last executing test programs: 26.897850512s ago: executing program 3 (id=1911): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="170928bd7000000000080009000100000008000a0000000000060002000080000008001700", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x4b, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r5, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000140)={0x28, 0x6, r6, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffff18) r10 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', &(0x7f0000003f40)=@ethtool_gstrings={0x1b, 0x5}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x53, 0x0}) 24.059417167s ago: executing program 3 (id=1925): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', 0x80801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) 23.793679778s ago: executing program 3 (id=1926): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b787c3}}, 0x20}}, 0x20000840) sendmmsg$unix(r0, &(0x7f000000a140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x1, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 23.594151906s ago: executing program 3 (id=1927): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x270) 23.010686517s ago: executing program 3 (id=1928): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x18) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2110cc661668000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = fcntl$dupfd(r0, 0x406, r0) write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 22.523388362s ago: executing program 3 (id=1930): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000202907800000000e000080211009078e000"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x68, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 21.914517618s ago: executing program 32 (id=1930): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000202907800000000e000080211009078e000"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x68, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 7.635990897s ago: executing program 0 (id=1984): sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x420, 0x3f4, 0x10, 0x70bd2b, 0x25dfdbfd, {0x5, 0x0, 0x28, [0xffff, 0x8, 0x0, 0xe, 0x5, 0x401, 0xf7fc, 0xc7, 0xac, 0x3, 0xd, 0x1, 0x39, 0x2, 0x9, 0x7fffffff, 0x55ea, 0x7, 0x401, 0xf2, 0x4, 0x2, 0x7, 0xd, 0x0, 0x1, 0x3, 0x3, 0x9, 0x2, 0x5, 0x1, 0x0, 0x4, 0x7f, 0x0, 0x400, 0x1, 0x1, 0x7fff, 0x7, 0x3, 0x1, 0x1, 0xb, 0x0, 0x8, 0x5, 0x8, 0x401, 0xd, 0x800, 0x1, 0x3, 0x101, 0x0, 0x3, 0x7, 0x0, 0x8, 0xca5, 0x6d0, 0x0, 0x2], [0x9, 0x5, 0x8, 0x9, 0x8000, 0x6, 0xc6, 0x8, 0x2, 0xe, 0x7fff, 0xb6d5, 0x23af, 0x20, 0x7, 0x4, 0x5, 0xffffffff, 0x4, 0x100, 0x7f, 0x6, 0x8, 0x3, 0xc17, 0x0, 0x2, 0x3, 0x5, 0x7ff, 0x8, 0x9, 0x85b4, 0x8, 0xffff, 0x6, 0x2, 0x1000, 0x6, 0x0, 0x3, 0x6a3, 0x2, 0x8000, 0x6, 0x5, 0xbb, 0x1, 0x2, 0x1, 0x10000, 0x2008000, 0x1, 0x6, 0x1000, 0x5, 0x7, 0x2, 0xf, 0x4, 0x4, 0x8, 0x7f, 0x80], [0x1, 0x2, 0x1, 0x7, 0x2, 0x1, 0xfffffffd, 0xfffffffe, 0x3, 0x101, 0x1, 0xfffffffa, 0x3, 0x3, 0xfffffffd, 0x800, 0x2, 0xc, 0x8, 0x0, 0x2244fb8d, 0xaba00000, 0xb, 0x9, 0x401, 0x4, 0x8, 0xfffffffe, 0x0, 0x80000001, 0x5, 0x80000000, 0x100, 0x6, 0x7ff, 0x0, 0x827, 0x3, 0xc7, 0x4, 0xa8bc00, 0x81, 0x8001, 0x674, 0x1, 0x1, 0x8001, 0x6, 0x5, 0xfff, 0x0, 0xae9f, 0x6f, 0x0, 0x80, 0x1ff, 0x9, 0x2, 0xfffffffc, 0x7fff, 0x7, 0x0, 0xf, 0x9], [0x5, 0x4, 0x802, 0xfffff800, 0x7f, 0xedb, 0x0, 0x1, 0xfffffffa, 0x40000, 0x7, 0x9, 0x14d98, 0x0, 0x4, 0x4, 0xffffff01, 0x8000, 0x2, 0x7, 0xfffffc01, 0x400, 0x1, 0x1, 0x9, 0xd, 0xed62, 0xa8, 0x6, 0x2, 0x6b2, 0x0, 0x8001, 0x6, 0x6, 0x81, 0xb6e, 0x6e506360, 0x5, 0x2, 0xed, 0x1b, 0xfffffe01, 0x401, 0x3, 0xa61, 0x7fffffff, 0x4, 0x5, 0x5, 0x80, 0x2, 0x4, 0xffff0000, 0x2, 0x1e2, 0x0, 0x30d, 0xfff, 0xfffffffb, 0x7ff, 0x9, 0x6, 0x3]}}, 0x420}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.410979246s ago: executing program 1 (id=1985): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000000800010000000000", 0x24) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008811) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x24000085) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r3, r3}, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) r4 = dup2(r2, r2) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0xfffffffffffffe46) r5 = fsopen(&(0x7f00000003c0)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='{\x00', &(0x7f0000000440)='\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a010200000000000000000000000034000000140a0101000900010073797a300000000008000340000000000c000640000000100000000020000000000a030041744d52b5466322020000000900010073797a3000000000200000000e0a010300000000000000000200eca800000900010073797a3000000000140000001100010000000000000000000000000ae5c3522edef7886f8bcd7d5696b20ac7354ae9b54b5a83ad98325105d792a558a9cea00a577dc7f3"], 0xb0}}, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 7.293270028s ago: executing program 0 (id=1987): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="170928bd7000000000080009000100000008000a0000000000060002000080000008001700", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x4b, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r5, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000140)={0x28, 0x6, r6, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffff18) r10 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', &(0x7f0000003f40)=@ethtool_gstrings={0x1b, 0x5}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x53, 0x0}) 7.140164632s ago: executing program 5 (id=1988): gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0xa, 0x2, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004001400000000c910fe"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r3, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000980)={0x2, @pix_mp={0x2, 0x3, 0x41414270, 0x0, 0x4, [{0x401, 0x9}, {0xffffffff, 0x10000}, {0x4, 0x2}, {0x1, 0x3}, {0x8e8, 0x6}, {0x9, 0x3}, {0x3, 0xc6}, {0x5, 0x4}], 0xb, 0x59, 0x1, 0x3, 0x7}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000b40b400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaacaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32], 0x68}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) userfaultfd(0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) 6.739384895s ago: executing program 5 (id=1990): socket$netlink(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe8c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40002002, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[], 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) bind$can_j1939(r2, 0x0, 0x0) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x3062a650, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) lchown(0x0, 0x0, 0x0) r4 = dup3(r1, r0, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r4, 0x0, 0x0) unshare(0x2030b00) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) 5.128899352s ago: executing program 0 (id=1995): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000000800010000000000", 0x24) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008811) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x24000085) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0xfffffffffffffe46) r4 = fsopen(&(0x7f00000003c0)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='{\x00', &(0x7f0000000440)='\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a010200000000000000000000000034000000140a0101000900010073797a300000000008000340000000000c000640000000100000000020000000000a030041744d52b5466322020000000900010073797a3000000000200000000e0a010300000000000000000200eca800000900010073797a3000000000140000001100010000000000000000000000000ae5c3522edef7886f8bcd7d5696b20ac7354ae9b54b5a83ad98325105d792a558a9cea00a577dc7f3"], 0xb0}}, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 5.074901141s ago: executing program 4 (id=1996): mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) 4.896634328s ago: executing program 5 (id=1998): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0x9, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r2, &(0x7f0000000100)={0x1, {&(0x7f0000000900)=""/212, 0xbf, 0x0, 0x2, 0x2}}, 0x98) write$vhost_msg(r2, &(0x7f00000001c0)={0x1, {&(0x7f0000000040)=""/44, 0x2c, 0x0, 0x1, 0x1}}, 0x48) write$vhost_msg(r2, &(0x7f0000000a00)={0x1, {&(0x7f00000008c0)=""/38, 0x26, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f00000003c0)=""/14, 0xe, 0x0, 0x3, 0x2}}, 0x48) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r3, 0x2000) pipe2$watch_queue(0x0, 0x80) newfstatat(0xffffffffffffff9c, &(0x7f0000001600)='./file1\x00', 0x0, 0x4000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x4, 0x4e}, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000240)={'veth0_macvtap\x00', 0x6}) 4.795063887s ago: executing program 4 (id=1999): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 4.779723627s ago: executing program 1 (id=2000): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.444178974s ago: executing program 4 (id=2001): gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0xa, 0x2, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004001400000000c910fe"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r3, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000980)={0x2, @pix_mp={0x2, 0x3, 0x41414270, 0x0, 0x4, [{0x401, 0x9}, {0xffffffff, 0x10000}, {0x4, 0x2}, {0x1, 0x3}, {0x8e8, 0x6}, {0x9, 0x3}, {0x3, 0xc6}, {0x5, 0x4}], 0xb, 0x59, 0x1, 0x3, 0x7}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) userfaultfd(0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) 4.333921636s ago: executing program 1 (id=2002): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'veth1\x00', @remote}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xb, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.115015222s ago: executing program 4 (id=2003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r2, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x29ae, 0x21}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040001}, 0x880) 3.739175531s ago: executing program 4 (id=2004): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="170928bd7000000000080009000100000008000a0000000000060002000080000008001700", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x4b, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r6, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000140)={0x28, 0x6, r7, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffff18) r11 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', &(0x7f0000003f40)=@ethtool_gstrings={0x1b, 0x5}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x53, 0x0}) 3.687515464s ago: executing program 1 (id=2005): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="170928bd7000000000080009000100000008000a0000000000060002000080000008001700", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x4b, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r5, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000140)={0x28, 0x6, r6, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffff18) r10 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', &(0x7f0000003f40)=@ethtool_gstrings={0x1b, 0x5}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x53, 0x0}) 2.40468229s ago: executing program 5 (id=2006): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1) 1.159408112s ago: executing program 2 (id=2007): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x14, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000100)="67400f00d9440f381c730866baf80cb838b97a83ef66bafc0c66b8000066ef430f005f000f01f865400f01c5c7442400bdc70000c7442402f7670000c7442406000000000f011c24c744240004000000c744240200580000ff1c2466baf80cb8ec337087ef66bafc0c66edb9260b00000f32", 0x72}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xe, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x6}, {0x0, 0x5, 0xd4, '\x00', 0xf9}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x6, '\x00', 0xdf}, {0x71, 0xd7, 0xf1, '\x00', 0x7b}, {0x3, 0x3, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x87}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x0, '\x00', 0x6}, {0xb, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0xff, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x8}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x44}]}}) 1.148439316s ago: executing program 0 (id=2008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x0, 0x0, 0x14, 0x8}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x64, 0x0, 0xb, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1}, {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x105, 0x0, 0xffff}}}}, 0xfdef) syz_open_pts(0xffffffffffffffff, 0x0) 1.00151542s ago: executing program 5 (id=2009): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", "88318644", "a915950f158d5a6b"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007a4", 0x5}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 696.834581ms ago: executing program 4 (id=2010): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000000800010000000000", 0x24) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008811) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x24000085) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r3, r3}, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) r4 = dup2(r2, r2) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0xfffffffffffffe46) r5 = fsopen(&(0x7f00000003c0)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='{\x00', &(0x7f0000000440)='\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a010200000000000000000000000034000000140a0101000900010073797a300000000008000340000000000c000640000000100000000020000000000a030041744d52b5466322020000000900010073797a3000000000200000000e0a010300000000000000000200eca800000900010073797a3000000000140000001100010000000000000000000000000ae5c3522edef7886f8bcd7d5696b20ac7354ae9b54b5a83ad98325105d792a558a9cea00a577dc7f3"], 0xb0}}, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 628.954388ms ago: executing program 0 (id=2011): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="440f7912430f00d5f3f65eeac401f8ae5fc3c46249a633b8010000000f01d9c4623693f7570f0f01c3713866b8b6008ed0", 0x31}], 0x1, 0x12, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd1638000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025d0339c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000e0ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c2c28e5b0000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdf9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 611.560447ms ago: executing program 1 (id=2012): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x8, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0x1, 0x8, 0x8, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x7, 0x5, 0x6, 0x100000000001], 0x1000, 0x4fb40}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 538.372562ms ago: executing program 2 (id=2013): gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0xa, 0x2, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004001400000000c910fe"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r3, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000980)={0x2, @pix_mp={0x2, 0x3, 0x41414270, 0x0, 0x4, [{0x401, 0x9}, {0xffffffff, 0x10000}, {0x4, 0x2}, {0x1, 0x3}, {0x8e8, 0x6}, {0x9, 0x3}, {0x3, 0xc6}, {0x5, 0x4}], 0xb, 0x59, 0x1, 0x3, 0x7}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) userfaultfd(0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) 424.792018ms ago: executing program 1 (id=2014): sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="01002bbd"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000040) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000003c0)=[@nested_amd_invlpga={0x17d, 0x20, {0x50000, 0x3e79}}], 0x20}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xca341, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f3036db45ef0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x55}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 345.636081ms ago: executing program 2 (id=2015): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x548, 0x6, 0x57c, 0x8000001, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9b) 234.229626ms ago: executing program 2 (id=2016): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4f23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) listen(r2, 0xb) listen(r1, 0x50) 162.442371ms ago: executing program 0 (id=2017): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000200)={0x0, [[0x6, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x0, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) r2 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4000040, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x20000092}, 0x71) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r3, 0x1000}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b787c3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 139.140909ms ago: executing program 2 (id=2018): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) sendmmsg$sock(r0, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)="865e7be758721e3f4b43158659e8a84fd017fe78aae9b65aa4", 0x19}], 0x1}}], 0x1, 0x48050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 10.320076ms ago: executing program 5 (id=2019): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$kcm(0xa, 0x3, 0x3a) unshare(0x100000) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r1, &(0x7f00000021c0)=""/59, 0x3b) 0s ago: executing program 2 (id=2020): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="170928bd7000000000080009000100000008000a0000000000060002000080000008001700", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x4b, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r6, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000140)={0x28, 0x6, r7, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffff18) r11 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', &(0x7f0000003f40)=@ethtool_gstrings={0x1b, 0x5}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x53, 0x0}) kernel console output (not intermixed with test programs): : -32 [ 398.216424][ T7030] usb 3-1: USB disconnect, device number 25 [ 398.417246][ T7026] usb 1-1: cp210x converter now attached to ttyUSB0 [ 398.437012][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.561945][ T7029] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 398.606736][ T7026] usb 1-1: USB disconnect, device number 33 [ 398.635881][ T7026] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 398.684642][ T7026] cp210x 1-1:0.0: device disconnected [ 398.725118][ T7029] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 398.742341][ T7029] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.742398][ T7029] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.742424][ T7029] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 398.742567][ T7029] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.786360][ T7029] usb 2-1: config 0 descriptor?? [ 399.273567][ T7029] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 399.573394][ T7029] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 399.600566][ T7030] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 399.723460][ T7029] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 399.737818][ T7029] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 399.737871][ T7029] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 399.748408][ T7029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.748437][ T7029] usb 3-1: Product: syz [ 399.748459][ T7029] usb 3-1: Manufacturer: syz [ 399.748473][ T7029] usb 3-1: SerialNumber: syz [ 399.769735][ T7030] usb 1-1: unable to get BOS descriptor or descriptor too short [ 399.778064][ T7030] usb 1-1: not running at top speed; connect to a high speed hub [ 399.778142][ T7030] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 399.794168][ T7030] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 399.794270][ T7030] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 10400, setting to 64 [ 399.811264][ T7029] usb 3-1: config 0 descriptor?? [ 399.819680][ T9940] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 399.834298][ T7030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.834432][ T7030] usb 1-1: Product: syz [ 399.834461][ T7030] usb 1-1: Manufacturer: syz [ 399.834503][ T7030] usb 1-1: SerialNumber: syz [ 399.842787][ T9940] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 399.882634][ T9942] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 399.882867][ T9942] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 399.974110][ T9948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1152'. [ 400.066854][ T9940] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 400.067036][ T9940] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 400.083262][ T9949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.134722][ T7030] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 400.138931][ T7030] usb 1-1: MIDIStreaming interface descriptor not found [ 400.491952][ T7029] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 400.524289][ T7030] usb 1-1: USB disconnect, device number 34 [ 400.697335][ T7029] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 400.735071][ T7029] usb 3-1: USB disconnect, device number 26 [ 400.936230][ T9958] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1154'. [ 401.015243][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.059508][ T9960] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 401.383726][ T7025] usb 2-1: USB disconnect, device number 30 [ 401.725431][ T7030] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 401.870237][ T7030] usb 3-1: Using ep0 maxpacket: 32 [ 401.876707][ T7030] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 401.890304][ T7030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.901442][ T7030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.901484][ T7030] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.926920][ T7030] usb 3-1: config 0 descriptor?? [ 402.383518][ T7030] hid_parser_main: 28 callbacks suppressed [ 402.383578][ T7030] koneplus 0003:1E7D:2D51.0019: unknown main item tag 0x0 [ 402.383618][ T7030] koneplus 0003:1E7D:2D51.0019: unknown main item tag 0x0 [ 402.383652][ T7030] koneplus 0003:1E7D:2D51.0019: unknown main item tag 0x0 [ 402.383704][ T7030] koneplus 0003:1E7D:2D51.0019: unknown main item tag 0x0 [ 402.383739][ T7030] koneplus 0003:1E7D:2D51.0019: unknown main item tag 0x0 [ 402.434738][ T7030] koneplus 0003:1E7D:2D51.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 402.530265][ T7026] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 402.576125][ T9966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.578973][ T9966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.613455][ T7030] koneplus 0003:1E7D:2D51.0019: couldn't init struct koneplus_device [ 402.621845][ T7030] koneplus 0003:1E7D:2D51.0019: couldn't install mouse [ 402.641487][ T7030] koneplus 0003:1E7D:2D51.0019: probe with driver koneplus failed with error -71 [ 402.661704][ T7030] usb 3-1: USB disconnect, device number 27 [ 402.683191][ T7026] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 402.699507][ T7026] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.716624][ T7026] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.716681][ T7026] usb 2-1: Product: syz [ 402.716716][ T7026] usb 2-1: Manufacturer: syz [ 402.716773][ T7026] usb 2-1: SerialNumber: syz [ 402.788321][ T9975] fido_id[9975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 403.105364][ T9981] program syz.3.1162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.200242][ T7026] hackrf 2-1:1.0: usb_control_msg() failed -32 request 0f [ 403.200297][ T7026] hackrf 2-1:1.0: Could not detect board [ 403.200413][ T7026] hackrf 2-1:1.0: probe with driver hackrf failed with error -32 [ 403.262088][ T7026] usb 2-1: USB disconnect, device number 31 [ 403.417944][ T9971] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1158'. [ 404.184770][T10002] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1170'. [ 404.219659][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 404.219705][T10002] netlink: 1932 bytes leftover after parsing attributes in process `syz.1.1170'. [ 404.220043][T10002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1170'. [ 404.220391][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 404.400216][ T7026] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 404.552055][ T7026] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 404.567304][ T7026] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 404.567382][ T7026] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 404.567487][ T7026] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 404.567594][ T7026] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 404.567664][ T7026] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 404.567775][ T7026] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.640689][ T7026] usb 1-1: config 0 descriptor?? [ 404.649995][T10004] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 405.097128][ T7026] plantronics 0003:047F:FFFF.001A: reserved main item tag 0xd [ 405.167720][ T7026] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 405.268142][T10017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.407315][ T7026] usb 1-1: USB disconnect, device number 35 [ 405.515249][T10027] fido_id[10027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 405.595958][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1182'. [ 406.000220][ T7030] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 406.048511][T10044] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 406.133773][T10044] kvm_intel: kvm [10040]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x660b [ 406.146551][T10044] kvm [10040]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x2a06 [ 406.156175][ T7030] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 406.167934][ T7030] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 406.177466][ T7030] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 406.177494][ T7030] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 406.177557][ T7030] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 406.177588][ T7030] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 406.222711][ T7030] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 406.222760][ T7030] usb 5-1: Product: syz [ 406.222798][ T7030] usb 5-1: Manufacturer: syz [ 406.246667][T10044] kvm [10040]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x262e [ 406.263636][ T7030] cdc_wdm 5-1:1.0: skipping garbage [ 406.269422][ T7030] cdc_wdm 5-1:1.0: skipping garbage [ 406.282460][ T7026] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 406.292622][ T7030] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 406.300008][ T7030] cdc_wdm 5-1:1.0: Unknown control protocol [ 406.425888][T10051] netlink: NAT attribute type 0 has unexpected length (1 != 0) [ 406.425952][T10051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.442267][ T7026] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 406.448395][ T7026] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 406.448480][ T7026] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 406.448629][ T7026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.535737][ T7026] usb 4-1: probing VID:PID(0424:012C) [ 406.568173][ T7026] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 406.568252][ T7026] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 406.568298][ T7026] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 406.568365][ T7026] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 406.572301][ T7026] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 406.708824][T10059] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1194'. [ 406.922392][ T7026] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 407.121782][ T7026] usb 4-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 407.168027][ T7025] usb 5-1: USB disconnect, device number 23 [ 407.202213][ T7030] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 407.372305][ T7030] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 407.376190][ T7030] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 407.377118][ T7030] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 407.377213][ T7030] usb 2-1: config 0 interface 0 has no altsetting 0 [ 407.377311][ T7030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.386829][ T7030] usb 2-1: config 0 descriptor?? [ 407.390879][T10066] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 407.836408][ T7030] elecom 0003:056E:00FC.001B: unknown main item tag 0x2 [ 407.836478][ T7030] elecom 0003:056E:00FC.001B: unknown global tag 0xd [ 407.836497][ T7030] elecom 0003:056E:00FC.001B: item 0 2 1 13 parsing failed [ 407.840711][ T7030] elecom 0003:056E:00FC.001B: probe with driver elecom failed with error -22 [ 407.922744][T10086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1204'. [ 407.968059][ T7026] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 407.977265][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 407.993385][ T7026] usb 4-1: USB disconnect, device number 28 [ 408.090155][ T7030] usb 2-1: USB disconnect, device number 32 [ 408.696777][T10096] tipc: Started in network mode [ 408.696823][T10096] tipc: Node identity ac14142f, cluster identity 4711 [ 408.697704][T10096] tipc: Enabled bearer , priority 10 [ 408.722143][T10096] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 408.864664][T10084] __nla_validate_parse: 3 callbacks suppressed [ 408.864728][T10084] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1205'. [ 409.040185][ T7025] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 409.150246][ T5698] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 409.201032][ T7025] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 409.216061][ T7025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.216109][ T7025] usb 2-1: Product: syz [ 409.216153][ T7025] usb 2-1: Manufacturer: syz [ 409.216173][ T7025] usb 2-1: SerialNumber: syz [ 409.247717][ T7025] usb 2-1: config 0 descriptor?? [ 409.261828][ T7025] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 409.330938][ T5698] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 409.341801][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.354042][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.354151][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.387090][ T5698] usb 5-1: config 0 descriptor?? [ 409.812022][ T5698] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 409.812122][ T5698] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 409.812180][ T5698] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 409.812213][ T5698] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 409.812273][ T5698] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 409.812302][ T5698] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 409.812332][ T5698] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 409.831404][ T7030] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 409.872328][ T5714] tipc: Node number set to 2886997039 [ 409.889493][ T5698] pyra 0003:1E7D:2CF6.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 409.990951][ T7030] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 410.000828][ T7030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.000872][ T7030] usb 1-1: Product: syz [ 410.000908][ T7030] usb 1-1: Manufacturer: syz [ 410.000931][ T7030] usb 1-1: SerialNumber: syz [ 410.086228][ T7025] gspca_sunplus: reg_w_riv err -71 [ 410.092104][ T7025] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 410.100794][ T7037] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 410.119516][ T7025] usb 2-1: USB disconnect, device number 33 [ 410.260259][ T7037] usb 3-1: Using ep0 maxpacket: 8 [ 410.262407][ T7037] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 410.276838][ T7037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.276939][ T7037] usb 3-1: Product: syz [ 410.276970][ T7037] usb 3-1: Manufacturer: syz [ 410.276991][ T7037] usb 3-1: SerialNumber: syz [ 410.295275][ T7037] usb 3-1: config 0 descriptor?? [ 410.316205][ T7030] rtl8150 1-1:1.0: couldn't reset the device [ 410.317446][ T7030] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 410.336190][ T7030] usb 1-1: USB disconnect, device number 36 [ 410.429143][ T5698] pyra 0003:1E7D:2CF6.001C: couldn't init struct pyra_device [ 410.436771][ T5698] pyra 0003:1E7D:2CF6.001C: couldn't install mouse [ 410.449479][ T5698] pyra 0003:1E7D:2CF6.001C: probe with driver pyra failed with error -71 [ 410.462707][ T5698] usb 5-1: USB disconnect, device number 24 [ 410.509722][ T7037] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 410.891103][ T7030] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 410.922119][T10121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1220'. [ 411.040209][ T7030] usb 2-1: Using ep0 maxpacket: 32 [ 411.044772][ T7030] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 411.058180][ T7030] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 411.075899][ T7030] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 411.075946][ T7030] usb 2-1: Product: syz [ 411.076040][ T7030] usb 2-1: Manufacturer: syz [ 411.076116][ T7030] usb 2-1: SerialNumber: syz [ 411.108923][ T7030] usb 2-1: config 0 descriptor?? [ 411.115263][T10117] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 411.184818][T10127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1222'. [ 411.208651][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'. [ 411.217919][T10127] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.1222'. [ 411.217976][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1222'. [ 411.218002][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'. [ 411.358944][ T7037] usb write operation failed. (-71) [ 411.391043][ T7037] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 411.402740][ T7037] dvbdev: DVB: registering new adapter (Terratec H7) [ 411.402847][ T7037] usb 3-1: media controller created [ 411.405261][ T7037] usb read operation failed. (-71) [ 411.437724][ T7037] usb write operation failed. (-71) [ 411.444507][ T5698] usb 2-1: USB disconnect, device number 34 [ 411.528440][ T7037] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 411.550590][ T7037] usb 3-1: USB disconnect, device number 28 [ 412.955771][ T5698] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 413.121186][ T5698] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 413.137545][ T5698] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 413.137594][ T5698] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 413.160644][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.169961][ T5698] usb 2-1: Product: syz [ 413.169984][ T5698] usb 2-1: Manufacturer: syz [ 413.170000][ T5698] usb 2-1: SerialNumber: syz [ 413.170212][ T7025] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 413.293854][T10168] bridge0: port 1(syz_tun) entered blocking state [ 413.294512][T10168] bridge0: port 1(syz_tun) entered disabled state [ 413.312831][T10168] syz_tun: entered promiscuous mode [ 413.318523][T10168] bridge0: port 