mode [ 1231.284192][T21271] syzkaller0: entered allmulticast mode [ 1231.344634][T21285] syz_tun: entered allmulticast mode [ 1231.350375][T21285] syz_tun: left allmulticast mode [ 1231.574719][T21314] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4690'. [ 1231.982517][ T5854] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1232.027531][T21333] syz_tun: entered allmulticast mode [ 1232.040829][T21332] syz_tun: left allmulticast mode [ 1232.182275][ T5854] usb 6-1: Using ep0 maxpacket: 32 [ 1232.190418][ T5854] usb 6-1: config 0 has no interfaces? [ 1232.196404][ T5854] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1232.206927][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.223654][ T5854] usb 6-1: config 0 descriptor?? [ 1232.247666][ T8] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1232.400023][T21338] loop2: detected capacity change from 0 to 7 [ 1232.412399][T21338] Dev loop2: unable to read RDB block 7 [ 1232.418411][T21338] loop2: unable to read partition table [ 1232.424939][T21338] loop2: partition table beyond EOD, truncated [ 1232.431141][T21338] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1232.455265][ T5854] usb 6-1: USB disconnect, device number 95 [ 1232.470355][ T8] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1232.494808][ T8] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1232.515575][ T8] usb 1-1: Product: syz [ 1232.526397][ T8] usb 1-1: Manufacturer: syz [ 1232.536731][ T8] usb 1-1: SerialNumber: syz [ 1232.550037][ T8] usb 1-1: config 0 descriptor?? [ 1232.887656][T21344] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1232.896275][T21344] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1233.167154][ T8] usb 1-1: USB disconnect, device number 101 [ 1233.385220][T21351] syzkaller0: entered promiscuous mode [ 1233.401522][T21351] syzkaller0: entered allmulticast mode [ 1233.606364][T21356] syz_tun: entered allmulticast mode [ 1233.629040][T21355] syz_tun: left allmulticast mode [ 1234.504307][T10746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1234.519257][T10746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1234.528956][T10746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1234.537966][T10746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1234.551177][T10746] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1234.560441][T10746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1234.669228][T21372] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1234.797241][T21367] chnl_net:caif_netlink_parms(): no params data found [ 1234.915320][T21367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.933553][T21367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.941541][T21367] bridge_slave_0: entered allmulticast mode [ 1234.956360][T21367] bridge_slave_0: entered promiscuous mode [ 1234.971556][T21367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.983360][T21367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.990763][T21367] bridge_slave_1: entered allmulticast mode [ 1235.009177][T21367] bridge_slave_1: entered promiscuous mode [ 1235.073620][T21367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.120912][T21367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.201339][T21367] team0: Port device team_slave_0 added [ 1235.222932][T21367] team0: Port device team_slave_1 added [ 1235.287835][T21367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.300851][T21367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1235.330920][T21367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.368189][T21390] syzkaller0: entered promiscuous mode [ 1235.509257][T21394] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1235.517790][T21394] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1235.747173][T21390] syzkaller0: entered allmulticast mode [ 1235.806187][T21367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.843101][T21367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1235.870065][ C1] vkms_vblank_simulate: vblank timer overrun [ 1235.881906][T21367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1235.943901][T21367] hsr_slave_0: entered promiscuous mode [ 1235.952779][T21367] hsr_slave_1: entered promiscuous mode [ 1235.959691][T21367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1235.967867][T21367] Cannot create hsr debugfs directory [ 1236.158430][ T8] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1236.283133][T21367] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.351197][ T8] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1236.366548][ T8] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1236.376882][ T8] usb 7-1: Product: syz [ 1236.381665][T21367] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.381717][ T8] usb 7-1: Manufacturer: syz [ 1236.404067][ T8] usb 7-1: SerialNumber: syz [ 1236.416676][ T8] usb 7-1: config 0 descriptor?? [ 1236.522737][T21367] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.644986][T21367] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.652671][T10746] Bluetooth: hci0: command tx timeout [ 1236.693429][ T8] usb 7-1: USB disconnect, device number 10 [ 