last executing test programs: 17m6.198151305s ago: executing program 3 (id=767): socket$netlink(0x10, 0x3, 0x12) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r2 = syz_io_uring_setup(0x54ca, &(0x7f0000000340)={0x0, 0x9b3a, 0x400, 0x200001, 0x48}, &(0x7f00000006c0), &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000280), 0x0, 0x4) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0xffffffe3, 0x4004840, 0x0, 0xfffffffffffffe1b) 17m5.191786024s ago: executing program 3 (id=770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = mq_open(&(0x7f0000000580)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xceq\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x2, 0x0, 0x80000001, 0x6, 0x0, "7f1227f7adf97affe4ffff7d1800"}) r4 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f0000000200)=[{{0x80000000}}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f00000001c0)={{r7, r6, 0x1, [0x0, 0xf7df]}, {r5, r8, 0x7, [0x5]}, 0x1, [0x4008, 0x3df]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r9) sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x2c, r10, 0x1, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x6}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmmsg(0xffffffffffffffff, &(0x7f0000003b80)=[{{&(0x7f0000000000)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'hmac(blake2s-128)\x00'}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003d40)="2a973d90183be704eb5a2f6d767ca54c81f4bc0f8449ece67ca6b2befa4259f9877052275a71c2f5fc5d643b002f390252a7a051a71c08cc47512fd9b61d56d807fc6e7626573543d6ab253bdd1c5e156c5943c468da8beb5dcd3a7e744ab849371f3f4ea6ae47b4ee3e3cc1109cfa08aab59da03a656521668bace396d9f61923ed47ee323978acb4730940075581a94f388146626b195ae338d6aed2ea8b193dc94e023bec17ad14fa790ca0b63c92d1a0f2804801212afe555adc9f6c928af2", 0xc1}], 0x1, &(0x7f0000000240)=[{0xf0, 0x108, 0x2, "830f2e3eb258773a06c8e2fdfdc0cf6663d5428e68b02617d3f8a763408d2e3ceb794df8b921b3814a96c96bb6e0469c154a7ca1e69175d0a7ae7d53a2a2902265e2a7737996998c8a4a2750798e6d54bb290b63d595f4f5b0c7dc124909e66f1c4ffbd998ffa1164451d47125ec8d6f5550346bdfa9dbcd71c7a145872d4d6cb07950fbb21687f44d84636354e09decc5860b7574cbaea5f31be4ab04e62b8e4e1c9a12707ce9b8fc43801e877a4741f5d7cd21ca28b54a01b5e2c235f444958d7fdb186cca37903ea0ad6252d6da57af39180c7f077373665230ddb7f05ce5"}, {0xe8, 0x103, 0xdaa7, "713acfe5dc73a68c4700f0946da5bc61e3cba760378cc6ecaf428593259f9dfcf20ca12d8262b5c7919c34fa7ce4e2d72d71bd6f155ea02fd37fefdc5c516cabde9817ab229c1313c61112160d7ad0dfc4d85592086769ece1e344efbfc8a68a936855f087054f6032f21095792ea6fc922c67fb90a5a62ff4e36dd62b2e2f26baac7a8c306a4cb51cbaee7afee4b340a58eed3a2921d7dd3f31ed349060b50b93defd8c7dd8cb7eb11117438f28d2d1008c43bd4756f63df1e0103e0adac9d314520586e9f720ae6af1593e95201442354ef44e6ed8db"}], 0x1d8}}, {{&(0x7f0000000440)=@qipcrtr={0x2a, 0x0, 0xffff8000}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)="92ec07c9d7ff38532fff5f2ac44594f70695efe12161c7af1f408b36f6778a6e2dd5a02800173bf39903eb1ad5e8e7c248e99ada779bffd9e6c077a434e7df20f239b8da7d6fd10049fb6b715d8071e044ff8ba4afc6e53444c5ffc7747b28d1b3", 0x61}], 0x1}}, {{&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xb1f9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000600)="f29376ef7663f501a98af956cc47c7db15396cbc5e63a626c884e98b00366650b8e5b5c5f9dcbbd96adc10b34caee6df6b883302462ef8c1a5fff76f650b3c5c3e9408b63f25bcb54f211deceb33a2a7ec5054e3b04230a1005f81f7c1c5af422dafbb0ca1b18b9e28b94d81b639b5a7c767760de68b9d5ce2abb20d2d818d81e8c3debae375b94a4ed607b7b66fca1a1dfe33e68bb913612f0a7611d8991da547cea7bad277ec4e578ff8fe557301cd1eb5cff82faf6367c2da", 0xba}, {&(0x7f00000006c0)="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", 0x1000}], 0x2, &(0x7f0000001700)=[{0x90, 0x11, 0xfff, "16f5e28c194ae1ce9f1aff40d2361e40375d6b62a406f47aa042dd70d30a0ce752ac042691959815694d0bf8c5d776c0467790e65ad87b640c6a48914246001974d9f8265f6c02044bbb44544a029429d15254cd8497e9f3788d467c8bf8483f1be99a9bce609003d31ae65673829c8eeae90cbd7ab4999ddd30a9"}], 0x90}}, {{&(0x7f00000017c0)=@isdn={0x22, 0x7, 0x93, 0x9, 0xe}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001840)="5a6f98a4104f02870d348f9be61de4283d128a9e1cca05a37df959ce7c620e4fdd8f0aa2ddbac61d57e75e06320c2ba1bfc257b68a268de95eaf26e7d97b70f9ae64c8db7e861c122edd9148667a8087bee95ab34232fee28ec8bddf68c50fb410c4bfb5bf409a9c0d041575a99296a72f6f6ea982110cdef737af10190434d49ae73aa27438093aae4a56fb405e35b68beb18a1d09f8afa7c74d8df5ebffad290f1e7", 0xa3}, {&(0x7f0000001900)="af52b418d4d4d7b274966b29d2f69695af66c38b42d076b7fc21c5aabf0d223f56fc236810ca7d98af6fc343efafce19f48cb7648bec2204b181626eb60fb93d35e1b6495ba8b2997d92040cf95e5224622039278bfe638b5c753bef05ffddad5c6f33fac89215d39bdb0dc745936d261c4977f0097db186d9d50a5b1fe2247b30da4e6f3f6a5ac76f81df1db10fe4e2f194ec0968b1e9ec74016c13de93a3d072e1b66d99e97b3d", 0xa8}, {&(0x7f00000019c0)="fb35e53392659a0840ff3e2dcf41013cf240615ba15c58694c7c86f437faea0e00033fff98061a722de9cc089c9e7bd6cd3d1e626acf3ad72bdd5b64c13469ffeee9aac9ec54064624e8b8d19398bddf7120e4651d3436bcf3a31eff26", 0x5d}, {&(0x7f0000001a40)="a713823fcff310ed52f1aed60b5fc187a2d8", 0x12}, {&(0x7f0000001a80)="8a92f3ddd6249f15d2fc6198e1de4d599cc25fc76f04451edb8de0964dfb9620c5f8b249f923018b52bc7a28462cd0ffb4c5c71121d60cbf03c5244652fa77c6fe5b4699948e02ae47a1ca85f19928ae00b03db791b1858d60e25798bf8ed38910b6e54551998085a1c02c7eddbb700e643d97c923d90838f71802c7289da1ca6e7ead1b61725467129a3b981cca758f9349800167940d33e0772af69f4535351a72ce97dbe55b12f87f13c7", 0xac}, {&(0x7f0000001b40)="6044da52c21af9e80387d87919a2e1f9c5b65e02d1331bd9333d5d3e2d83c844ef542eeafe12b7d7d5bbe3ce", 0x2c}, {&(0x7f0000001b80)="31e6fe83e4d86d4e32511b56a73a24631763ffc3fe79d20be40eda7617d15cd3c2d96b011502c89a416db28e31f64c5bb67e8b82c9a3edf029d3e96de39c3a551756944a0cb5c3af637ad46678f8", 0x4e}, {&(0x7f0000001c00)="6feef73ce98f272dc2e689690a46fed00c4b8a9214d87fab23194d810f4a34fc232547478da7c816c71a7032739e3106042ee28d96f9a6f01b86f371d67285cafc25fc267bc204eaa8a6391ac5fdb1dd4d894198f9", 0x55}, {&(0x7f0000001c80)="c64348937c67a90fed3e6f8a0d6c517f9163d8158d6c34e703db33a9b6d85c3a9349922d75c1588466f52b2886c3ea59a2686a821c084e35aa701dc12799b6d10b9b84e88ef4f49018de04adfcfa968006c3e4169a1e74535749e89b7f0474bc690f7bffc743dff9e9761b105b6cc8f4de2efecfd036e0e8895c6f14aec685b962ada6fe52b15d3de95bcd4603416c5ddb6ff46d9543fb38b4d799dd9c3bcf57d73610a9287e474f708ac1e35061c8903fbbcf4bbd05e842dd12c79bae961aba219fbdad092018fa32a42c68e06e75410aeb8952c72d25c2dcba7342deae6dc0c811149333fff0ed812c750f5e96ad6cb82da8ca7e9576", 0xf7}], 0x9, &(0x7f0000001e40)=[{0x90, 0x117, 0x9, "dac0a877823c7dd5fa1909c88b6786fdfd5d967d0864d7b47195120df41481b9ef1ac53d99d25c6d6b35aeb970872e1ec9c951316907bec9ddd6841be870428de737b62c00510c0218f5c2d56cbb0f7d4ae33215084f9e9fca72ac16f4671fdb45c7df494f0f2b2a75e8cbcab7730218fc09212227f6af621aa804"}, {0xc8, 