1(syz_tun) entered blocking state [ 413.318672][T10168] bridge0: port 1(syz_tun) entered forwarding state [ 413.340211][ T5685] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 413.360941][ T7025] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 413.373124][ T7025] usb 3-1: config index 0 descriptor too short (expected 69, got 51) [ 413.381671][ T7025] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 47, changing to 9 [ 413.381704][ T7025] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 26213, setting to 1024 [ 413.414453][ T7025] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.414548][ T7025] usb 3-1: Product: syz [ 413.414594][ T7025] usb 3-1: Manufacturer: syz [ 413.414618][ T7025] usb 3-1: SerialNumber: syz [ 413.466792][ T7025] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 413.508809][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1240'. [ 413.522177][ T5685] usb 5-1: Using ep0 maxpacket: 32 [ 413.531618][ T5685] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 413.544817][ T5685] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 413.554807][ T5685] usb 5-1: config 0 has no interface number 0 [ 413.554927][ T5685] usb 5-1: config 0 interface 184 has no altsetting 0 [ 413.571572][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.579837][ T5685] usb 5-1: Product: syz [ 413.584254][ T5685] usb 5-1: Manufacturer: syz [ 413.586630][T10171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1240'. [ 413.586760][T10171] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 413.598223][ T5685] usb 5-1: SerialNumber: syz [ 413.614495][ T5685] usb 5-1: config 0 descriptor?? [ 413.863244][ T7025] usb 3-1: Scarlett Gen 2 USB request result cmd 0 was -32 [ 413.863482][ T7025] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 413.887379][T10181] tipc: Enabling of bearer rejected, already enabled [ 413.944899][ T7025] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 413.962875][ T7025] usb 3-1: USB disconnect, device number 29 [ 414.001608][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.179298][T10187] kvm: kvm [10186]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008d) = 0x40 [ 414.231469][ T5685] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 414.231553][ T5685] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 414.259001][ C1] usb 2-1: failed to resubmit arpc in-urb: -19 [ 414.259001][ T7037] usb 2-1: USB disconnect, device number 35 [ 414.259047][ C1] usb 2-1: failed to resubmit arpc in-urb: -19 [ 414.259087][ C1] usb 2-1: failed to resubmit in-urb: -19 [ 414.259125][ C1] usb 2-1: failed to resubmit in-urb: -19 [ 414.259163][ C1] usb 2-1: failed to resubmit in-urb: -19 [ 414.259201][ C1] usb 2-1: failed to resubmit in-urb: -19 [ 414.312137][ T7037] usb 2-1: failed to send ARPC request 4: -19 [ 414.312239][ T7037] usb 2-1: failed to execute ARPC: -19 [ 414.326166][ T7037] usb 2-1: failed to flush cport 0: -19 [ 414.335387][ T7037] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 414.343229][ T7037] usb 2-1: failed to send ARPC request 2: -19 [ 414.349506][ T7037] usb 2-1: failed to execute ARPC: -19 [ 414.355883][ T7037] usb 2-1: failed to quiesce cport 0: -19 (0) [ 414.362156][ T7037] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 414.369856][ T7037] usb 2-1: failed to send ARPC request 3: -19 [ 414.369933][ T7037] usb 2-1: failed to execute ARPC: -19 [ 414.369952][ T7037] usb 2-1: failed to clear cport 0: -19 [ 414.369971][ T7037] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 414.457352][ T5685] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 414.457416][ T5685] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 414.457439][ T5685] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 414.458141][ T5685] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 414.486618][ T5685] usb 5-1: USB disconnect, device number 25 [ 414.830403][ T7025] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 414.981134][ T7025] usb 3-1: Using ep0 maxpacket: 8 [ 414.984707][ T7025] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 414.989074][ T7025] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 414.996276][ T7025] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 414.996372][ T7025] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 414.996430][ T7025] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 414.996580][ T7025] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.996693][ T7025] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.266547][ T7025] usb 3-1: usb_control_msg returned -32 [ 415.266613][ T7025] usbtmc 3-1:16.0: can't read capabilities [ 415.674423][T10214] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 415.683898][T10214] netlink: 'syz.4.1258': attribute type 12 has an invalid length. [ 416.105616][T10233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1265'. [ 416.130166][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'. [ 416.140341][T10233] netlink: 1932 bytes leftover after parsing attributes in process `syz.1.1265'. [ 416.141374][T10233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1265'. [ 416.141512][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'. [ 416.918417][ T7037] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 416.962648][ T7037] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 417.159256][T10251] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 417.302221][T10251] kvm_intel: kvm [10249]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x660b [ 417.318142][T10251] kvm [10249]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x2a06 [ 417.340867][T10251] kvm [10249]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x262e [ 417.687919][ T7037] usb 3-1: USB disconnect, device number 30 [ 417.991028][T10264] netlink: 'syz.2.1278': attribute type 2 has an invalid length. [ 418.200173][ T7025] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 418.219698][T10274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1280'. [ 418.221481][ T7029] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 418.240970][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1280'. [ 418.241038][T10274] netlink: 1932 bytes leftover after parsing attributes in process `syz.4.1280'. [ 418.252331][T10274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1280'. [ 418.255255][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1280'. [ 418.360364][ T7025] usb 1-1: Using ep0 maxpacket: 16 [ 418.366697][ T7025] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 418.380876][ T7029] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 418.392906][ T7025] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.401937][ T7025] usb 1-1: Product: syz [ 418.407155][ T7029] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 418.407168][ T7025] usb 1-1: Manufacturer: syz [ 418.407185][ T7025] usb 1-1: SerialNumber: syz [ 418.407204][ T7029] usb 2-1: Product: syz [ 418.431510][ T7029] usb 2-1: config 0 descriptor?? [ 418.442973][ T7025] usb 1-1: config 0 descriptor?? [ 418.451267][ T7029] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 418.467237][ T7029] usb 2-1: Detected FT232H [ 418.644646][ T7029] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 418.865009][ T7025] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 418.887607][ T7025] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 418.899763][ T7025] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 418.920413][ T7025] usb 1-1: media controller created [ 418.956671][ T7025] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 419.079475][ T7025] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 419.088327][ T7025] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 419.134740][ T7029] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 419.263203][ T7029] usb 2-1: USB disconnect, device number 36 [ 419.315319][ T7030] usb 1-1: USB disconnect, device number 37 [ 419.362334][ T7029] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 419.384971][ T7029] ftdi_sio 2-1:0.0: device disconnected [ 419.448305][ T7030] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 420.517119][T10306] xt_hashlimit: size too large, truncated to 1048576 [ 420.568647][T10307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.871784][T10315] program syz.4.1297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.884504][T10317] binder: 10316:10317 ioctl c0306201 2000000001c0 returned -14 [ 422.070355][ T7025] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 422.220210][ T7025] usb 3-1: Using ep0 maxpacket: 16 [ 422.227375][ T7025] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 422.240946][ T7025] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.252759][ T7025] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.252788][ T7025] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 422.252834][ T7025] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.291910][ T7025] usb 3-1: config 0 descriptor?? [ 422.643811][T10348] __nla_validate_parse: 5 callbacks suppressed [ 422.643879][T10348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1309'. [ 422.681538][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'. [ 422.681624][T10348] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.1309'. [ 422.681679][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1309'. [ 422.709343][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'. [ 422.744057][ T7025] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 422.790815][ T7025] hid-multitouch 0003:0457:07DA.001E: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 422.879718][T10353] program syz.4.1311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.045897][ T7030] usb 3-1: USB disconnect, device number 31 [ 423.370227][ T7029] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 423.520730][ T7029] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 423.523865][ T7029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.551257][ T7029] usb 5-1: config 0 descriptor?? [ 423.568662][ T7029] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 424.372196][ T7029] gspca_stv06xx: I2C: Read error writing address: -71 [ 424.386444][ T7029] usb 5-1: USB disconnect, device number 26 [ 424.451721][T10376] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1319'. [ 424.485216][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'. [ 424.485470][T10376] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.1319'. [ 424.485768][T10376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1319'. [ 424.485797][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'. [ 425.500234][ T7029] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 425.510180][ T7030] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 425.671537][ T7030] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 425.672580][ T7029] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 425.677201][ T7029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 64 [ 425.677309][ T7029] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 425.677452][ T7029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.686778][ T7030] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 425.686842][ T7030] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 425.686945][ T7030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.764069][T10389] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 425.779101][ T7029] usb 5-1: config 0 descriptor?? [ 425.808279][ T7030] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 426.269295][ T7029] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 426.269355][ T7029] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 426.290632][ T7029] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 426.290695][ T7029] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 426.290727][ T7029] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 426.290759][ T7029] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 426.290791][ T7029] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 426.290822][ T7029] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 426.290849][ T7029] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 426.359631][ T7029] hid-multitouch 0003:0457:07DA.001F: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 426.541309][ T7025] usb 2-1: USB disconnect, device number 37 [ 426.551846][ T7029] usb 5-1: USB disconnect, device number 27 [ 426.746178][T10395] fido_id[10395]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 427.568965][T10416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 427.620198][ T5685] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 427.794795][ T5685] usb 3-1: Using ep0 maxpacket: 32 [ 427.805769][ T5685] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 427.816256][ T5685] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 427.816300][ T5685] usb 3-1: config 0 has no interface number 0 [ 427.816349][ T5685] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 427.816384][ T5685] usb 3-1: config 0 interface 85 has no altsetting 0 [ 427.858050][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.858096][ T5685] usb 3-1: Product: syz [ 427.858131][ T5685] usb 3-1: Manufacturer: syz [ 427.858151][ T5685] usb 3-1: SerialNumber: syz [ 427.886293][ T5685] usb 3-1: config 0 descriptor?? [ 428.535739][ T5685] appletouch 3-1:0.85: Geyser mode initialized. [ 428.550919][ T5685] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input24 [ 428.647330][T10439] __nla_validate_parse: 6 callbacks suppressed [ 428.647406][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1335'. [ 428.688764][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1335'. [ 428.688886][T10439] netlink: 1932 bytes leftover after parsing attributes in process `syz.4.1335'. [ 428.688920][T10439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1335'. [ 428.719181][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1335'. [ 428.770756][ T7030] usb 3-1: USB disconnect, device number 32 [ 428.983209][ T7030] appletouch 3-1:0.85: input: appletouch disconnected [ 429.620459][ T7030] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 429.660180][ T5685] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 429.771056][ T7030] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 429.781941][ T7030] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.781992][ T7030] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.782059][ T7030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.818981][ T7030] usb 2-1: config 0 descriptor?? [ 429.826079][ T5685] usb 1-1: Using ep0 maxpacket: 32 [ 429.832050][ T5685] usb 1-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 429.845189][ T5685] usb 1-1: config 0 interface 0 has no altsetting 0 [ 429.866058][ T5685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.866101][ T5685] usb 1-1: Product: syz [ 429.866133][ T5685] usb 1-1: Manufacturer: syz [ 429.866155][ T5685] usb 1-1: SerialNumber: syz [ 429.909692][ T5685] usb 1-1: config 0 descriptor?? [ 430.126299][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.138166][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.156811][ T5685] snd_usb_podhd 1-1:0.0: Line 6 POD HD500X found [ 430.163800][ T5685] snd_usb_podhd 1-1:0.0: set_interface failed [ 430.164081][ T5685] snd_usb_podhd 1-1:0.0: Line 6 POD HD500X now disconnected [ 430.164292][ T5685] snd_usb_podhd 1-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 430.191547][ T5685] usb 1-1: USB disconnect, device number 38 [ 430.236863][T10465] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1343'. [ 430.254166][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1343'. [ 430.263346][T10465] netlink: 1932 bytes leftover after parsing attributes in process `syz.4.1343'. [ 430.273478][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1343'. [ 430.273530][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1343'. [ 430.302637][ T7030] hid_parser_main: 25 callbacks suppressed [ 430.307039][ T7030] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0 [ 430.307463][ T7030] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0 [ 430.339460][ T7030] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0020/input/input25 [ 430.418318][ T7030] cm6533_jd 0003:0D8C:0022.0020: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 430.538984][ T7030] usb 2-1: USB disconnect, device number 38 [ 430.651133][ T7029] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 430.749498][T10468] fido_id[10468]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 430.817172][ T7029] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=cc.da [ 430.826741][ T7029] usb 1-1: config 0 interface 0 has no altsetting 0 [ 430.842256][ T7029] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.842318][ T7029] usb 1-1: Product: syz [ 430.842374][ T7029] usb 1-1: Manufacturer: syz [ 430.842425][ T7029] usb 1-1: SerialNumber: syz [ 430.872699][ T7029] usb 1-1: config 0 descriptor?? [ 431.118723][ T7029] flexcop_usb: set interface failed. [ 431.118825][ T7029] b2c2_flexcop_usb 1-1:0.0: probe with driver b2c2_flexcop_usb failed with error -71 [ 431.157433][ T7029] usb 1-1: USB disconnect, device number 39 [ 431.700256][ T5685] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 431.741497][ T7025] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 431.860401][ T5685] usb 2-1: Using ep0 maxpacket: 8 [ 431.866556][ T5685] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 431.877872][ T5685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 431.877932][ T5685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024 [ 