1236.865387][T21367] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1236.877225][T21367] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1236.904476][T21367] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1236.919462][T21367] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1237.053572][T21367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.098030][T21367] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.158190][T14500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.165605][T14500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.178770][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.186112][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.523228][T21420] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1237.532658][T21420] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1237.925082][T21367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1238.006485][T21367] veth0_vlan: entered promiscuous mode [ 1238.041724][T21367] veth1_vlan: entered promiscuous mode [ 1238.131318][T21367] veth0_macvtap: entered promiscuous mode [ 1238.143534][T21427] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1238.147549][T21367] veth1_macvtap: entered promiscuous mode [ 1238.180715][T21367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.191828][T21367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.205362][T21367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.252294][T21367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.287978][T21367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.358878][T21367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.388002][T21367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1238.408953][T21367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.420184][T21367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.431750][T21367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.456590][T21367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.466838][T21367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.477864][T21367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.504503][T21367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1238.547367][T21367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.568339][T21367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.585532][T21367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.597181][T21367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.722296][T10746] Bluetooth: hci0: command tx timeout [ 1238.820368][ T4469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.838436][ T4469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.846307][ T8] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1238.887271][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.897385][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.909210][T21437] syzkaller0: entered promiscuous mode [ 1238.915193][T21437] syzkaller0: entered allmulticast mode [ 1239.069792][ T8] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1239.087674][ T8] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1239.099197][ T8] usb 7-1: Product: syz [ 1239.105002][ T8] usb 7-1: Manufacturer: syz [ 1239.109977][ T8] usb 7-1: SerialNumber: syz [ 1239.116935][T21450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4736'. [ 1239.129471][ T8] usb 7-1: config 0 descriptor?? [ 1239.292909][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.299319][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.389380][ T8] usb 7-1: USB disconnect, device number 11 [ 1239.751105][T21463] syzkaller0: entered promiscuous mode [ 1239.757298][T21463] syzkaller0: entered allmulticast mode [ 1239.779077][T21463] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4742'. [ 1239.789693][T21463] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4742'. [ 1239.808562][T21463] 0: reclassify loop, rule prio 0, protocol 800 [ 1240.219271][T21473] syz_tun: entered allmulticast mode [ 1240.228503][T21472] syz_tun: left allmulticast mode [ 1240.566942][T21489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4753'. [ 1240.715972][T21491] loop2: detected capacity change from 0 to 7 [ 1240.726382][T21491] Dev loop2: unable to read RDB block 7 [ 1240.733807][T21491] loop2: AHDI p1 p2 p3 [ 1240.738300][T21491] loop2: partition table partially beyond EOD, truncated [ 1240.746221][T21491] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1240.754410][T21491] loop2: p3 start 335544320 is beyond EOD, truncated [ 1240.802254][T10746] Bluetooth: hci0: command tx timeout [ 1241.270048][T21502] syz_tun: entered allmulticast mode [ 1241.280012][T21501] syz_tun: left allmulticast mode [ 1242.128106][T21528] syz_tun: entered allmulticast mode [ 1242.140057][T21527] syz_tun: left allmulticast mode [ 1242.708490][T21548] netlink: 'syz.3.4776': attribute type 1 has an invalid length. [ 1242.739453][T21548] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1242.878940][ T5854] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1242.882930][T10746] Bluetooth: hci0: command tx timeout [ 1243.130910][ T5854] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.160681][ T5854] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1243.178100][ T5854] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1243.225232][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.254542][ T5854] usb 1-1: config 0 descriptor?? [ 1243.462496][T21562] syz_tun: entered allmulticast mode [ 1243.484826][T21561] syz_tun: left allmulticast mode [ 1244.169018][T21589] netlink: 'syz.5.4791': attribute type 4 has an invalid length. [ 1244.223556][T21591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4792'. [ 1244.239748][T21592] netlink: 'syz.5.4791': attribute type 4 has an invalid length. [ 1244.270839][T21589] netlink: 'syz.5.4791': attribute type 4 has an invalid length. [ 1244.420825][T21594] syz_tun: entered allmulticast mode [ 1244.429001][T21593] syz_tun: left allmulticast mode [ 1244.836488][T21604] netlink: 'syz.6.4797': attribute type 1 has an invalid length. [ 1244.897584][T21604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1244.916732][T21606] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1245.449706][T21617] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4801'. [ 1245.620064][ T786] usb 1-1: USB disconnect, device number 102 [ 1245.634801][T21621] syz_tun: entered allmulticast mode [ 1245.655465][T21620] syz_tun: left allmulticast mode [ 1245.839686][T21628] syzkaller0: entered promiscuous mode [ 1245.845519][T21628] syzkaller0: entered allmulticast mode [ 1246.854460][T21659] syz_tun: entered allmulticast mode [ 1246.868752][T21658] syz_tun: left allmulticast mode [ 1247.467490][T21672] loop2: detected capacity change from 0 to 7 [ 1247.487792][T21672] Dev loop2: unable to read RDB block 7 [ 1247.507780][T21672] loop2: AHDI p1 p2 p3 [ 1247.520131][T21672] loop2: partition table partially beyond EOD, truncated [ 1247.539343][T21672] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1247.564123][T21672] loop2: p3 start 335544320 is beyond EOD, truncated [ 1248.771490][T21686] syz_tun: entered allmulticast mode [ 1248.781409][T21686] lo: entered allmulticast mode [ 1248.793873][T21685] syz_tun: left allmulticast mode [ 1248.993916][T21691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4827'. [ 1250.398940][T21721] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4838'. [ 1251.882345][ T786] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1252.072141][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 1252.085202][ T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.099995][ T786] usb 1-1: config 0 has no interfaces? [ 1252.112862][ T786] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1252.132178][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.186112][ T786] usb 1-1: config 0 descriptor?? [ 1252.430977][T21735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.450820][T21735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.939840][T21747] syzkaller0: entered promiscuous mode [ 1252.945816][T21747] syzkaller0: entered allmulticast mode [ 1252.956234][T21747] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4846'. [ 1252.965743][T21747] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4846'. [ 1253.228913][T21751] syzkaller1: entered promiscuous mode [ 1253.235638][T21751] syzkaller1: entered allmulticast mode [ 1253.302117][ T786] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1253.500174][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.525806][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1253.552085][ T786] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1253.567956][ T786] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1253.577667][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.593580][ T786] usb 4-1: config 0 descriptor?? [ 1254.037100][ T786] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1254.045160][ T786] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1254.053233][ T786] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1254.060889][ T786] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1254.068536][ T786] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1254.076533][ T786] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1254.084492][ T786] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1254.092437][ T786] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1254.100274][ T786] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1254.107899][ T786] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1254.115383][ T786] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1254.126542][ T786] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1254.136033][ T786] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1254.143765][ T786] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1254.151606][ T786] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1254.159755][ T786] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 1254.173865][ T786] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1254.334724][ T786] usb 4-1: USB disconnect, device number 115 [ 1254.764000][ T8] usb 1-1: USB disconnect, device number 103 [ 1254.882325][T21773] syzkaller0: entered promiscuous mode [ 1254.888071][T21773] syzkaller0: entered allmulticast