0x101, 0x2, "a461c05ed6276d400bb1253577e940ef42b4dc43a0e65e52e0eefbfcf4003b935651091b8e3659be6641e694a52acdcaa642836a8c2ab77773d35e22522d219d83c48dadd7dc0a85decede817f3602bf4dbfae38b542018c3ad4f291ddffc9af2d543a6c76305dd49be23e07e4dee8164a5414a253ffeae639e57f6086c56f8345bbaa450e1b44509d31668fb340539b9c89ffe4444e05ecb1aecd8ba526ad4523d40a2810c6191123f60f50e8c1b55920c6cd"}], 0x158}}, {{&(0x7f00000024c0)=@l2={0x1f, 0xe457, @none, 0x7ff, 0x2}, 0x80, &(0x7f0000002100)=[{&(0x7f0000002040)="f3449aa07e809ed1c3aa2a998ab734b1a76c27b32d36a7941acf9ac8911d241adc99a1599f36404f31ad9e2b9fbff47ac58f61317f23f7391eae447807d01070254e28494e52cab8851e105f22300d6a46b326cb76611439b69cc88a7b0169bca4a2d151d15f6d2f4234815142006e1eabf9a51153a16d1340d4e3e70de8d7e6844a2ac3df5f3419f3e1ac14e2c3eb94de2e422d437bb07bb563d3b18ecdad56a1e53dfe62eabe7fcd5e5cc68e69ad6e28d11a9f", 0xb4}], 0x1, &(0x7f0000002140)=[{0xc8, 0x3a, 0xfffff800, "65271676f5c99a46fd29815d8625dbc7126a10e2a625f1ab3912e6755637683d2701b49b3d99056de6962d6d86c9914cd9540567f80d7af2dc4c2d6d1a4a09f5021fd90a3ced8c9b2fd68bf1701a94b988482a3849a828f721343d157e21994940439ca89b8989e3565bbded38060c8e4eefb1d65fcc68f5f1f15e8284583e08033fdfaa613b2cafbefd11c13251403e10283673959c5b42544516b9e553f03d237808a1d5770e515a4ab8cbd0cc46399c2a25a2"}, {0xd0, 0x10f, 0x3, "5815aa3af7b41a41ac038b8ae50a889907cc7525a406e18ccc03dbd7920b85cd2ada035ba45fcfa68f0940adf2ef598c99437ce50f45f16cb93777156b54842cfb5fb4b59a5823d45b173e0355b0b040906facf544d34b1a7d00e8cf1d345e900914f64ab798b6cfab02c114ca91a3df6e85d54f7e7ca1ea4bcfac77c19b6be54bc43b3f4d776d01b84bcf7228c58f18114670773ca37d40db8371277b70ffd8078e34dbe61733cd1dce7960ea8949a90f5a55c09faad972a4"}, {0xc8, 0x112, 0x1, "66f3c32ccb6dc35de7199065a8525c3cc28bb874f0555bd2cfc1dde1ebe19e2e26127706ec83e0998026e4b892d83b9e082b767527516d2a6c7d7aeb5bd24170ed3d50dee824768cdae3b19134587f70bceb511c28dab32e59db64bf52943604281199364a8ffd5d82e7e264909f242edad1104caee37e43c0b9f9c986b1676088f1dbd7e271ba7da825990ea0889982650bab429c892e188f1075aa628ea159b50e0512de17114a78da4184ca5a1e6827847c02"}, {0x48, 0x10c, 0x1, "ac440b0b97baf87e92616c12218d8c3440cfa564a238dcf276917af43f27bd6541d6ea7a695de1f74c563711431770db00d8c36c"}], 0x2a8}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002400)="c671aac4f59359a518c008d1793ba64553243f4e2e9d54d5a74340f09ae6b7cd52ea396a6fe540e8d8f2614366616ff08b570a081a3589c7254747b41c6ba479e2c16a81612e62c5815f873363605879b8ba", 0x52}], 0x1, &(0x7f0000003840)=[{0x38, 0x107, 0x533, "913b9694ac1f7ae962dd5b2bf46d69049b33e73091477d56b0f02fe2ee9ba560eb05"}, {0x28, 0x117, 0x5cf, "e31e6ccbfee4bceb1471ed3dcc7937003a4449973cb3c4"}, {0x70, 0x0, 0x9, "f0677a522cff2cabe7402539622774b7a76e6ea1180e613a3235f78014730ffb8f638fb5493bde122a9fe87a8e7b15c1d6608e1063c2ab47e66331a9e1ac88bd29b476d26be1d26fc993e53ee4014cbc954315c01506f4ee23f21bc0"}], 0xd0}}, {{&(0x7f0000002640)=@ax25={{0x3, @null, 0x8}, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000001fc0)=[{0x0}, {&(0x7f00000036c0)="8cac57ecc7da78c34394c7835c2552998ab0bf05c49acbdb33ce8a2e460ee5ca2b8deeb9843fc4e27584b78e4c8466e28b0c55a09ee18668ddc0f39294a94c7fd59d7bb6f2f25081f498a694f42ed626e4e787b7cb736c61c5d3d2b89c0cd5566ca0825448fdeea3ecd56b88f4930ac624cf7e7ad1f872d3164d5d32fe7291d5a07ad85d97b3c4aceafe71a43778bd7dabe1f63c89a1d3a0179a679f7a7ba49f66eba51c30348cd16ad73003e40332b587d44aa0d87a6c84ff64455597a2047b01578604bc44dd0a2a17960ea15178cb7f04b75956e9edaa42c411c6591c164ba0c2f70a7357bfc806", 0xe9}, {&(0x7f00000037c0)}, {&(0x7f0000002540)="e71c26bfd8679185b656ca8253ccc31adc778a99f25787985f5b90424ec5a11403471380b0fba541f1effd8a0e8ac69dd7572d5dcbb62f4ed2896e50ceee7e1cb209d3af2c795514670e3da57fdc3c856831b70cf63c78a464ecb96bff7b5652804dfb52710b58ebc8e81de760f5f579f297c6e443e7ea149c6dcece0d125154886e924cf47915b9941aa40e13d3c4bc10baf11396fc917b401b6fa2a16ce6c7fe71bd5323c3c921746e3784ef742cbc4ed58b52e14c4aeab8cb8ae34db384c4b0c1ead484a1c8917ec8c764047cdef0", 0xd0}], 0x4, &(0x7f0000004280)=[{0xe0, 0x118, 0xffffffff, "76da70441152736021250143d2b256ede0647f9791fac8b5abcc781855fd349ea6d6884f268c8097d1d20f1c20e3b2a29f1404fcb8b40bfc6739fd0141540df5f7932aa1b260a5e8149285c3dd0d849a10158f3cadff875810169832c586831a93090af6b961043229cad51ed8547923f23a0107b2658e18ba4e4a4f08f86aab93b21ca9fe1243c9d19b65ab4a9fa3ce6a050e67bf367702f0a9e74a240f424871b26c066897896458a53bba8fb93397da62ee1105a5eaab8006a660bd02285456a896505f1233a452ca"}, {0x178, 0x10d, 0xffff5ce1, "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"}, {0x60, 0x84, 0x4, "d033951a5115b154217ef66748e54c6f28143ffac6a21ac446a517bee1559816c190680aaa732bdaa21678c85a567320eb8e5c765a4d0776b95b73b111917c8954937d760a87960e0846b52e1368"}, {0x68, 0x108, 0x1, "a7dfa76a0120cb334054489cfa122cc48cb0f8f81818fe340b67e468b321cd880b93366213528d3c5cb22ef4e2f9683fbdb6d63d9f8992eb4f1f4030cc129c7f638cec34e637447ea5283ff47df5494d926e"}, {0x108, 0x117, 0x800, "32632ce3f0f1d2e65e002f25f0cfbfec3e0293f6bbed6d67f8e539b9d95a4e08458982347156272c743e85c88e6e0022078137ba67aea863312952dfb2adb2f379a5be4f077d62ad240112723528a12a2f6f48609afde8a3ff56fa4392136adff37977a4cd637014500029c7b0928ffb9b24f5dbf972b3c40878fd9347a3165f0d8c9318f5358bb769324177be1706621a619854905a3aa8739110023f9904e35aabf9f4ddfe0882300201f1dd07e0b69404497fbc6efdd9803e3dbb819afb5381d282a78c22b9cb5fdaf37c77ed77fedb0da6a34bf250008cc4b5c2448d15bfefc2d749df489643f4f082480a05eaebf1f8"}], 0x428}}], 0x7, 0x191c) 17m4.797682698s ago: executing program 3 (id=772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 17m4.647877603s ago: executing program 3 (id=773): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) chroot(&(0x7f0000000640)='./file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') 17m3.721757014s ago: executing program 3 (id=775): syz_emit_ethernet(0x82, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x1000, 0x4) socket$packet(0x11, 0xa, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffff9, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x4, 0x0, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0xfe, 0x0, 0x5f, 0x9, 0x0, 0xa6, 0x3, 0x25, 0xfe}, {0xfffffffc, 0xffff, 0x0, 0x2, 0xff, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000001000}, {0xff, 0x6a, 0x0, 0x8, 0x4, 0x1, 0x4, 0xfe, 0x5, 0x0, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000, 0x80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x0, 0x286, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) 17m3.451989365s ago: executing program 3 (id=778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2717, 0x0, 0x0) listen(r0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 17m2.780100881s ago: executing program 32 (id=778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2717, 