431.877981][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.914594][ T7025] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 431.925156][ T7025] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.925200][ T7025] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 431.925263][ T7025] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.958518][ T5685] usb 2-1: config 0 descriptor?? [ 431.975453][ T7025] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 432.145137][T10494] gre1: entered allmulticast mode [ 432.186352][ T5685] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 432.443112][ T7029] usb 2-1: USB disconnect, device number 39 [ 432.740195][ T7022] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 432.871797][ T7022] usb 1-1: device descriptor read/64, error -71 [ 433.117642][ T7022] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 433.250289][ T7022] usb 1-1: device descriptor read/64, error -71 [ 433.361374][ T7022] usb usb1-port1: attempt power cycle [ 433.720240][ T7022] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 433.740970][ T7022] usb 1-1: device descriptor read/8, error -71 [ 433.751538][T10538] __nla_validate_parse: 13 callbacks suppressed [ 433.751589][T10538] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1360'. [ 433.773755][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 433.782053][T10538] netlink: 1932 bytes leftover after parsing attributes in process `syz.4.1360'. [ 433.782105][T10538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1360'. [ 433.783365][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 433.963798][ T7025] usb 3-1: USB disconnect, device number 33 [ 433.978373][ T7025] idmouse 3-1:1.0: disconnected [ 433.982229][ T7022] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 434.002470][ T7022] usb 1-1: device descriptor read/8, error -71 [ 434.111126][ T7022] usb usb1-port1: unable to enumerate USB device [ 434.252050][T10545] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 434.704469][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'. [ 434.796325][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'. [ 434.796380][T10553] netlink: 1932 bytes leftover after parsing attributes in process `syz.1.1367'. [ 434.798062][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1367'. [ 435.431373][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'. [ 436.551257][ T5685] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 436.711638][ T5685] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 436.723242][ T5685] usb 2-1: config 0 interface 0 has no altsetting 0 [ 436.730285][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.744542][ T5685] usb 2-1: config 0 descriptor?? [ 437.173511][ T5685] ryos 0003:1E7D:3232.0021: unknown main item tag 0x0 [ 437.186895][ T5685] ryos 0003:1E7D:3232.0021: unknown main item tag 0x0 [ 437.186963][ T5685] ryos 0003:1E7D:3232.0021: unknown main item tag 0x3 [ 437.186994][ T5685] ryos 0003:1E7D:3232.0021: unknown main item tag 0x0 [ 437.187023][ T5685] ryos 0003:1E7D:3232.0021: unknown main item tag 0x0 [ 437.187052][ T5685] ryos 0003:1E7D:3232.0021: unknown main item tag 0x0 [ 437.187082][ T5685] ryos 0003:1E7D:3232.0021: unknown main item tag 0x0 [ 437.187111][ T5685] ryos 0003:1E7D:3232.0021: unknown main item tag 0x0 [ 437.187141][ T5685] ryos 0003:1E7D:3232.0021: unknown main item tag 0x0 [ 437.187170][ T5685] ryos 0003:1E7D:3232.0021: unknown main item tag 0x0 [ 437.187229][ T5685] ryos 0003:1E7D:3232.0021: item fetching failed at offset 14/44 [ 437.230437][ T5685] ryos 0003:1E7D:3232.0021: parse failed [ 437.230519][ T5685] ryos 0003:1E7D:3232.0021: probe with driver ryos failed with error -22 [ 437.345904][T10620] coredump: 1001(syz.4.1391): Core dump to core aborted: cannot preserve file permissions [ 437.378218][ T5685] usb 2-1: USB disconnect, device number 40 [ 437.780314][ T7022] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 437.817496][T10640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.910346][ T7022] usb 3-1: device descriptor read/64, error -71 [ 438.150361][ T7022] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 438.281334][ T7022] usb 3-1: device descriptor read/64, error -71 [ 438.393110][ T7022] usb usb3-port1: attempt power cycle [ 438.741203][ T7022] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 438.763271][ T7022] usb 3-1: device descriptor read/8, error -71 [ 439.000460][ T7022] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 439.020934][ T7022] usb 3-1: device descriptor read/8, error -71 [ 439.131167][ T7022] usb usb3-port1: unable to enumerate USB device [ 439.355863][T10672] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 439.736224][ T32] kauditd_printk_skb: 136 callbacks suppressed [ 439.736272][ T32] audit: type=1800 audit(1788041445.260:574): pid=10685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1406" name="bus" dev="tmpfs" ino=1444 res=0 errno=0 [ 440.080193][ T5685] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 440.092903][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.092982][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.221806][ T7025] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 440.250365][ T5685] usb 5-1: Using ep0 maxpacket: 32 [ 440.271857][ T5685] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 440.282821][ T5685] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 440.294523][ T5685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 440.294559][ T5685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 440.294585][ T5685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 440.294613][ T5685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 440.343158][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.343204][ T5685] usb 5-1: Product: syz [ 440.343240][ T5685] usb 5-1: Manufacturer: syz [ 440.343260][ T5685] usb 5-1: SerialNumber: syz [ 440.382805][ T7025] usb 1-1: Using ep0 maxpacket: 16 [ 440.388864][ T7025] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 440.403883][ T7025] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 440.403936][ T7025] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 440.430168][ T5685] usb 5-1: config 0 descriptor?? [ 440.451253][ T7025] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.451300][ T7025] usb 1-1: Product: syz [ 440.451333][ T7025] usb 1-1: Manufacturer: syz [ 440.451352][ T7025] usb 1-1: SerialNumber: syz [ 440.492719][ T7025] usb 1-1: config 0 descriptor?? [ 440.507845][ T7025] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 440.518064][ T7025] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 440.630908][T10706] : renamed from bridge_slave_0 [ 440.845899][ T5685] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 440.846052][ T5685] input input26: Device does not respond to id packet M [ 440.860373][ T5685] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 440.860439][ T5685] input input26: Device does not respond to id packet P [ 440.876718][ T5685] input input26: Device does not respond to id packet B [ 441.077009][ T5685] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 441.077082][ T5685] input input26: Device does not respond to id packet N [ 441.083865][ T5685] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 441.091965][ T5685] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 441.098313][ T5685] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 441.112061][ T5685] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 441.130466][ T5685] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input26 [ 441.147489][ T7025] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 441.158323][ T7025] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 441.179594][ T5685] usb 5-1: USB disconnect, device number 28 [ 441.369138][ T7025] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 441.369183][ T7025] em28xx 1-1:0.0: No AC97 audio processor [ 441.405892][ T7025] usb 1-1: USB disconnect, device number 44 [ 441.415819][ T7025] em28xx 1-1:0.0: Disconnecting em28xx [ 441.441946][ T7025] em28xx: Freeing device [ 442.090710][ T7022] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 442.098564][ T5685] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 442.241180][ T7022] usb 3-1: Using ep0 maxpacket: 32 [ 442.242781][ T7022] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 442.246000][ T7022] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 442.246069][ T7022] usb 3-1: config 0 has no interface number 0 [ 442.246195][ T7022] usb 3-1: config 0 interface 184 has no altsetting 0 [ 442.252472][ T7022] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.252541][ T7022] usb 3-1: Product: syz [ 442.252592][ T7022] usb 3-1: Manufacturer: syz [ 442.252636][ T7022] usb 3-1: SerialNumber: syz [ 442.286591][ T7022] usb 3-1: config 0 descriptor?? [ 442.287180][ T5685] usb 2-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 442.319688][ T5685] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 442.319740][ T5685] usb 2-1: config 0 has no interface number 0 [ 442.319796][ T5685] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 442.319839][ T5685] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 442.319873][ T5685] usb 2-1: config 0 interface 255 has no altsetting 0 [ 442.369749][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.377975][ T5685] usb 2-1: Product: syz [ 442.377994][ T5685] usb 2-1: Manufacturer: syz [ 442.387161][ T5685] usb 2-1: SerialNumber: syz [ 442.395624][ T5685] usb 2-1: config 0 descriptor?? [ 442.403358][ T7029] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 442.416620][ T5685] ftdi_sio 2-1:0.255: FTDI USB Serial Device converter detected [ 442.426936][ T5685] ftdi_sio ttyUSB0: unknown device type: 0x223 [ 442.530181][ T7029] usb 5-1: device descriptor read/64, error -71 [ 442.619493][ T7030] usb 2-1: USB disconnect, device number 41 [ 442.636914][ T7030] ftdi_sio 2-1:0.255: device disconnected [ 442.770185][ T7029] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 442.910179][ T7029] usb 5-1: device descriptor read/64, error -71 [ 443.020722][ T7029] usb usb5-port1: attempt power cycle [ 443.380334][ T7029] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 443.401644][ T7029] usb 5-1: device descriptor read/8, error -71 [ 443.477304][T10759] __nla_validate_parse: 12 callbacks suppressed [ 443.477454][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 443.513948][ T7022] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 443.513999][ T7022] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 443.536663][ T7022] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 443.536712][ T7022] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 443.537577][ T7022] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 443.537620][ T7022] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 443.542647][ T7022] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 443.599822][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 443.599881][T10759] netlink: 1932 bytes leftover after parsing attributes in process `syz.1.1426'. [ 443.602655][T10759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1426'. [ 443.605034][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 443.635676][ T7022] usb 3-1: USB disconnect, device number 38 [ 443.670221][ T7029] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 443.704346][ T7029] usb 5-1: device descriptor read/8, error -71 [ 443.810474][ T7029] usb usb5-port1: unable to enumerate USB device [ 444.318770][T10765] binder: 10764:10765 ioctl c0306201 200000000480 returned -14 [ 445.004505][T10777] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1431'. [ 445.154243][T10779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.035443][T10794] bridge0: port 3(veth0) entered blocking state [ 446.043217][T10794] bridge0: port 3(veth0) entered disabled state [ 446.043515][T10794] veth0: entered allmulticast mode [ 446.061387][T10794] veth0: entered promiscuous mode [ 446.174094][T10774] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1430'. [ 446.496964][T10800] netlink: Only one type of NAT may be specified [ 446.497004][T10800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.925461][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 447.019212][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 447.037420][T10807] netlink: 1932 bytes leftover after parsing attributes in process `syz.2.1438'. [ 448.510642][T10831] __nla_validate_parse: 4 callbacks suppressed [ 448.518507][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1444'. [ 448.522817][T10831] netlink: 1932 bytes leftover after parsing attributes in process `syz.3.1444'. [ 448.528987][T10831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1444'. [ 448.529030][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1444'. [ 448.927383][T10836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1446'. [ 448.955489][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1446'. [ 448.965041][T10836] netlink: 1932 bytes leftover after parsing attributes in process `syz.4.1446'. [ 448.965091][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1446'. [ 448.965117][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1446'. [ 450.707138][T10863] loop8: detected capacity change from 0 to 7 [ 450.718509][T10863] Dev loop8: unable to read RDB block 7 [ 450.718647][T10863] loop8: unable to read partition table [ 450.719252][T10863] loop8: partition table beyond EOD, truncated [ 450.719360][T10863] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 451.464579][T10855] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1454'. [ 451.584340][T10886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.475171][T10924] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 454.524228][T10924] kvm_intel: kvm [10923]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x660b [ 454.527777][T10924] kvm [10923]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x2a06 [ 454.535644][T10924] kvm [10923]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x262e [ 454.620190][ T5685] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 454.772909][ T5685] usb 2-1: unable to get BOS descriptor or descriptor too short [ 454.772974][ T5685] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 454.776745][ T5685] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 454.787137][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.787238][ T5685] usb 2-1: Product: syz [ 454.787279][ T5685] usb 2-1: Manufacturer: syz [ 454.787319][ T5685] usb 2-1: SerialNumber: syz [ 455.021659][ T5685] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 455.123009][T10933] __nla_validate_parse: 6 callbacks suppressed [ 455.129375][T10933] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1482'. [ 455.222134][ T5685] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 455.222192][ T5685] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 455.644058][ T5685] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 455.644119][ T5685] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 455.851721][ T5685] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 455.947641][ T5685] usb 2-1: USB disconnect, device number 42 [ 456.005336][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.171374][ T7025] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 456.320160][ T7025] usb 5-1: Using ep0 maxpacket: 16 [ 456.325915][ T7025] usb 5-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 456.341377][ T7025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.341433][ T7025] usb 5-1: Product: syz [ 456.341467][ T7025] usb 5-1: Manufacturer: syz [ 456.341519][ T7025] usb 5-1: SerialNumber: syz [ 456.597633][ T7025] usb 5-1: 1:1 : bogus bTerminalLink 9 [ 456.598376][ T7025] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 456.599503][ T7025] usb 5-1: unit 0 not found! [ 456.603321][ T7025] usb 5-1: unable to issue vendor read request (ret = -71) [ 456.604835][ T7025] usb 5-1: unable to issue vendor read request (ret = -71) [ 456.614284][ T7025] usb 5-1: unable to issue vendor read request (ret = -71) [ 456.616142][ T7025] usb 5-1: unable to issue vendor read request (ret = -71) [ 456.720411][ T5685] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 456.755621][ T7025] usb 5-1: USB disconnect, device number 33 [ 456.873007][ T5685] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 456.878566][ T5685] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 456.878622][ T5685] usb 2-1: config 1 has no interface number 0 [ 456.907339][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.907392][ T5685] usb 2-1: Product: syz [ 456.907409][ T5685] usb 2-1: Manufacturer: syz [ 456.907424][ T5685] usb 2-1: SerialNumber: syz [ 456.945253][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.973890][ T5685] usb 2-1: 3:1 : does not exist [ 456.973944][ T5685] usb 2-1: 3:2 : does not exist [ 457.199714][T10939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.200147][T10939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.243308][ T7022] usb 2-1: USB disconnect, device number 43 [ 457.424689][T10950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1489'. [ 457.490476][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1489'. [ 457.499609][T10950] netlink: 1932 bytes leftover after parsing attributes in process `syz.3.1489'. [ 457.509093][T10950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1489'. [ 457.509152][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1489'. [ 457.662763][T10943] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1487'. [ 457.665492][T10957] usb usb7: usbfs: process 10957 (syz.0.1491) did