mode [ 1254.927481][T21773] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4856'. [ 1254.952436][T21773] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4856'. [ 1257.100189][ T5835] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1257.352416][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 1257.537627][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.575323][ T5835] usb 4-1: config 0 has no interfaces? [ 1257.580961][ T5835] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1257.612327][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.662326][ T5835] usb 4-1: config 0 descriptor?? [ 1257.977243][T21803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.000708][T21803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.020590][T21850] syz_tun: entered allmulticast mode [ 1259.050698][T21849] syz_tun: left allmulticast mode [ 1259.832269][ T786] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1260.065608][ T786] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1260.091518][ T786] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.134278][ T786] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1260.155817][ T786] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1260.253285][ T786] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1260.273531][ T786] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1260.287229][ T786] usb 6-1: Product: syz [ 1260.297836][ T786] usb 6-1: Manufacturer: syz [ 1260.314529][ T786] cdc_wdm 6-1:1.0: skipping garbage [ 1260.325601][ T786] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 1260.345596][ T786] usb 4-1: USB disconnect, device number 116 [ 1260.819320][T21883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4898'. [ 1261.636211][T21910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4906'. [ 1261.991687][ T5773] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1262.190812][ T5773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.203841][ T5773] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1262.222571][ T5773] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1262.231770][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.266718][ T5773] usb 4-1: config 0 descriptor?? [ 1262.311412][T21924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4912'. [ 1262.586299][ T786] usb 6-1: USB disconnect, device number 96 [ 1262.703534][T21935] syzkaller0: entered promiscuous mode [ 1262.709101][T21935] syzkaller0: entered allmulticast mode [ 1263.192169][ T786] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1263.392324][ T786] usb 6-1: Using ep0 maxpacket: 8 [ 1263.420212][ T786] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1263.430537][ T786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.441950][ T786] usb 6-1: Product: syz [ 1263.446904][ T786] usb 6-1: Manufacturer: syz [ 1263.451738][ T786] usb 6-1: SerialNumber: syz [ 1263.460437][ T786] usb 6-1: config 0 descriptor?? [ 1263.476490][ T786] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1263.484797][ T786] pctv452e: pctv452e_power_ctrl: 1 [ 1263.484797][ T786] [ 1263.492966][ T786] usb 6-1: selecting invalid altsetting 3 [ 1263.498803][ T786] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1263.498803][ T786] [ 1263.509658][ T786] dvb-usb: bulk message failed: -22 (5/0) [ 1263.520191][ T786] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1263.531781][ T786] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1263.542990][ T786] usb 6-1: media controller created [ 1263.550824][ T786] dvb-usb: bulk message failed: -22 (8/0) [ 1263.570074][ T786] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1263.606112][ T786] dvb-usb: MAC address reading failed. [ 1263.632537][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1263.686630][T21937] dvb-usb: bulk message failed: -22 (7/0) [ 1263.697654][T21937] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 1263.808115][ T786] DVB: Unable to find symbol stb0899_attach() [ 1263.815424][ T786] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1264.002773][ T786] rc_core: IR keymap rc-tt-1500 not found [ 1264.009667][ T786] Registered IR keymap rc-empty [ 1264.030115][ T786] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1264.070525][ T786] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input64 [ 1264.116083][ T786] dvb-usb: schedule remote query interval to 100 msecs. [ 1264.123820][ T786] pctv452e: pctv452e_power_ctrl: 0 [ 1264.123820][ T786] [ 1264.131294][ T786] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1264.152479][ T786] usb 6-1: USB disconnect, device number 97 [ 1264.315378][ T786] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1267.096862][T21958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4923'. [ 1267.111897][ T5854] usb 4-1: USB disconnect, device number 117 [ 1267.290103][T21964] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4925'. [ 1267.316059][T21964] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4925'. [ 1267.497957][T21970] loop2: detected capacity change from 0 to 7 [ 1267.523753][T21970] Dev loop2: unable to read RDB block 7 [ 1267.529427][T21970] loop2: AHDI p1 p2 p3 [ 1267.536185][T21970] loop2: partition table partially beyond EOD, truncated [ 1267.549803][T21970] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1267.561502][T21970] loop2: p3 start 335544320 is beyond EOD, truncated [ 1267.569087][T21974] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4931'. [ 1268.011674][T21989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4936'. [ 1268.392128][ T5854] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1268.512413][T22010] netlink: 'syz.3.4944': attribute type 1 has an invalid length. [ 1268.539626][T22010] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1268.546514][ T5854] usb 1-1: device descriptor read/64, error -71 [ 1268.822673][ T5854] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1268.982453][ T5854] usb 1-1: device descriptor read/64, error -71 [ 1269.102554][ T5854] usb usb1-port1: attempt power cycle [ 1269.512133][ T5854] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1269.573588][ T5854] usb 1-1: device descriptor read/8, error -71 [ 1269.869954][ T5854] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1269.927060][ T5854] usb 1-1: device descriptor read/8, error -71 [ 1270.052353][ T5854] usb usb1-port1: unable to enumerate USB device [ 1271.239026][T22069] syzkaller0: entered promiscuous mode [ 1271.248051][T22069] syzkaller0: entered allmulticast mode [ 1271.286766][T22071] loop2: detected capacity change from 0 to 7 [ 1271.298949][T21203] Dev loop2: unable to read RDB block 7 [ 1271.306433][T21203] loop2: AHDI p1 p2 p3 [ 1271.310857][T21203] loop2: partition table partially beyond EOD, truncated [ 1271.344010][T21203] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1271.384251][T21203] loop2: p3 start 335544320 is beyond EOD, truncated [ 1271.549912][T22071] Dev loop2: unable to read RDB block 7 [ 1271.556827][T22071] loop2: AHDI p1 p2 p3 [ 1271.561337][T22071] loop2: partition table partially beyond EOD, truncated [ 1271.585385][T22071] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1271.636687][T22071] loop2: p3 start 335544320 is beyond EOD, truncated [ 1271.664998][T22082] syz_tun: entered allmulticast mode [ 1271.680949][T22081] syz_tun: left allmulticast mode [ 1272.352092][ T5854] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1272.447259][T22109] tipc: Enabled bearer , priority 0 [ 1272.461303][T22109] syzkaller0: entered promiscuous mode [ 1272.467217][T22109] syzkaller0: entered allmulticast mode [ 1272.510922][T22110] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1272.519783][ T5854] usb 4-1: device descriptor read/64, error -71 [ 1272.526561][T22108] tipc: Resetting bearer [ 1272.530719][T22110] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1272.640646][T22108] tipc: Disabling bearer [ 1272.792193][ T5854] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1272.877186][T22114] tap0: tun_chr_ioctl cmd 35108 [ 1272.972908][ T5854] usb 4-1: device descriptor read/64, error -71 [ 1273.130415][ T5854] usb usb4-port1: attempt power cycle [ 1273.554366][ T5854] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1273.597520][ T5854] usb 4-1: device descriptor read/8, error -71 [ 1273.697356][T22132] syz_tun: entered allmulticast mode [ 1273.720400][T22131] syz_tun: left allmulticast mode [ 1273.882187][ T5854] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1273.942516][ T5854] usb 4-1: device descriptor read/8, error -71 [ 1274.062812][ T5854] usb usb4-port1: unable to enumerate USB device [ 1274.716954][T22150] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1274.726882][T22150] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1275.377000][T22165] loop2: detected capacity change from 0 to 7 [ 1275.388839][T22165] Dev loop2: unable to read RDB block 7 [ 1275.400284][T22165] loop2: AHDI p1 p2 p3 [ 1275.412240][T22165] loop2: partition table partially beyond EOD, truncated [ 1275.432378][T22165] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1275.462789][T22165] loop2: p3 start 335544320 is beyond EOD, truncated [ 1275.962175][T22177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5010'. [ 1276.050138][T22182] tipc: Started in network mode [ 1276.078552][T22182] tipc: Node identity 62cecd888e6a, cluster identity 4711 [ 1276.092427][T22182] tipc: Enabled bearer , priority 0 [ 1276.112542][T22182] syzkaller0: entered promiscuous mode [ 1276.118078][T22182] syzkaller0: entered allmulticast mode [ 1276.184858][T22182] tipc: Resetting bearer [ 1276.211474][T22181] tipc: Resetting bearer [ 1276.291823][T22181] tipc: Disabling bearer [ 1276.786080][T22211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5024'. [ 1277.172253][ T8] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1277.362402][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 1277.369900][ T8] usb 6-1: no configurations [ 1277.375346][ T8] usb 6-1: can't read configurations, error -22 [ 1277.471723][T22230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5032'. [ 1277.482521][T22230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5032'. [ 1277.563350][ T8] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1277.782253][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 