0x0, 0x0) listen(r0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 4.313467452s ago: executing program 0 (id=3471): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 4.195060498s ago: executing program 1 (id=3475): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 4.033798181s ago: executing program 1 (id=3479): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 3.967929697s ago: executing program 0 (id=3480): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000040000000800000066a9000000000000", @ANYRES32, @ANYBLOB="000000000000009c62a578cff198fd0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) 3.883093523s ago: executing program 0 (id=3482): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) close(r0) 3.726984478s ago: executing program 1 (id=3486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 3.695313406s ago: executing program 0 (id=3487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001000f7ff0000000018110006", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 3.619693617s ago: executing program 2 (id=3490): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 3.575496535s ago: executing program 1 (id=3491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 3.536587389s ago: executing program 4 (id=3492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 3.483416816s ago: executing program 2 (id=3494): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002780)=""/4065, 0xfe1}], 0x1}, 0x40020000) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) 3.391237035s ago: executing program 0 (id=3495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)) 3.314366961s ago: executing program 1 (id=3496): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) 3.256005523s ago: executing program 2 (id=3497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 3.249408905s ago: executing program 4 (id=3498): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@s}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 3.226273021s ago: executing program 0 (id=3499): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.099484124s ago: executing program 1 (id=3501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x280b40, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r2], 0x0}, 0x94) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 3.099292747s ago: executing program 4 (id=3502): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143fdd, 0x80, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r2, &(0x7f0000000180), 0x0}, 0x20) 2.996157667s ago: executing program 2 (id=3504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 2.984616734s ago: executing program 4 (id=3505): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.875886319s ago: executing program 5 (id=3506): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 2.874647833s ago: executing program 2 (id=3507): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x50, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2.841063919s ago: executing program 5 (id=3508): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2.838916382s ago: executing program 4 (id=3509): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 2.704060836s ago: executing program 4 (id=3510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x1}, 0x28) 2.70385331s ago: executing program 2 (id=3511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 2.703635148s ago: executing program 5 (id=3512): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x42}, 0x94) 1.525213825s ago: executing program 5 (id=3513): socket$packet(0x11, 0x3, 0x300) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x200000006, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x1158e3b975e78980}, 0x0) 130.845722ms ago: executing program 5 (id=3514): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffef4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 5 (id=3515): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): 486755][T18680] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1163.469859][T18680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.700241][T18680] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.716944][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.724144][ T5961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1163.973838][T18967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2950'. [ 1163.974483][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.989877][ T5961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.028549][T18680] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1165.101990][T18680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1166.224581][T18992] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1166.269608][T18995] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer. [ 1166.366433][T18995] netlink: 'syz.0.2954': attribute type 39 has an invalid length. [ 1166.647563][T18680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.746465][T18680] veth0_vlan: entered promiscuous mode [ 1166.799715][T18680] veth1_vlan: entered promiscuous mode [ 1166.892660][T18680] veth0_macvtap: entered promiscuous mode [ 1166.955045][T18680] veth1_macvtap: entered promiscuous mode [ 1167.029515][T18680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.078878][T18680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.148452][ T3024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.195550][ T3024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.303275][ T3024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.312512][T19011] netdevsim netdevsim4: Direct firmware load for . [ 1167.312512][T19011] failed with error -2 [ 1167.389124][ T3024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.411549][T19011] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1167.411549][T19011] [ 1167.472322][T19020] create_pit_timer: 28 callbacks suppressed [ 1167.472338][T19020] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1167.603206][T19020] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1167.664764][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.755445][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.769515][T19020] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1167.780382][T19020] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1167.789712][T19020] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1167.799806][T19020] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1167.980553][T19020] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1168.012048][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.021661][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.236247][T19020] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1168.255833][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1168.255848][ T30] audit: type=1400 audit(1754786635.033:3013): avc: denied { mounton } for pid=18680 comm="syz-executor" path="/root/syzkaller.kgka0u/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1168.465133][T19020] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1168.548012][T19020] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1168.556619][ T30] audit: type=1400 audit(1754786635.133:3014): avc: denied { mounton } for pid=18680 comm="syz-executor" path="/root/syzkaller.kgka0u/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1168.725686][ T30] audit: type=1400 audit(1754786635.153:3015): avc: denied { mounton } for pid=18680 comm="syz-executor" path="/root/syzkaller.kgka0u/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=71737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1168.876846][ T30] audit: type=1400 audit(1754786635.243:3016): avc: denied { unmount } for pid=18680 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1168.919527][ T30] audit: type=1400 audit(1754786635.263:3017): avc: denied { mounton } for pid=18680 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1169.135215][ T30] audit: type=1400 audit(1754786635.313:3018): avc: denied { mount } for pid=18680 comm="syz-executor" name="/" dev="gadgetfs" ino=6799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1169.383945][ T30] audit: type=1400 audit(1754786635.313:3019): avc: denied { mounton } for pid=18680 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1170.808626][ T5167] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1170.823914][ T5167] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1170.839793][ T5167] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1170.854985][ T5167] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1170.863331][ T5167] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1171.005999][ T5961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.360181][ T10] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1171.524553][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1171.546493][ T5961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.556870][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.578663][ T10] usb 1-1: Product: syz [ 1171.661744][T19075] netdevsim netdevsim2: Direct firmware load for . [ 1171.661744][T19075] failed with error -2 [ 1171.754315][ T5961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.765860][T19075] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1171.765860][T19075] [ 1171.776464][ T10] usb 1-1: Manufacturer: syz [ 1171.791207][ T10] usb 1-1: SerialNumber: syz [ 1172.065091][ T10] usb 1-1: config 0 descriptor?? [ 1172.106729][ T10] usb 1-1: interface 1 not found [ 1172.294929][ T5961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.608601][ T5961] bridge_slave_1: left allmulticast mode [ 1172.616252][ T5961] bridge_slave_1: left promiscuous mode [ 1172.644618][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.660769][ T5961] bridge_slave_0: left allmulticast mode [ 1172.666569][ T5961] bridge_slave_0: left promiscuous mode [ 1172.677531][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.932317][ T5167] Bluetooth: hci2: command tx timeout [ 1173.317580][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'. [ 1173.914555][ T24] usb 1-1: USB disconnect, device number 90 [ 1174.830260][ T10] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1174.898085][ T5961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.010194][ T5167] Bluetooth: hci2: command tx timeout [ 1175.020080][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1175.043782][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1175.066684][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.109453][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1175.121936][ T5961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.135553][ T5961] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 1175.146108][ T10] usb 6-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f [ 1175.157424][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.166164][ T5961] veth1_vlan: left allmulticast mode [ 1175.173717][ T5961] bond0 (unregistering): Released all slaves [ 1175.180244][ T10] usb 6-1: Product: syz [ 1175.210165][ T10] usb 6-1: Manufacturer: syz [ 1175.219620][ T10] usb 6-1: SerialNumber: syz [ 1175.237665][ T10] usb 6-1: config 0 descriptor?? [ 1175.286192][T19088] : entered promiscuous mode [ 1175.317458][ T5961] : left promiscuous mode [ 1175.389644][T19103] netdevsim netdevsim1: Direct firmware load for . [ 1175.389644][T19103] failed with error -2 [ 1175.409070][T19103] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1175.409070][T19103] [ 1175.426565][T19063] chnl_net:caif_netlink_parms(): no params data found [ 1176.049058][ T10] usb 6-1: USB disconnect, device number 68 [ 1176.615788][T19063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.626141][T19063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.636735][T19063] bridge_slave_0: entered allmulticast mode [ 1176.648738][T19063] bridge_slave_0: entered promiscuous mode [ 1176.854015][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.860351][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.075594][T19063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.097097][ T5167] Bluetooth: hci2: command tx timeout [ 1177.104838][T19063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.170539][T19063] bridge_slave_1: entered allmulticast mode [ 1177.291415][T19063] bridge_slave_1: entered promiscuous mode [ 1177.493766][ T5961] hsr_slave_0: left promiscuous mode [ 1177.544391][T19153] create_pit_timer: 28 callbacks suppressed [ 1177.544401][T19153] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1177.584942][ T5961] hsr_slave_1: left promiscuous mode [ 1177.596719][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.606214][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1177.626626][T19153] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1177.634479][ T978] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1177.652655][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1177.660537][T19153] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1177.700247][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.711426][T19153] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1177.734345][T19153] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1177.740899][ T5961] veth1_macvtap: left promiscuous mode [ 1177.747497][T19153] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1177.753304][ T5961] veth0_macvtap: left promiscuous mode [ 1177.763291][T19153] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1177.768543][ T5961] veth1_vlan: left promiscuous mode [ 1177.780229][T19153] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1177.801901][T19153] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1177.807801][ T978] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.809862][T19153] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1177.829004][ T978] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1177.848809][ T5961] veth0_vlan: left promiscuous mode [ 1177.857486][ T978] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1177.965062][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.995964][ T978] usb 6-1: config 0 descriptor?? [ 1178.049489][ T978] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1178.056824][ T978] dvb-usb: bulk message failed: -22 (3/0) [ 1178.089484][ T978] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1178.140664][ T978] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1178.147753][ T978] usb 6-1: media controller created [ 1178.173446][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1178.195823][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 1178.203785][ T978] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1178.223893][ T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input58 [ 1178.240282][ T978] dvb-usb: schedule remote query interval to 150 msecs. [ 1178.247461][ T978] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1178.257020][T19152] SELinux: truncated policydb string identifier [ 1178.271756][T19152] SELinux: failed to load policy [ 1178.287209][T19152] dibusb: i2c wr: len=61 is too big! [ 1178.287209][T19152] [ 1178.304855][T19152] netlink: 'syz.5.2977': attribute type 6 has an invalid length. [ 1178.313439][T19152] netlink: 'syz.5.2977': attribute type 7 has an invalid length. [ 1178.321233][T19152] netlink: 'syz.5.2977': attribute type 8 has an invalid length. [ 1178.401079][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1178.409164][ T10] dvb-usb: error while querying for an remote control event. [ 1178.591278][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1178.608164][ T10] dvb-usb: error while querying for an remote control event. [ 1178.815814][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1178.822980][ T10] dvb-usb: error while querying for an remote control event. [ 1178.990256][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1178.996087][ T10] dvb-usb: error while querying for an remote control event. [ 1179.184706][ T5167] Bluetooth: hci2: command tx timeout [ 1179.190343][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1179.280118][ T10] dvb-usb: error while querying for an remote control event. [ 1179.451066][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 1179.461605][ T978] dvb-usb: error while querying for an remote control event. [ 1179.510282][ T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1179.667418][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 1179.673994][ T978] dvb-usb: error while querying for an remote control event. [ 1179.734436][T19168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2981'. [ 1179.747909][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1179.757178][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.765477][ T10] usb 3-1: Product: syz [ 1179.769840][ T10] usb 3-1: Manufacturer: syz [ 1179.785427][ T10] usb 3-1: SerialNumber: syz [ 1179.806989][ T10] usb 3-1: config 0 descriptor?? [ 1179.818310][ T10] usb 3-1: interface 1 not found [ 1179.840083][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1179.846974][ T10] dvb-usb: error while querying for an remote control event. [ 1180.020368][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1180.042837][ T10] dvb-usb: error while querying for an remote control event. [ 1180.154779][ T10] usb 6-1: USB disconnect, device number 69 [ 1180.285367][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1180.346494][ T5961] team0 (unregistering): Port device team_slave_1 removed [ 1180.435620][ T5961] team0 (unregistering): Port device team_slave_0 removed [ 1181.268581][T13492] usb 3-1: USB disconnect, device number 88 [ 1181.947000][T19196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2984'. [ 1182.338355][T19063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1182.427733][T19063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1182.646319][T19200] 9pnet_fd: Insufficient options for proto=fd [ 1183.128000][T19063] team0: Port device team_slave_0 added [ 1183.141932][T19063] team0: Port device team_slave_1 added [ 1183.517934][T19063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.534552][T19063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.639168][T19063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.705181][T19063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.794800][T19063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.985989][T19225] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1184.032850][T19063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.125416][T19063] hsr_slave_0: entered promiscuous mode [ 1184.149492][T19063] hsr_slave_1: entered promiscuous mode [ 1184.165630][T19063] debugfs: 'hsr0' already exists in 'hsr' [ 1184.177285][T19063] Cannot create hsr debugfs directory [ 1186.020868][ T24] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1186.043523][T19063] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1186.080563][T19063] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1186.134306][T19063] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1186.243682][T19063] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1186.294777][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1186.320315][ T24] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1186.335119][ T24] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1186.355912][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1186.728817][ T24] usb 1-1: config 1 has no interface number 0 [ 1186.798992][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1186.823529][ T24] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1186.850101][ T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1186.984705][T19063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.005958][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.031399][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1187.111313][T19063] 8021q: adding VLAN 0 to HW filter on device team0 [ 