not claim interface 0 before use [ 457.667991][T10957] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 458.660361][ T5685] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 458.824947][ T5685] usb 5-1: unable to get BOS descriptor or descriptor too short [ 458.833358][ T5685] usb 5-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 458.840662][ T5685] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.859503][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.859563][ T5685] usb 5-1: Product: syz [ 458.860806][ T5685] usb 5-1: Manufacturer: syz [ 458.860850][ T5685] usb 5-1: SerialNumber: syz [ 459.150831][ T5685] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 459.151964][ T5685] usb 5-1: 2:1 : bogus bTerminalLink 3 [ 459.246930][ T5685] usb 5-1: USB disconnect, device number 34 [ 459.332705][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.404978][T10983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1500'. [ 459.475424][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1500'. [ 459.475471][T10983] netlink: 1932 bytes leftover after parsing attributes in process `syz.2.1500'. [ 459.812452][T10987] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 459.993942][T10987] kvm_intel: kvm [10986]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x660b [ 460.012445][T10987] kvm [10986]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x2a06 [ 460.024360][T10987] kvm [10986]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x262e [ 460.091590][ T5685] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 460.255494][ T5685] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 460.259106][ T5685] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 460.259186][ T5685] usb 5-1: config 0 interface 0 has no altsetting 0 [ 460.285958][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 460.286012][ T5685] usb 5-1: Product: syz [ 460.286106][ T5685] usb 5-1: Manufacturer: syz [ 460.286155][ T5685] usb 5-1: SerialNumber: syz [ 460.315824][ T5685] usb 5-1: config 0 descriptor?? [ 460.322675][T10991] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 460.349561][ T5685] usb 5-1: selecting invalid altsetting 0 [ 460.607002][T10991] usb 5-1: BOGUS urb xfer, pipe 0 != type 3 [ 461.106615][T11013] __nla_validate_parse: 2 callbacks suppressed [ 461.106682][T11013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1509'. [ 461.235449][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'. [ 461.244841][T11013] netlink: 1932 bytes leftover after parsing attributes in process `syz.3.1509'. [ 461.255216][T11013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1509'. [ 461.264948][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'. [ 461.840508][ T5685] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 461.979734][T11008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1508'. [ 461.990226][ T5685] usb 1-1: Using ep0 maxpacket: 32 [ 461.995944][ T5685] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 462.010252][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.025148][ T5685] usb 1-1: config 0 descriptor?? [ 462.057966][ T5685] as10x_usb: device has been detected [ 462.066295][ T5685] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 462.112331][ T5685] usb 1-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 462.139879][ T5685] as10x_usb: error during firmware upload part1 [ 462.147159][ T5685] Registered device nBox DVB-T Dongle [ 462.266806][ T5685] usb 1-1: USB disconnect, device number 45 [ 462.361657][ T5685] Unregistered device nBox DVB-T Dongle [ 462.367992][ T5685] as10x_usb: device has been disconnected [ 462.500027][ T7025] usb 5-1: USB disconnect, device number 35 [ 463.092053][ T7025] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 463.271455][ T7025] usb 3-1: Using ep0 maxpacket: 8 [ 463.273295][ T7025] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 463.279738][ T7025] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 463.279905][ T7025] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 463.279975][ T7025] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 463.281005][ T7025] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 463.281076][ T7025] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.281258][ T7025] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.419357][T11038] syz_tun: entered allmulticast mode [ 463.463975][T11037] syz_tun: left allmulticast mode [ 463.560820][ T7025] usb 3-1: usb_control_msg returned -32 [ 463.560901][ T7025] usbtmc 3-1:16.0: can't read capabilities [ 463.711407][T11042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.886607][ T7022] usb 3-1: USB disconnect, device number 39 [ 463.898459][T11028] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 464.290291][ T7029] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 464.450411][ T7029] usb 5-1: Using ep0 maxpacket: 32 [ 464.459149][ T7029] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 464.472059][ T7029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.483949][ T7029] usb 5-1: config 0 descriptor?? [ 464.502914][ T7029] gspca_main: sq930x-2.14.0 probing 041e:403c [ 464.784061][T11055] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1522'. [ 464.909982][T11061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1523'. [ 464.999833][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1523'. [ 465.007529][T11061] netlink: 1932 bytes leftover after parsing attributes in process `syz.2.1523'. [ 465.125017][T11063] program syz.0.1524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.780422][ T7029] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 465.781528][ T7029] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 465.798326][ T7029] usb 5-1: USB disconnect, device number 36 [ 466.402307][ T7029] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 466.570702][ T7029] usb 1-1: Using ep0 maxpacket: 8 [ 466.577225][ T7029] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 466.594885][ T7029] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 466.594952][ T7029] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 466.594996][ T7029] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 466.595040][ T7029] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 466.595069][ T7029] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.595118][ T7029] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.721643][ T5685] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 466.871149][ T5685] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 466.874275][ T5685] usb 5-1: config 0 has no interfaces? [ 466.894157][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.894218][ T5685] usb 5-1: Product: syz [ 466.894252][ T5685] usb 5-1: Manufacturer: syz [ 466.894310][ T5685] usb 5-1: SerialNumber: syz [ 466.919995][ T5685] usb 5-1: config 0 descriptor?? [ 466.930939][ T7029] usb 1-1: usb_control_msg returned -32 [ 466.931022][ T7029] usbtmc 1-1:16.0: can't read capabilities [ 467.210177][T11084] usbtmc 1-1:16.0: INITIATE_CLEAR returned 0 [ 467.220594][ T5685] usb 5-1: USB disconnect, device number 37 [ 467.405847][ T7025] usb 1-1: USB disconnect, device number 46 [ 467.691976][T11110] ip6gre1: entered promiscuous mode [ 467.692026][T11110] ip6gre1: entered allmulticast mode [ 467.709832][T11110] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.161857][ T7029] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 468.333406][ T7029] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 468.345226][ T7029] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 468.345259][ T7029] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 468.368715][ T7029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.368745][ T7029] usb 3-1: Product: syz [ 468.368791][ T7029] usb 3-1: Manufacturer: syz [ 468.368811][ T7029] usb 3-1: SerialNumber: syz [ 468.627242][ T7029] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 468.762735][T11134] __nla_validate_parse: 2 callbacks suppressed [ 468.762819][T11134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1538'. [ 468.796035][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'. [ 468.805143][T11134] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.1538'. [ 468.805166][T11134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1538'. [ 468.805188][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'. [ 469.965314][ T7029] usb 3-1: USB disconnect, device number 40 [ 469.989504][ T7029] usblp0: removed [ 470.608725][T11151] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1543'. [ 470.608798][T11151] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1543'. [ 470.910443][T11158] binder: 11157:11158 ioctl 4018620d 0 returned -22 [ 471.506372][T11171] sg_read: process 982 (syz.1.1551) changed security contexts after opening file descriptor, this is not allowed. [ 471.818451][T11154] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1545'. [ 472.037670][T11180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1553'. [ 472.120412][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'. [ 473.719382][T11198] program syz.2.1559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.084711][T11207] __nla_validate_parse: 3 callbacks suppressed [ 474.084780][T11207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1561'. [ 474.141917][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'. [ 474.141963][T11207] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.1561'. [ 474.150421][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1561'. [ 474.168772][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'. [ 475.611178][ T7029] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 475.770348][ T7029] usb 3-1: Using ep0 maxpacket: 32 [ 475.777395][ T7029] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 475.791210][ T7029] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 475.791256][ T7029] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.791304][ T7029] usb 3-1: config 0 has no interface number 0 [ 475.791350][ T7029] usb 3-1: config 0 interface 239 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 475.791390][ T7029] usb 3-1: config 0 interface 239 has no altsetting 0 [ 475.840671][ T7029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.849070][ T7029] usb 3-1: Product: syz [ 475.853475][ T7029] usb 3-1: Manufacturer: syz [ 475.858187][ T7029] usb 3-1: SerialNumber: syz [ 475.876254][ T7029] usb 3-1: config 0 descriptor?? [ 476.029140][T11246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1571'. [ 476.097539][T11233] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1568'. [ 476.101115][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1571'. [ 476.101177][T11246] netlink: 1932 bytes leftover after parsing attributes in process `syz.3.1571'. [ 476.102320][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1571'. [ 476.874456][ T7029] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 477.030455][ T7029] usb 1-1: Using ep0 maxpacket: 32 [ 477.039388][ T7029] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 477.056996][ T7029] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.057043][ T7029] usb 1-1: config 0 has no interfaces? [ 477.057092][ T7029] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.093249][ T7029] usb 1-1: config 0 descriptor?? [ 477.425142][ T7029] usb 1-1: USB disconnect, device number 47 [ 477.442407][T11266] program syz.1.1575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 478.128678][T11276] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 478.439316][ T7029] usb 3-1: USB disconnect, device number 41 [ 479.480396][T11302] program syz.2.1587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.320195][ T7025] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 480.471022][ T7025] usb 5-1: Using ep0 maxpacket: 32 [ 480.477092][ T7025] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 480.490245][ T7025] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 480.490303][ T7025] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 480.490341][ T7025] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 480.490390][ T7025] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 480.490415][ T7025] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 480.490445][ T7025] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 480.490500][ T7025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.566555][ T7025] usb 5-1: config 0 descriptor?? [ 480.702467][ T7029] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 480.795684][ T7025] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 480.851070][ T7029] usb 2-1: Using ep0 maxpacket: 32 [ 480.854249][ T7029] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 480.878873][ T7029] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 480.878951][ T7029] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.878974][ T7029] usb 2-1: config 0 has no interface number 0 [ 480.879103][ T7029] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 480.879185][ T7029] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid wMaxPacketSize 0 [ 480.879255][ T7029] usb 2-1: config 0 interface 239 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 480.879350][ T7029] usb 2-1: config 0 interface 239 has no altsetting 0 [ 480.915205][ T7029] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.915235][ T7029] usb 2-1: Product: syz [ 480.915250][ T7029] usb 2-1: Manufacturer: syz [ 480.915265][ T7029] usb 2-1: SerialNumber: syz [ 480.957862][ T7029] usb 2-1: config 0 descriptor?? [ 480.976490][T11320] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 481.200682][T11320] __nla_validate_parse: 6 callbacks suppressed [ 481.200816][T11320] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1591'. [ 481.358709][T11342] xt_hashlimit: size too large, truncated to 1048576 [ 481.586559][ T7029] usb 5-1: USB disconnect, device number 38 [ 481.645077][ T7029] usblp0: removed [ 481.849348][T11356] usb usb7: usbfs: process 11356 (syz.3.1601) did not claim interface 0 before use [ 481.855888][T11356] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 482.025156][T11359] program syz.0.1602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 482.340515][ T7029] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 482.414578][T11372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1606'. [ 482.432464][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'. [ 482.432506][T11372] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.1606'. [ 482.441891][T11372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1606'. [ 482.443359][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'. [ 482.512170][ T7029] usb 5-1: Using ep0 maxpacket: 16 [ 482.526489][ T7029] usb 5-1: unable to get BOS descriptor or descriptor too short [ 482.526568][ T7029] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 482.532290][ T7029] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 482.545242][ T7029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.545312][ T7029] usb 5-1: Product: syz [ 482.545355][ T7029] usb 5-1: Manufacturer: syz [ 482.545380][ T7029] usb 5-1: SerialNumber: syz [ 482.804706][ T7029] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 482.806099][ T7029] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 483.202545][ T7029] usb 5-1: 2:1 : bogus bTerminalLink 6 [ 483.395856][ T7025] usb 2-1: USB disconnect, device number 44 [ 483.572602][ T7029] usb 5-1: USB disconnect, device number 39 [ 483.714177][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.781457][T11379] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 483.921892][T11379] kvm_intel: kvm [11378]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x660b [ 483.936914][T11379] kvm [11378]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x2a06 [ 483.957535][T11379] kvm [11378]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x262e [ 484.492271][T11397] program syz.2.1615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 484.745023][T11411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1619'. [ 484.772352][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1619'. [ 484.772448][T11411] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.1619'. [ 484.776147][T11411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1619'. [ 485.050158][ T7029] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 485.201078][ T7029] usb 2-1: Using ep0 maxpacket: 32 [ 485.204954][ T7029] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 485.211710][ T7029] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 485.211780][ T7029] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.211831][ T7029] usb 2-1: config 0 has no interface number 0 [ 485.211943][ T7029] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 485.212005][ T7029] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid wMaxPacketSize 0 [ 485.212066][ T7029] usb 2-1: config 0 interface 239 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 485.212147][ T7029] usb 2-1: config 0 interface 239 has no altsetting 0 [ 485.263730][ T7029] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.263814][ T7029] usb 2-1: Product: syz [ 485.263861][ T7029] usb 2-1: Manufacturer: syz [ 485.263903][ T7029] usb 2-1: SerialNumber: syz [ 485.304219][ T7029] usb 2-1: config 0 descriptor?? [ 485.314153][T11413] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 487.528147][T11462] __nla_validate_parse: 2 callbacks suppressed [ 487.528920][T11462] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1632'. [ 487.602423][ T7025] usb 2-1: USB disconnect, device number 45 [ 