1277.802316][ T8] usb 6-1: no configurations [ 1277.807094][ T8] usb 6-1: can't read configurations, error -22 [ 1277.822453][ T8] usb usb6-port1: attempt power cycle [ 1278.262272][ T8] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1278.318616][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 1278.327432][ T8] usb 6-1: no configurations [ 1278.338308][ T8] usb 6-1: can't read configurations, error -22 [ 1278.481901][T22256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5042'. [ 1278.494060][T22256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5042'. [ 1278.503375][ T8] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1278.530670][T22258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5041'. [ 1278.557537][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 1278.566451][ T8] usb 6-1: no configurations [ 1278.582292][ T8] usb 6-1: can't read configurations, error -22 [ 1278.589022][ T8] usb usb6-port1: unable to enumerate USB device [ 1279.067995][T22277] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1279.076778][T22277] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1279.403697][ T5854] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1279.616841][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.628785][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.649520][ T5854] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1279.666440][ T5854] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1279.677635][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.705269][ T5854] usb 4-1: config 0 descriptor?? [ 1280.186326][T22293] loop2: detected capacity change from 0 to 7 [ 1280.198904][T21203] Dev loop2: unable to read RDB block 7 [ 1280.204831][T21203] loop2: AHDI p1 p2 p3 [ 1280.209071][T21203] loop2: partition table partially beyond EOD, truncated [ 1280.217735][T21203] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1280.226024][T21203] loop2: p3 start 335544320 is beyond EOD, truncated [ 1280.321694][T22293] Dev loop2: unable to read RDB block 7 [ 1280.343557][T22293] loop2: AHDI p1 p2 p3 [ 1280.357335][T22293] loop2: partition table partially beyond EOD, truncated [ 1280.372273][T22293] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1280.379406][T22293] loop2: p3 start 335544320 is beyond EOD, truncated [ 1280.386012][ T5854] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 1280.399655][ T5854] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1280.933139][ T5152] usb 4-1: USB disconnect, device number 122 [ 1282.334314][T22296] Bluetooth: hci4: command 0x0406 tx timeout [ 1282.510631][T22296] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1282.530015][T22296] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1282.539878][T22296] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1282.600098][T22296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1282.617914][T22296] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1282.632597][T22296] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1284.723489][T10746] Bluetooth: hci5: command tx timeout [ 1285.142138][T19842] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 1285.159469][T22315] chnl_net:caif_netlink_parms(): no params data found SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1285.562087][ T8] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1287.021931][ T4469] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.106993][ T4469] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.190165][ T4469] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.290431][ T4469] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.706661][ T4469] hsr_slave_0: left promiscuous mode [ 1288.718457][ T4469] hsr_slave_1: left promiscuous mode [ 1288.726632][ T4469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1288.742108][ T4469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1288.750261][ T4469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1288.762221][ T4469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1288.775287][ T4469] bridge_slave_1: left allmulticast mode [ 1288.781049][ T4469] bridge_slave_1: left promiscuous mode [ 1288.787278][ T4469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.806840][ T4469] bridge_slave_0: left allmulticast mode [ 1288.813102][ T4469] bridge_slave_0: left promiscuous mode [ 1288.819121][ T4469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.872688][ T4469] veth1_macvtap: left promiscuous mode [ 1288.878292][ T4469] veth0_macvtap: left promiscuous mode [ 1288.885423][ T4469] veth1_vlan: left promiscuous mode [ 1288.890812][ T4469] veth0_vlan: left promiscuous mode [ 1290.080169][ T4469] team0 (unregistering): Port device team_slave_1 removed [ 1290.157357][ T4469] team0 (unregistering): Port device team_slave_0 removed [ 1290.227885][ T4469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.311215][ T4469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1290.928594][ T4469] bond0 (unregistering): Released all slaves [ 1291.047290][ T4469] lo (unregistering): left allmulticast mode [ 1292.248089][ T4469] bond0 (unregistering): Released all slaves