1187.239637][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.246744][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.256689][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1187.367149][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.374273][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.512305][T19063] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1187.603882][T19063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1187.779737][ T5975] usb 1-1: USB disconnect, device number 91 [ 1187.793158][ T5975] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1188.210882][ T24] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1188.517844][ T24] usb 3-1: config 0 has no interfaces? [ 1188.545402][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1188.612494][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.653402][T19063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.680141][ T24] usb 3-1: Product: syz [ 1188.700214][ T24] usb 3-1: Manufacturer: syz [ 1188.731244][ T24] usb 3-1: SerialNumber: syz [ 1188.792648][ T24] usb 3-1: config 0 descriptor?? [ 1189.186216][T13492] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1189.630465][T19063] veth0_vlan: entered promiscuous mode [ 1189.655373][T19063] veth1_vlan: entered promiscuous mode [ 1189.708111][T19063] veth0_macvtap: entered promiscuous mode [ 1189.710387][T13492] usb 6-1: Using ep0 maxpacket: 32 [ 1189.719360][T19063] veth1_macvtap: entered promiscuous mode [ 1189.745574][T13492] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1189.754124][T13492] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1189.763185][T13492] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1189.775424][T13492] usb 6-1: config 1 has no interface number 0 [ 1189.783238][T13492] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1189.813695][T19063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.817686][T13492] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1189.848865][T13492] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1189.852760][T19063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.859371][T13492] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.898706][T13492] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1189.910176][T12907] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1189.931656][ T6566] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.943824][ T6566] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.954544][ T6566] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.979069][ T6566] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.072284][T12907] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1190.087323][T12907] usb 2-1: config 192 has an invalid interface number: 142 but max is 0 [ 1190.110777][T13492] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1190.121990][T12907] usb 2-1: config 192 has no interface number 0 [ 1190.139031][T12907] usb 2-1: config 192 interface 142 altsetting 5 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1190.159490][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.178123][T12907] usb 2-1: config 192 interface 142 has no altsetting 0 [ 1190.186911][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.228515][T12907] usb 2-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=1e.52 [ 1190.267276][T12907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.297593][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.306605][T12907] usb 2-1: Product: syz [ 1190.315589][T12907] usb 2-1: Manufacturer: syz [ 1190.359818][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.375806][T12907] usb 2-1: SerialNumber: syz [ 1190.616752][T12907] s2255 2-1:192.142: Could not find bulk-in endpoint [ 1190.697941][T12907] Sensoray 2255 driver load failed: 0xfffffff4 [ 1190.698019][ T24] usb 6-1: USB disconnect, device number 70 [ 1190.718989][ T24] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1190.722842][T12907] s2255 2-1:192.142: probe with driver s2255 failed with error -12 [ 1190.738236][T12907] usb 2-1: USB disconnect, device number 75 [ 1190.842210][ T10] usb 3-1: USB disconnect, device number 89 [ 1191.730202][T12907] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1191.885902][T12907] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1191.903151][T12907] usb 2-1: config 192 has an invalid interface number: 142 but max is 0 [ 1191.928152][T12907] usb 2-1: config 192 has no interface number 0 [ 1191.944110][T12907] usb 2-1: config 192 interface 142 altsetting 5 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1192.008283][T12907] usb 2-1: config 192 interface 142 has no altsetting 0 [ 1192.116118][T12907] usb 2-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=1e.52 [ 1192.125772][T12907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.155227][T12907] usb 2-1: Product: syz [ 1192.160529][T12907] usb 2-1: Manufacturer: syz [ 1192.180155][T12907] usb 2-1: SerialNumber: syz [ 1192.717890][T12907] s2255 2-1:192.142: Could not find bulk-in endpoint [ 1192.730593][T12907] Sensoray 2255 driver load failed: 0xfffffff4 [ 1192.740323][T12907] s2255 2-1:192.142: probe with driver s2255 failed with error -12 [ 1192.836998][T12907] usb 2-1: USB disconnect, device number 76 [ 1195.179447][T19412] 9pnet_fd: Insufficient options for proto=fd [ 1198.691643][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3017'. [ 1200.190368][T19479] create_pit_timer: 28 callbacks suppressed [ 1200.190383][T19479] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1200.404615][T19478] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1200.412993][T19478] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1200.426337][T19478] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1200.447371][T19478] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1200.499912][T19478] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1200.509710][T19478] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1200.692529][T19478] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1200.714650][T19478] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1201.096477][T19478] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1205.760103][T12907] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1206.355437][T12907] usb 1-1: config 0 has no interfaces? [ 1206.361511][T12907] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1206.370603][T12907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.381694][T12907] usb 1-1: config 0 descriptor?? [ 1206.508567][T19554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3035'. [ 1206.658257][ T5975] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1206.890197][ T5975] usb 5-1: Using ep0 maxpacket: 32 [ 1206.905671][ T5975] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1206.914391][ T5975] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1206.930152][ T5975] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1207.405565][ T5975] usb 5-1: config 1 has no interface number 0 [ 1207.428672][ T5975] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1207.442917][ T5975] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1207.456208][ T5975] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1207.465562][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.483051][ T5975] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1207.688187][ T5975] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1208.262822][ T10] usb 1-1: USB disconnect, device number 92 [ 1208.315015][ T5975] usb 5-1: USB disconnect, device number 63 [ 1208.359299][ T5975] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1208.391948][ T978] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1208.622406][ T978] usb 3-1: config 0 has no interfaces? [ 1208.631037][ T978] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1208.640135][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.648093][ T978] usb 3-1: Product: syz [ 1208.660299][ T978] usb 3-1: Manufacturer: syz [ 1208.677337][ T978] usb 3-1: SerialNumber: syz [ 1208.759348][ T978] usb 3-1: config 0 descriptor?? [ 1210.637936][ T24] usb 3-1: USB disconnect, device number 90 [ 1212.964532][T19623] create_pit_timer: 28 callbacks suppressed [ 1212.964543][T19623] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1213.087105][T19623] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1213.179579][T19623] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1213.190141][T19623] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1213.201193][T19623] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1213.210277][T19623] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1213.225184][T19623] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1213.250176][T19623] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1213.264226][T19623] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1213.294485][T19623] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1214.004221][ T10] hid_parser_main: 4 callbacks suppressed [ 1214.004233][ T10] hid-generic 00A0:0006:0003.001F: unknown main item tag 0x0 [ 1214.018820][ T10] hid-generic 00A0:0006:0003.001F: unknown main item tag 0x0 [ 1214.097775][ T10] hid-generic 00A0:0006:0003.001F: unknown main item tag 0x0 [ 1214.400101][ T10] hid-generic 00A0:0006:0003.001F: unknown main item tag 0x0 [ 1214.417717][ T978] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1214.459950][ T10] hid-generic 00A0:0006:0003.001F: unknown main item tag 0x0 [ 1214.550107][ T10] hid-generic 00A0:0006:0003.001F: unknown main item tag 0x0 [ 1214.558592][ T10] hid-generic 00A0:0006:0003.001F: unknown main item tag 0x0 [ 1214.591761][ T10] hid-generic 00A0:0006:0003.001F: unknown main item tag 0x0 [ 1214.605299][ T10] hid-generic 00A0:0006:0003.001F: unknown main item tag 0x0 [ 1214.616502][ T10] hid-generic 00A0:0006:0003.001F: unknown main item tag 0x0 [ 1214.617427][T18682] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1214.639401][T18682] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1214.650634][T18682] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1214.661659][T18682] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1214.669762][T18682] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1214.844779][ T10] hid-generic 00A0:0006:0003.001F: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1214.864035][ T978] usb 3-1: config 0 has no interfaces? [ 1214.870802][ T978] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1214.879977][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.328945][ T978] usb 3-1: config 0 descriptor?? [ 1215.809881][ T1006] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.792252][ T1006] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.850631][ T5167] Bluetooth: hci0: command tx timeout [ 1217.678384][ T1006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.307562][T19644] chnl_net:caif_netlink_parms(): no params data found [ 1218.726506][ T1006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.824554][T19092] usb 3-1: USB disconnect, device number 91 [ 1218.930229][ T978] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 1218.939168][ T5167] Bluetooth: hci0: command tx timeout [ 1219.254072][ T978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.292534][ T978] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1219.343407][ T978] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1219.380427][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.437269][ T978] usb 1-1: config 0 descriptor?? [ 1219.466604][ T978] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1219.491031][ T978] dvb-usb: bulk message failed: -22 (3/0) [ 1219.540882][T12907] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1219.559064][T19644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.611590][ T978] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1219.638064][T19644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.660975][ T978] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1219.665661][T19644] bridge_slave_0: entered allmulticast mode [ 1219.694077][T19684] SELinux: truncated policydb string identifier [ 1219.700969][T19684] SELinux: failed to load policy [ 1219.740129][T19684] dibusb: i2c wr: len=61 is too big! [ 1219.740129][T19684] [ 1219.766711][T19684] netlink: 'syz.0.3064': attribute type 6 has an invalid length. [ 1219.776509][T19684] netlink: 'syz.0.3064': attribute type 7 has an invalid length. [ 1219.785728][T19684] netlink: 'syz.0.3064': attribute type 8 has an invalid length. [ 1219.876309][ T978] usb 1-1: media controller created [ 1219.901191][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1219.913449][T19644] bridge_slave_0: entered promiscuous mode [ 1219.954130][T12907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.977849][T19644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.988097][T19644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.052237][T19644] bridge_slave_1: entered allmulticast mode [ 1220.067926][T19644] bridge_slave_1: entered promiscuous mode [ 1220.084297][T12907] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1220.093771][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 1220.105093][ T978] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1220.112392][T12907] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1220.125526][ T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input59 [ 1220.140052][T12907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.189214][ T978] dvb-usb: schedule remote query interval