487.611806][ T7029] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 487.647076][T11464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.766869][ T7029] usb 5-1: unable to get BOS descriptor or descriptor too short [ 487.768366][ T7029] usb 5-1: not running at top speed; connect to a high speed hub [ 487.768452][ T7029] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 487.798407][ T7029] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 487.798481][ T7029] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 487.798505][ T7029] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 487.798553][ T7029] usb 5-1: config 14 has no interface number 0 [ 487.798613][ T7029] usb 5-1: config 14 has no interface number 1 [ 487.798820][ T7029] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 487.798909][ T7029] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 487.799000][ T7029] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 487.799073][ T7029] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.799221][ T7029] usb 5-1: config 14 interface 57 has no altsetting 0 [ 487.799270][ T7029] usb 5-1: config 14 interface 228 has no altsetting 0 [ 487.823075][ T7029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.823155][ T7029] usb 5-1: Product: syz [ 487.823195][ T7029] usb 5-1: Manufacturer: syz [ 487.823236][ T7029] usb 5-1: SerialNumber: syz [ 487.969840][T11466] program syz.1.1633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 488.352991][ T7029] legousbtower 5-1:14.57: interrupt endpoints not found [ 488.436812][T11477] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 488.508876][T11457] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1630'. [ 488.568429][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1637'. [ 488.647109][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1637'. [ 488.647822][T11481] netlink: 1932 bytes leftover after parsing attributes in process `syz.1.1637'. [ 488.666402][T11481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1637'. [ 488.763904][ T7029] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 488.803261][ T7029] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 489.387387][T11489] usb 5-1: Couldn't submit interrupt_in_urb -90 [ 489.590850][ T7025] usb 5-1: USB disconnect, device number 40 [ 489.652624][ T7025] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 489.713301][T11495] syz_tun: entered allmulticast mode [ 489.726190][T11493] syz_tun: left allmulticast mode [ 490.284691][T11508] program syz.1.1645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.330916][ T7029] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 490.472562][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1647'. [ 490.490184][ T7029] usb 3-1: Using ep0 maxpacket: 32 [ 490.491875][ T7029] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 490.507198][ T7029] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 490.507259][ T7029] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.507281][ T7029] usb 3-1: config 0 has no interface number 0 [ 490.507415][ T7029] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 490.507488][ T7029] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid wMaxPacketSize 0 [ 490.507549][ T7029] usb 3-1: config 0 interface 239 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 490.507620][ T7029] usb 3-1: config 0 interface 239 has no altsetting 0 [ 490.540006][ T7029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.540271][ T7029] usb 3-1: Product: syz [ 490.540312][ T7029] usb 3-1: Manufacturer: syz [ 490.540352][ T7029] usb 3-1: SerialNumber: syz [ 490.610261][ T7029] usb 3-1: config 0 descriptor?? [ 490.615899][T11503] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 490.646957][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1647'. [ 490.658073][T11524] netlink: 1932 bytes leftover after parsing attributes in process `syz.3.1647'. [ 490.658095][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1647'. [ 492.258571][T11555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 492.622051][T11567] __nla_validate_parse: 6 callbacks suppressed [ 492.622102][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1661'. [ 492.622123][T11567] netlink: 1932 bytes leftover after parsing attributes in process `syz.3.1661'. [ 492.622142][T11567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1661'. [ 493.007634][ T5685] usb 3-1: USB disconnect, device number 42 [ 493.110182][ T7025] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 493.262555][ T7025] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 493.266797][ T7025] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.266891][ T7025] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.266969][ T7025] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 493.267173][ T7025] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.335822][ T7025] usb 1-1: config 0 descriptor?? [ 493.577706][T11571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.590698][T11571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.862687][ T7025] usbhid 1-1:0.0: can't add hid device: -71 [ 493.862932][ T7025] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 493.893833][T11587] kvm [11586]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x10000000001780 [ 493.918362][ T7025] usb 1-1: USB disconnect, device number 48 [ 494.294632][T11598] xt_hashlimit: size too large, truncated to 1048576 [ 494.741592][T11608] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1677'. [ 494.875953][T11611] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1668'. [ 494.937609][T11610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1677'. [ 496.783661][T11628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1682'. [ 496.809100][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1682'. [ 496.809370][T11628] netlink: 1932 bytes leftover after parsing attributes in process `syz.4.1682'. [ 496.809408][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1682'. [ 498.254569][T11645] __nla_validate_parse: 2 callbacks suppressed [ 498.254637][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 498.354307][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 498.354356][T11647] netlink: 1932 bytes leftover after parsing attributes in process `syz.4.1686'. [ 498.354390][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1686'. [ 498.354415][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 498.360567][ T5685] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 498.510664][ T5685] usb 3-1: Using ep0 maxpacket: 32 [ 498.516468][ T5685] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 498.530841][ T5685] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 498.530909][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 498.530937][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 498.531027][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 498.531108][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 498.573904][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.573988][ T5685] usb 3-1: Product: syz [ 498.574031][ T5685] usb 3-1: Manufacturer: syz [ 498.574067][ T5685] usb 3-1: SerialNumber: syz [ 498.618884][ T5685] usb 3-1: config 0 descriptor?? [ 499.037401][ T5685] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 499.037480][ T5685] input input27: Device does not respond to id packet M [ 499.056342][ T5685] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 499.056415][ T5685] input input27: Device does not respond to id packet P [ 499.071750][ T5685] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 499.071833][ T5685] input input27: Device does not respond to id packet B [ 499.086228][ T5685] input input27: Limiting number of effects to 32 (device reports 230) [ 499.240606][ T7022] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 499.294898][ T5685] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 499.296862][ T5685] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 499.298269][ T5685] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 499.304184][ T5685] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 499.332954][ T5685] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input27 [ 499.391280][ T5685] usb 3-1: USB disconnect, device number 43 [ 499.420160][ T7022] usb 1-1: Using ep0 maxpacket: 8 [ 499.428784][ T7022] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 499.442393][ T7022] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 499.452509][ T7022] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 499.467698][ T7022] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 499.467741][ T7022] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 499.467763][ T7022] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 499.467802][ T7022] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.767688][ T7022] usb 1-1: usb_control_msg returned -32 [ 499.773800][ T7022] usbtmc 1-1:16.0: can't read capabilities [ 500.085509][T11654] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 500.092200][T11663] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 500.104210][ T5685] usb 1-1: USB disconnect, device number 49 [ 500.130678][ T7022] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 500.280290][ T7022] usb 5-1: Using ep0 maxpacket: 16 [ 500.286222][ T7022] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 500.299703][ T7022] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.299759][ T7022] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.299802][ T7022] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 500.299852][ T7022] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.353504][ T7022] usb 5-1: config 0 descriptor?? [ 500.813080][ T7022] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0022/input/input28 [ 500.858019][ T7022] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 501.066902][ T7022] usb 5-1: USB disconnect, device number 41 [ 501.432557][T11668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1694'. [ 501.531487][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.531565][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.823829][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1701'. [ 501.877594][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1701'. [ 501.888009][T11692] netlink: 1932 bytes leftover after parsing attributes in process `syz.4.1701'. [ 501.897473][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1701'. [ 503.721219][ T7022] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 503.882128][ T7022] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 503.893845][ T7022] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 503.903374][ T7022] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.913672][ T7022] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 503.913710][ T7022] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.946380][ T7022] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 503.954497][ T7022] usb 2-1: Product: syz [ 503.958783][ T7022] usb 2-1: Manufacturer: syz [ 503.971434][ T7022] cdc_wdm 2-1:1.0: skipping garbage [ 503.976813][ T7022] cdc_wdm 2-1:1.0: skipping garbage [ 504.000756][ T7022] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 504.007164][ T7022] cdc_wdm 2-1:1.0: Unknown control protocol [ 504.273413][T11727] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 504.713000][T11738] __nla_validate_parse: 1 callbacks suppressed [ 504.713061][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1716'. [ 504.770247][ T7022] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 504.811559][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1716'. [ 504.811726][T11738] netlink: 1932 bytes leftover after parsing attributes in process `syz.4.1716'. [ 504.813640][T11738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1716'. [ 504.834580][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1716'. [ 504.931753][ T7022] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 504.942694][ T7022] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.942738][ T7022] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.963864][ T7022] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 504.963907][ T7022] usb 3-1: SerialNumber: syz [ 505.097204][T11745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1718'. [ 505.097279][T11745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1718'. [ 505.231914][ T7022] usb 3-1: 0:2 : does not exist [ 505.356873][ T7022] usb 3-1: USB disconnect, device number 44 [ 505.462468][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.490704][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 506.490861][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 506.491119][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 506.491140][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 506.491342][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 506.491364][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 506.493555][ T5685] usb 2-1: USB disconnect, device number 46 [ 506.498175][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 506.498192][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 506.498203][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 508.240628][T11799] hub 1-0:1.0: USB hub found [ 508.247187][T11799] hub 1-0:1.0: 1 port detected [ 508.383013][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1732'. [ 508.505013][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1732'. [ 508.505061][T11811] netlink: 1932 bytes leftover after parsing attributes in process `syz.3.1732'. [ 511.036203][T11856] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4013772623 (16055090492 ns) > initial count (2788997612 ns). Using initial count to start timer. [ 511.790811][ T5712] kworker/1:7 (5712) used greatest stack depth: 16200 bytes left [ 512.218201][T11881] __nla_validate_parse: 9 callbacks suppressed [ 512.218310][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'. [ 512.345594][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'. [ 512.345637][T11886] netlink: 1932 bytes leftover after parsing attributes in process `syz.1.1755'. [ 512.345675][T11886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1755'. [ 512.345769][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'. [ 512.399356][T11884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1756'. [ 512.447973][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 512.458788][T11884] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.1756'. [ 512.458829][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1756'. [ 512.469331][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 513.459152][T11897] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 514.031094][T11902] ipvlan2: entered allmulticast mode [ 514.031137][T11902] syz_tun: entered allmulticast mode [ 518.170188][ T7022] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 518.322360][ T7022] usb 1-1: unable to get BOS descriptor or descriptor too short [ 518.324086][ T7022] usb 1-1: not running at top speed; connect to a high speed hub [ 518.324164][ T7022] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 518.351906][ T7022] usb 1-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 518.351978][ T7022] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 518.360750][ T7022] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.360808][ T7022] usb 1-1: Product: syz [ 518.360847][ T7022] usb 1-1: Manufacturer: syz [ 518.360882][ T7022] usb 1-1: SerialNumber: syz [ 518.653478][ T7022] usb 1-1: 3:0: cannot get min/max values for control 4 (id 3) [ 518.662547][ T7022] usb 1-1: 3:0: cannot get min/max values for control 5 (id 3) [ 518.668178][ T7022] usb 1-1: 3:0: cannot get min/max values for control 8 (id 3) [ 518.688222][ T7022] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 518.696584][ T7022] usb 1-1: 3:0: cannot get min/max values for control 12 (id 3) [ 518.741104][ T7022] usb 1-1: 3:0: cannot get min/max values for control 5 (id 3) [ 518.791145][ T7022] usb 1-1: USB disconnect, device number 50 [ 518.858045][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.995442][T11982] __nla_validate_parse: 22 callbacks suppressed [ 518.995527][T11982] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1784'. [ 519.549651][T11989] tipc: Resetting bearer [ 519.892744][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'. [ 519.990417][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'. [ 519.999599][T11997] netlink: 1932 bytes leftover after parsing attributes in process `syz.3.1789'. [ 520.009288][T11997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1789'. [ 520.023179][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'. [ 521.417394][T12018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1796'. [ 521.564317][T12021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1796'. [ 521.860651][ T7029] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 522.022065][ T7029] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 522.027083][ T7029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.027174][ T7029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.027281][ T7029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.087397][ T7029] usb 5-1: config 0 descriptor?? [ 522.538391][ T7029] hid_parser_main: 3 callbacks suppressed [ 522.543600][ T7029] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 522.543708][ T7029] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 522.543784][ T7029] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 522.543858][ T7029] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 522.543940][ T7029] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 522.600511][ T7029] playstation 0003:054C:0DF2.0023: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 522.758128][ T7029] playstation 0003:054C:0DF2.0023: Failed to retrieve feature with reportID 9: -32 [ 522.758277][ T7029] playstation 0003:054C:0DF2.0023: Failed to retrieve DualSense pairing info: -32 [ 522.758479][ T7029] playstation 0003:054C:0DF2.0023: Failed to get MAC address from DualSense [ 522.758523][ T7029] playstation 0003:054C:0DF2.0023: Failed to create dualsense. [ 522.844711][ T7029] playstation 0003:054C:0DF2.0023: probe with driver playstation failed with error -32 [ 522.909759][ T7029] usb 5-1: USB disconnect, device number 42 [ 523.841530][ T7025] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 523.921973][T12058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.934188][T12058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.001473][ T7025] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 524.015124][ T7025] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 524.023412][ T7025] usb 1-1: config 1 has no interface number 0 [ 524.036737][ T7025] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.036781][ T7025] usb 1-1: Product: syz [ 524.036843][ T7025] usb 1-1: Manufacturer: syz [ 524.036863][ T7025] usb 1-1: SerialNumber: syz [ 524.090954][ T7025] usb 1-1: 3:1 : does not exist [ 524.096000][ T7025] usb 1-1: 3:2 : does not exist [ 524.372872][ T7025] usb 1-1: USB disconnect, device number 51 [ 524.638624][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'. [ 524.742547][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'. [ 524.742592][T12072] netlink: 1932 bytes leftover after parsing attributes in process `syz.4.1810'. [ 524.742639][T12072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1810'. [ 524.742665][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'. [ 525.491683][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'. [ 525.601926][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'. [ 525.601975][T12092] netlink: 1932 bytes leftover after parsing attributes in process `syz.3.1816'. [ 525.620564][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1816'. [ 525.620594][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'. [ 527.659337][T12122] syzkaller1: entered promiscuous mode [ 527.667445][T12122] syzkaller1: entered allmulticast mode [ 527.879464][T12126] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 529.415082][T12161] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 529.655366][T12161] kvm_intel: kvm [12160]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x660b [ 529.677601][T12161] kvm [12160]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x2a06 [ 529.695320][T12161] kvm [12160]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x262e [ 530.131451][T12179] sctp: [Deprecated]: syz.4.1845 (pid 12179) Use of int in maxseg socket option. [ 530.131451][T12179] Use struct sctp_assoc_value instead [ 530.367500][T12189] __nla_validate_parse: 7 callbacks suppressed [ 530.377279][T12189] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1847'. [ 530.456247][T12192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.521758][T12192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1847'. [ 531.329530][T12209] netlink: 'syz.0.1854': attribute type 10 has an invalid length. [ 531.338185][T12209] syz_tun: entered promiscuous mode [ 531.338857][T12209] tipc: Resetting bearer [ 531.363322][T12209] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 531.516650][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1855'. [ 531.963982][T12217] loop5: detected capacity change from 0 to 7 [ 531.974304][T12217] Dev loop5: unable to read RDB block 7 [ 531.974406][T12217] loop5: AHDI p2 [ 531.974493][T12217] loop5: partition table partially beyond EOD, truncated [ 532.169521][T12221] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1859'. [ 532.475464][T12230] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1862'. [ 532.496473][T12230] netlink: 'syz.1.1862': attribute type 4 has an invalid length. [ 532.713040][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1863'. [ 532.797581][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'. [ 532.831359][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1863'. [ 532.831413][T12243] netlink: 1932 bytes leftover after parsing attributes in process `syz.2.1863'. [ 532.838043][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1863'. [ 534.186403][T12262] kvm: Disabled LAPIC found during irq injection [ 535.131397][T12279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 535.911107][T12289] __nla_validate_parse: 8 callbacks suppressed [ 535.911158][T12289] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1873'. [ 537.302756][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1882'. [ 537.385706][T12308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1882'. [ 537.395262][T12308] netlink: 1932 bytes leftover after parsing attributes in process `syz.3.1882'. [ 537.404651][T12308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1882'. [ 537.414231][T12308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1882'. [ 537.586528][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'. [ 537.775989][T12313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'. [ 537.776039][T12313] netlink: 1932 bytes leftover after parsing attributes in process `syz.2.1883'. [ 537.800989][T12313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1883'. [ 538.747610][T12329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.782758][T12358] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 541.007085][T12375] __nla_validate_parse: 6 callbacks suppressed [ 541.007143][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1900'. [ 541.093450][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1900'. [ 541.093500][T12376] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.1900'. [ 541.093538][T12376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1900'. [ 541.367902][T12380] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1901'. [ 541.474151][T12383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.539352][T12383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1901'. [ 541.846390][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1903'. [ 541.946570][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1903'. [ 541.956447][T12389] netlink: 1932 bytes leftover after parsing attributes in process `syz.1.1903'. [ 541.967722][T12389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1903'. [ 543.280740][ T7029] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 543.361653][T12408] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 543.361716][T12408] ALSA: mixer_oss: invalid index 1374389 [ 543.442814][ T7029] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 543.461888][ T7029] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 543.461943][ T7029] usb 3-1: Product: syz [ 543.461960][ T7029] usb 3-1: SerialNumber: syz [ 543.502000][ T7029] usb 3-1: config 0 descriptor?? [ 543.705288][T12412] netlink: 'syz.0.1910': attribute type 4 has an invalid length. [ 543.777281][ T7029] hso 3-1:0.0: Failed to find BULK eps [ 543.953116][ T7029] usb 3-1: USB disconnect, device number 45 [ 544.080486][T12426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 546.014132][T12454] __nla_validate_parse: 5 callbacks suppressed [ 546.015486][T12454] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1922'. [ 546.041564][T12453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1915'. [ 546.111616][T12455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 546.262254][T12455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1922'. [ 546.592257][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'. [ 546.681150][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'. [ 546.681215][T12464] netlink: 1932 bytes leftover after parsing attributes in process `syz.1.1923'. [ 546.681252][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1923'. [ 547.758518][ T5633] bridge0: port 1(syz_tun) entered disabled state [ 547.840660][ T5633] syz_tun (unregistering): left allmulticast mode [ 547.840703][ T5633] syz_tun (unregistering): left promiscuous mode [ 547.841297][ T5633] bridge0: port 1(syz_tun) entered disabled state [ 548.384167][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.600902][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.826347][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.984541][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 548.997540][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 549.009275][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 549.022844][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 549.025755][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 549.093587][ T4931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 549.098045][ T4931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 549.105049][ T4931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 549.106009][ T4931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 549.106722][ T4931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 549.304718][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.737912][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1937'. [ 549.903111][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1937'. [ 549.904529][T12505] netlink: 1932 bytes leftover after parsing attributes in process `syz.2.1937'. [ 551.136574][T12496] __nla_validate_parse: 12 callbacks suppressed [ 551.136644][T12496] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1939'. [ 551.220221][ T4931] Bluetooth: hci1: command tx timeout [ 551.576297][T12523] input: syz0 as /devices/virtual/input/input29 [ 551.608360][ T50] bond0 (unregistering): Released all slaves [ 551.646616][ T50] bond1 (unregistering): Released all slaves [ 551.766007][ T50] bond2 (unregistering): Released all slaves [ 551.871400][ T7029] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 552.010273][ T7029] usb 3-1: device descriptor read/64, error -71 [ 552.250189][ T7029] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 552.400112][ T7029] usb 3-1: device descriptor read/64, error -71 [ 552.517155][ T7029] usb usb3-port1: attempt power cycle [ 552.850525][ T7029] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 552.873715][ T7029] usb 3-1: device descriptor read/8, error -71 [ 553.120674][ T7029] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 553.154485][ T7029] usb 3-1: device descriptor read/8, error -71 [ 553.262594][ T7029] usb usb3-port1: unable to enumerate USB device [ 553.291081][ T4931] Bluetooth: hci1: command tx timeout [ 553.691468][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 553.769979][T12488] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.770778][T12488] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.771344][T12488] bridge_slave_0: entered allmulticast mode [ 553.776776][T12488] bridge_slave_0: entered promiscuous mode [ 553.871963][T12488] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.872390][T12488] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.872817][T12488] bridge_slave_1: entered allmulticast mode [ 553.898091][T12488] bridge_slave_1: entered promiscuous mode [ 554.185806][ T50] hsr_slave_0: left promiscuous mode [ 554.202566][ T50] hsr_slave_1: left promiscuous mode [ 554.242984][ T50] veth1_macvtap: left promiscuous mode [ 554.249718][ T50] veth0_macvtap: left promiscuous mode [ 554.263632][ T50] veth1_vlan: left promiscuous mode [ 554.270618][ T50] veth0_vlan: left promiscuous mode [ 554.398273][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1952'. [ 554.513305][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1952'. [ 554.515212][T12575] netlink: 1932 bytes leftover after parsing attributes in process `syz.4.1952'. [ 554.515248][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1952'. [ 555.370765][ T4931] Bluetooth: hci1: command tx timeout [ 555.460132][ T7029] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 555.612318][ T7029] usb 3-1: Using ep0 maxpacket: 8 [ 555.778019][ T7029] usb 3-1: unable to get BOS descriptor or descriptor too short [ 555.778102][ T7029] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 555.784244][ T7029] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 555.784343][ T7029] usb 3-1: can't read configurations, error -71 [ 555.839652][T12488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.914238][T12488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.005791][T12488] team0: Port device team_slave_0 added [ 556.015501][T12488] team0: Port device team_slave_1 added [ 556.113067][T12488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.118410][T12488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.118504][T12488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.156745][T12488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.156807][T12488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.156889][T12488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.544642][T12488] hsr_slave_0: entered promiscuous mode [ 556.554257][T12488] hsr_slave_1: entered promiscuous mode [ 557.450213][ T4931] Bluetooth: hci1: command tx timeout [ 557.490152][T12638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1965'. [ 557.600615][ T7025] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 557.663279][T12641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 557.760116][ T7025] usb 5-1: Using ep0 maxpacket: 32 [ 557.766353][ T7025] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 557.777089][ T7025] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 557.777129][ T7025] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.777164][ T7025] usb 5-1: config 0 has no interface number 0 [ 557.777208][ T7025] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 557.777237][ T7025] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 557.777266][ T7025] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 557.777294][ T7025] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 557.777323][ T7025] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 557.777350][ T7025] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 557.777378][ T7025] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid maxpacket 19968, setting to 1024 [ 557.777407][ T7025] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x85 has invalid maxpacket 1024 [ 557.777452][ T7025] usb 5-1: config 0 interface 239 has no altsetting 0 [ 557.901396][ T7025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.901443][ T7025] usb 5-1: Product: syz [ 557.901479][ T7025] usb 5-1: Manufacturer: syz [ 557.901499][ T7025] usb 5-1: SerialNumber: syz [ 557.934000][ T7025] usb 5-1: config 0 descriptor?? [ 557.939870][T12629] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 557.955648][T12629] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 557.955828][T12629] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 558.208394][T12629] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1963'. [ 558.416087][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 558.648195][T12488] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 558.721006][T12488] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 558.725791][T12488] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 558.803601][T12488] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 558.823390][T12488] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 558.893151][T12488] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 558.904584][T12488] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 558.944283][T12488] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 559.189009][T12683] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1969'. [ 559.230771][T12683] syzkaller1: entered promiscuous mode [ 559.239073][T12683] syzkaller1: entered allmulticast mode [ 559.593735][T12488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.650471][T12488] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.682620][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.682870][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.729405][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.729652][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.753296][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 560.045217][T12488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.201620][T12488] veth0_vlan: entered promiscuous mode [ 560.223922][T12488] veth1_vlan: entered promiscuous mode [ 560.268246][T12702] program syz.1.1973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 560.339753][T12488] veth0_macvtap: entered promiscuous mode [ 560.369418][T12488] veth1_macvtap: entered promiscuous mode [ 560.491073][T12488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.527860][T12488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.601808][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.601897][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.601985][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.602118][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.812800][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 560.866548][ T7029] usb 5-1: USB disconnect, device number 43 [ 561.116391][ T316] IPVS: starting estimator thread 0... [ 561.221024][T12732] IPVS: using max 39 ests per chain, 93600 per kthread [ 561.229766][ T316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.229820][ T316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.496172][ T316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.504838][ T316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.550818][T12737] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 561.550882][T12737] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 561.968365][T12743] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1979'. [ 562.049494][T12743] syzkaller1: entered promiscuous mode [ 562.049542][T12743] syzkaller1: entered allmulticast mode [ 562.801938][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1983'. [ 562.971687][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.971774][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.024684][T12762] 8021q: adding VLAN 0 to HW filter on device bond2 [ 563.114889][T12764] macvlan10: entered promiscuous mode [ 563.114949][T12764] macvlan10: entered allmulticast mode [ 563.136302][T12764] bond2: entered promiscuous mode [ 563.138920][T12764] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 563.189231][T12764] bond2: left promiscuous mode [ 563.486356][T12773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1987'. [ 563.618735][T12774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 563.692278][T12774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1987'. [ 563.998880][T12788] vivid-004: ================= START STATUS ================= [ 563.999019][T12788] vivid-004: Radio HW Seek Mode: Bounded [ 563.999120][T12788] vivid-004: Radio Programmable HW Seek: false [ 563.999190][T12788] vivid-004: RDS Rx I/O Mode: Block I/O [ 563.999244][T12788] vivid-004: Generate RBDS Instead of RDS: false [ 563.999297][T12788] vivid-004: RDS Reception: true [ 563.999356][T12788] vivid-004: RDS Program Type: 0 inactive [ 563.999439][T12788] vivid-004: RDS PS Name: inactive [ 564.109451][T12788] vivid-004: RDS Radio Text: inactive [ 564.109482][T12788] vivid-004: RDS Traffic Announcement: false inactive [ 564.109593][T12788] vivid-004: RDS Traffic Program: false inactive [ 564.109683][T12788] vivid-004: RDS Music: false inactive [ 564.109746][T12788] vivid-004: ================== END STATUS ================== [ 564.645350][T12799] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1985'. [ 566.702435][T12832] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2003'. [ 567.038405][T12838] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2004'. [ 567.144746][T12841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 567.167174][T12843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2005'. [ 567.211269][T12841] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2004'. [ 567.299168][T12844] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 567.375715][T12844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2005'. [ 567.443167][T12845] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1995'. [ 570.649846][T12893] batadv1: entered promiscuous mode [ 570.658072][ T33] INFO: task kworker/1:9:7023 blocked for more than 143 seconds. [ 570.658101][ T33] Tainted: G L syzkaller #0 [ 570.658113][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 570.658124][ T33] task:kworker/1:9 state:D stack:19848 pid:7023 tgid:7023 ppid:2 task_flags:0x4208060 flags:0x00080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 570.658183][ T33] Workqueue: events_freezable mmc_rescan [ 570.658382][ T33] Call Trace: [ 570.658395][ T33] [ 570.658409][ T33] __schedule+0x17d4/0x5820 [ 570.658549][ T33] ? __pfx___schedule+0x10/0x10 [ 570.658588][ T33] ? schedule+0x90/0x2b0 [ 570.658619][ T33] schedule+0x164/0x2b0 [ 570.658651][ T33] schedule_timeout+0xc0/0x2c0 [ 570.658678][ T33] ? __pfx_schedule_timeout+0x10/0x10 [ 570.658705][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 570.658790][ T33] ? _raw_spin_unlock_irq+0x23/0x50 [ 570.658846][ T33] ? wait_for_completion+0x272/0x5e0 [ 570.658878][ T33] wait_for_completion+0x2ca/0x5e0 [ 570.658975][ T33] ? __pfx_wait_for_completion+0x10/0x10 [ 570.659011][ T33] ? vub300_mmc_request+0x1000/0x1910 [ 570.659082][ T33] ? trace_mmc_request_start+0x81/0x1e0 [ 570.659109][ T33] mmc_wait_for_req_done+0x37/0x490 [ 570.659137][ T33] ? mmc_start_request+0x202/0x2d0 [ 570.659162][ T33] ? mmc_wait_for_req+0x1b5/0x240 [ 570.659188][ T33] mmc_wait_for_cmd+0x183/0x2a0 [ 570.659214][ T33] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 570.659256][ T33] ? __pfx_mmc_wait_done+0x10/0x10 [ 570.659293][ T33] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 570.659333][ T33] sdio_reset+0xf4/0x3a0 [ 570.659383][ T33] ? __pfx_sdio_reset+0x10/0x10 [ 570.718416][T12893] batadv1: entered allmulticast mode [ 570.734991][ T33] ? __mmc_claim_host+0x162/0x650 [ 570.735145][ T33] ? mmc_power_up+0x5d/0x650 [ 570.735205][ T33] ? mmc_attach_sd_uhs2+0x5e/0x900 [ 570.735299][ T33] mmc_rescan+0x6eb/0x1040 [ 570.735429][ T33] ? process_scheduled_works+0x97a/0x1630 [ 570.735571][ T33] process_scheduled_works+0xc3d/0x1630 [ 570.735738][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 570.735830][ T33] ? assign_work+0x3cf/0x5d0 [ 570.735914][ T33] worker_thread+0xa47/0xfb0 [ 570.736072][ T33] kthread+0x38b/0x480 [ 570.736145][ T33] ? __pfx_worker_thread+0x10/0x10 [ 570.736215][ T33] ? __pfx_kthread+0x10/0x10 [ 570.736276][ T33] ret_from_fork+0x514/0xb70 [ 570.747107][ T33] ? __pfx_r ** replaying previous printk message ** [ 570.747107][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 570.747204][ T33] ? __switch_to+0xc89/0x1420 [ 570.747293][ T33] ? __pfx_kthread+0x10/0x10 [ 570.747356][ T33] ret_from_fork_asm+0x1a/0x30 [ 570.747524][ T33] [ 570.747554][ T33] INFO: task kworker/1:12:7026 blocked for more than 143 seconds. [ 570.747604][ T33] Tainted: G L syzkaller #0 [ 570.747635][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 570.747663][ T33] task:kworker/1:12 state:D stack:19712 pid:7026 tgid:7026 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 570.747835][ T33] Workqueue: usb_hub_wq hub_event [ 570.747980][ T33] Call Trace: [ 570.748000][ T33] [ 570.748031][ T33] __schedule+0x17d4/0x5820 [ 570.748183][ T33] ? __pfx___schedule+0x10/0x10 [ 570.748301][ T33] ? schedule+0x90/0x2b0 [ 570.748385][ T33] schedule+0x164/0x2b0 [ 570.748469][ T33] schedule_timeout+0xc0/0x2c0 [ 570.748534][ T33] ? __pfx_schedule_timeout+0x10/0x10 [ 570.761490][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 570.761626][ T33] ? _raw_spin_unlock_irq+0x23/0x50 [ 570.761710][ T33] ? wait_for_completion+0x272/0x5e0 [ 570.761796][ T33] wait_for_completion+0x2ca/0x5e0 [ 570.761909][ T33] ? __pfx_wait_for_completion+0x10/0x10 [ 570.762038][ T33] ? __flush_work+0x101/0xca0 [ 570.762150][ T33] __flush_work+0xa63/0xca0 [ 570.762250][ T33] ? __flush_work+0x101/0xca0 [ 570.762342][ T33] ? __pfx___flush_work+0x10/0x10 [ 570.762434][ T33] ? __pfx_wq_barrier_func+0x10/0x10 [ 570.762580][ T33] ? __cancel_work_sync+0x5c/0x110 [ 570.762667][ T33] __cancel_work_sync+0xbf/0x110 [ 570.762747][ T33] mmc_stop_host+0xd9/0x460 [ 570.762832][ T33] mmc_remove_host+0x15/0x60 [ 570.762912][ T33] vub300_disconnect+0x154/0x2f0 [ 570.762987][ T33] usb_unbind_interface+0x295/0x9f0 [ 570.775121][ T33] ? kernfs_remove_by_name_ns+0x101/0x140 [ 570.775308][ T33] ? kernfs_remove_by_name_ns+0x101/0x140 [ 570.775380][ T33] ? __pfx_usb_unbind_interface+0x10/0x10 [ 570.775451][ T33] device_release_driver_internal+0x4f5/0x880 [ 570.775691][ T33] bus_remove_device+0x444/0x560 [ 570.775780][ T33] ? __pfx_bus_remove_device+0x10/0x10 [ 570.775869][ T33] ? kernfs_remove_by_name_ns+0x101/0x140 [ 570.775941][ T33] device_del+0x524/0x8f0 [ 570.776070][ T33] ? __pfx_device_del+0x10/0x10 [ 570.781699][ T33] ? kobject_put+0x516/0x550 [ 570.781943][ T33] usb_disable_device+0x3d4/0x8d0 [ 570.786123][ T33] usb_disconnect+0x346/0x9a0 [ 570.786311][ T33] hub_event+0x1bbb/0x4d30 [ 570.786364][ T33] ? do_raw_spin_unlock+0xf5/0x200 [ 570.786495][ T33] ? register_lock_class+0x31/0x2e0 [ 570.786651][ T33] ? __pfx_hub_event+0x10/0x10 [ 570.786725][ T33] ? rcu_is_watching+0x16/0xb0 [ 570.786808][ T33] ? process_scheduled_works+0x97a/0x1630 [ 570.786886][ T33] process_scheduled_works+0xc3d/0x1630 [ 570.793200][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 570.793254][ T33] ? assign_work+0x3cf/0x5d0 [ 570.793398][ T33] worker_thread+0xa47/0xfb0 [ 570.793521][ T33] ? __kthread_parkme+0x71/0x1f0 [ 570.801255][ T33] kthread+0x38b/0x480 [ 570.801356][ T33] ? __pfx_worker_thread+0x10/0x10 [ 570.801436][ T33] ? __pfx_kthread+0x10/0x10 [ 570.801497][ T33] ret_from_fork+0x514/0xb70 [ 570.801591][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 570.801676][ T33] ? __switch_to+0xc89/0x1420 [ 570.801758][ T33] ? __pfx_kthread+0x10/0x10 [ 570.801811][ T33] ret_from_fork_asm+0x1a/0x30 [ 570.801977][ T33] [ 570.804559][ T33] [ 570.804559][ T33] Showing all locks held in the system: [ 570.804572][ T33] locks held by pr/ttyS0/16: 1, last CPU#1: [ 570.804588][ T33] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 570.804649][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 570.804665][ T33] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 570.804768][ T33] locks held by getty/5373: 2, on CPU#0: [ 570.804782][ T33] #0: ffff888032a760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 570.804910][ T33] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 570.804960][ T33] locks held by syz-executor/5604: 1, last CPU#0: [ 570.804975][ T33] #0: ffff8880297503b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 570.805050][ T33] locks held by syz-executor/5631: 4, last CPU#0: [ 570.805065][ T33] #0: ffffffff8ee35b90 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 570.820820][ T33] #1: ffff888079b229f8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 570.820995][ T33] #2: ffff8880236c1d38 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 570.821160][ T33] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 570.821359][ T33] locks held by udevd/6168: 3, last CPU#0: [ 570.821407][ T33] #0: ffff8880356e0460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 570.821613][ T33] #1: ffff88807e09b8d0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: __start_renaming+0x148/0x410 [ 570.821829][ T33] #2: ffffffff8f4ef878 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path2_perm+0x299/0x760 [ 570.822123][ T33] locks held by kworker/1:9/7023: 2, on CPU#1: [ 570.822164][ T33] #0: ffff88801b06a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 570.830881][ T33] #1: ffffc90005377c40 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 570.838794][ T33] locks held by kworker/1:12/7026: 5, on CPU#1: [ 570.838836][ T33] #0: ffff888020eed540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 570.839025][ T33] #1: ffffc900033e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 570.839176][ T33] #2: ffff888029da71d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 570.839317][ T33] #3: ffff88807d3a51d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 570.839497][ T33] #4: ffff88805604d1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 570.839745][ T33] locks held by kworker/u8:0/12577: 3, last CPU#0: [ 570.839785][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 570.839942][ T33] #1: ffffc9000556fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 570.856555][ T33] #2: ffff8880b8626118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1a9/0xed0 [ 570.856756][ T33] locks held by syz.4.2010/12870: 1, on CPU#0: [ 570.856826][ T33] #0: ffff88802aa236b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 570.857005][ T33] locks held by syz.4.2010/12871: 1, last CPU#0: [ 570.857047][ T33] #0: ffff88802aa236b8 (&mm->mmap_lock){++++}-{4:4}, at: madvise_lock+0x152/0x2e0 [ 570.857181][ T33] locks held by syz.4.2010/12888: 1, on CPU#1: [ 570.857229][ T33] #0: ffff88802aa236b8 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70 [ 570.867796][ T33] locks held by syz.1.2014/12881: 2, last CPU#0: [ 570.867849][ T33] #0: ffff888032b929f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 570.878603][ T33] #1: ffff88802aaa16a0 (&anon_vma->rwsem){++++}-{4:4}, at: unlink_anon_vmas+0x119/0x720 [ 570.878832][ T33] locks held by syz.0.2017/12893: 3, last CPU#1: [ 570.878882][ T33] #0: ffffffff907bf668 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 570.879188][ T33] #1: ffffffff90250d00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 570.879372][ T33] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 570.879528][ T33] locks held by syz.5.2019/12894: 1, last CPU#0: [ 570.879630][ T33] #0: ffff8880236c4378 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x25c/0xd10 [ 570.879814][ T33] [ 570.879833][ T33] ============================================= [ 570.879833][ T33] [ 570.879856][ T33] NMI backtrace for cpu 0 [ 570.879916][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 570.879992][ T33] Tainted: [L]=SOFTLOCKUP [ 570.880012][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 570.880050][ T33] Call Trace: [ 570.880072][ T33] [ 570.880093][ T33] dump_stack_lvl+0xe8/0x150 [ 570.880176][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 570.880273][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 570.880360][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 570.880447][ T33] sys_info+0x135/0x170 [ 570.880500][ T33] watchdog+0xfd7/0x1030 [ 570.880599][ T33] ? watchdog+0x1c7/0x1030 [ 570.880648][ T33] kthread+0x38b/0x480 [ 570.880669][ T33] ? __pfx_watchdog+0x10/0x10 [ 570.880687][ T33] ? __pfx_kthread+0x10/0x10 [ 570.880708][ T33] ret_from_fork+0x514/0xb70 [ 570.880744][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 570.880855][ T33] ? __switch_to+0xc89/0x1420 [ 570.880947][ T33] ? __pfx_kthread+0x10/0x10 [ 570.881008][ T33] ret_from_fork_asm+0x1a/0x30 [ 570.881125][ T33] [ 570.881487][ T33] Sending NMI from CPU 0 to CPUs 1: [ 570.881585][ C1] NMI backtrace for cpu 1 [ 570.881600][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 570.881624][ C1] Tainted: [L]=SOFTLOCKUP [ 570.881631][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 570.881641][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 570.881734][ C1] Code: e8 4e e8 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f b0 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a cc 74 06 cc 44 89 f9 80 e1 07 [ 570.881750][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 570.881765][ C1] RAX: 1ffffffff35a5e00 RBX: 00000000000003fd RCX: 0000000000000000 [ 570.881778][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 570.881789][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 570.881801][ C1] R10: dffffc0000000000 R11: ffffffff8571cb00 R12: dffffc0000000000 [ 570.881814][ C1] R13: 0000000000000000 R14: ffffffff9ad2f0c0 R15: 0000000000000000 [ 570.881826][ C1] FS: 0000000000000000(0000) GS:ffff888124ddc000(0000) knlGS:0000000000000000 [ 570.881842][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 570.881854][ C1] CR2: 00007f31db757e20 CR3: 000000007c344000 CR4: 00000000003526f0 [ 570.881870][ C1] Call Trace: [ 570.881877][ C1] [ 570.881892][ C1] wait_for_lsr+0x184/0x2f0 [ 570.881921][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 570.881967][ C1] serial8250_console_write+0xaa1/0x1200 [ 570.881994][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 570.882025][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 570.882051][ C1] ? __schedule+0x17ea/0x5820 [ 570.882081][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 570.882109][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 570.882131][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 570.882158][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 570.882182][ C1] nbcon_kthread_func+0x679/0x880 [ 570.882204][ C1] ? nbcon_kthread_func+0x163/0x880 [ 570.882220][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 570.882242][ C1] ? __kthread_parkme+0x71/0x1f0 [ 570.882268][ C1] ? __kthread_parkme+0x199/0x1f0 [ 570.882296][ C1] kthread+0x38b/0x480 [ 570.882312][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 570.882329][ C1] ? __pfx_kthread+0x10/0x10 [ 570.882346][ C1] ret_from_fork+0x514/0xb70 [ 570.882375][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 570.882404][ C1] ? __switch_to+0xc89/0x1420 [ 570.882429][ C1] ? __pfx_kthread+0x10/0x10 [ 570.882446][ C1] ret_from_fork_asm+0x1a/0x30 [ 570.882482][ C1] [ 570.909713][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 572.043314][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 572.054013][ T33] Tainted: [L]=SOFTLOCKUP [ 572.058351][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.068423][ T33] Call Trace: [ 572.071772][ T33] [ 572.074728][ T33] vpanic+0x56d/0xa60 [ 572.078770][ T33] ? __pfx___schedule+0x10/0x10 [ 572.083655][ T33] ? __pfx_vpanic+0x10/0x10 [ 572.088191][ T33] panic+0xc5/0xd0 [ 572.091941][ T33] ? __pfx_panic+0x10/0x10 [ 572.096387][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 572.101868][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 572.107262][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 572.113439][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 572.119672][ T33] watchdog+0x1030/0x1030 [ 572.124030][ T33] ? watchdog+0x1c7/0x1030 [ 572.128465][ T33] kthread+0x38b/0x480 [ 572.132550][ T33] ? __pfx_watchdog+0x10/0x10 [ 572.137282][ T33] ? __pfx_kthread+0x10/0x10 [ 572.141910][ T33] ret_from_fork+0x514/0xb70 [ 572.146583][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 572.151733][ T33] ? __switch_to+0xc89/0x1420 [ 572.156450][ T33] ? __pfx_kthread+0x10/0x10 [ 572.161066][ T33] ret_from_fork_asm+0x1a/0x30 [ 572.165880][ T33] [ 572.169089][ T33] Kernel Offset: disabled [ 572.173499][ T33] Rebooting in 86400 seconds..