to 150 msecs. [ 1220.222981][ T978] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1220.231244][T12907] usb 3-1: config 0 descriptor?? [ 1220.261341][T12907] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1220.307669][T12907] dvb-usb: bulk message failed: -22 (3/0) [ 1220.347407][T12907] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1220.388446][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 1220.413089][T12907] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1220.431588][ T978] dvb-usb: error while querying for an remote control event. [ 1220.478299][T12907] usb 3-1: media controller created [ 1220.504141][T19644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.534256][T12907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1220.579024][T19644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.600433][T12907] dvb-usb: bulk message failed: -22 (6/0) [ 1220.639537][T12907] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1220.650865][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 1220.661430][ T1006] bridge_slave_1: left allmulticast mode [ 1220.667201][ T1006] bridge_slave_1: left promiscuous mode [ 1220.685198][T19703] SELinux: truncated policydb string identifier [ 1220.692633][T19703] SELinux: failed to load policy [ 1220.732172][ T978] dvb-usb: error while querying for an remote control event. [ 1220.732817][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.784069][T19703] dibusb: i2c wr: len=61 is too big! [ 1220.784069][T19703] [ 1220.793131][T19703] netlink: 'syz.2.3069': attribute type 6 has an invalid length. [ 1220.802289][T12907] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input60 [ 1220.813446][T19703] netlink: 'syz.2.3069': attribute type 7 has an invalid length. [ 1220.821488][T19703] netlink: 'syz.2.3069': attribute type 8 has an invalid length. [ 1220.884885][ T1006] bridge_slave_0: left allmulticast mode [ 1220.914731][ T1006] bridge_slave_0: left promiscuous mode [ 1220.955555][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.975686][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 1220.990510][ T978] dvb-usb: error while querying for an remote control event. [ 1220.998652][T12907] dvb-usb: schedule remote query interval to 150 msecs. [ 1221.010918][T12907] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1221.022767][ T5167] Bluetooth: hci0: command tx timeout [ 1221.170101][T12907] dvb-usb: bulk message failed: -22 (1/0) [ 1221.175842][T12907] dvb-usb: error while querying for an remote control event. [ 1221.183228][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 1221.188921][ T978] dvb-usb: error while querying for an remote control event. [ 1221.681237][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 1221.739603][ T978] dvb-usb: error while querying for an remote control event. [ 1221.747560][T12907] dvb-usb: bulk message failed: -22 (1/0) [ 1221.764546][T12907] dvb-usb: error while querying for an remote control event. [ 1221.930091][T12907] dvb-usb: bulk message failed: -22 (1/0) [ 1221.940300][T12907] dvb-usb: error while querying for an remote control event. [ 1222.252706][T13492] usb 1-1: USB disconnect, device number 93 [ 1222.278887][T12907] dvb-usb: bulk message failed: -22 (1/0) [ 1222.299116][T12907] dvb-usb: error while querying for an remote control event. [ 1222.440108][T12907] dvb-usb: bulk message failed: -22 (1/0) [ 1222.445851][T12907] dvb-usb: error while querying for an remote control event. [ 1222.501501][T13492] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1222.619803][ T5975] usb 3-1: USB disconnect, device number 92 [ 1223.091483][ T5975] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1223.110673][ T5167] Bluetooth: hci0: command tx timeout [ 1224.860485][ T5975] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1225.034943][ T5975] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1225.181333][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.192570][ T5975] usb 3-1: Product: syz [ 1225.199590][ T5975] usb 3-1: Manufacturer: syz [ 1225.209608][ T5975] usb 3-1: SerialNumber: syz [ 1225.258309][ T5975] usb 3-1: config 0 descriptor?? [ 1225.274160][ T5975] usb 3-1: interface 1 not found [ 1225.590392][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.617848][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.635426][ T1006] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 1225.645841][ T1006] veth1_vlan: left allmulticast mode [ 1225.658434][ T1006] bond0 (unregistering): Released all slaves [ 1225.711986][ T1006] bond1 (unregistering): Released all slaves [ 1225.910209][ T1006] : left promiscuous mode [ 1225.992105][T19644] team0: Port device team_slave_0 added [ 1226.031481][T19644] team0: Port device team_slave_1 added [ 1226.725671][T19644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1226.895229][T19644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.003986][ T24] usb 3-1: USB disconnect, device number 93 [ 1227.128581][T19644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.655095][T19644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1228.109974][T19644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1228.145862][T19644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.321061][ T1006] hsr_slave_0: left promiscuous mode [ 1228.347496][ T1006] hsr_slave_1: left promiscuous mode [ 1228.432211][ T1006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1228.448789][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1228.462994][ T1006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1228.480046][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.512863][ T1006] veth1_macvtap: left promiscuous mode [ 1228.518590][ T1006] veth0_macvtap: left promiscuous mode [ 1228.528398][ T1006] veth1_vlan: left promiscuous mode [ 1228.535936][ T1006] veth0_vlan: left promiscuous mode [ 1229.585545][ T5975] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1229.909770][ T24] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1230.117094][ T5975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.140343][ T5975] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1230.480081][ T5975] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1230.492802][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.503153][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.519469][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1230.538464][ T24] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1230.552307][ T5975] usb 5-1: config 0 descriptor?? [ 1230.571444][ T5975] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1230.592571][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.620195][ T5975] dvb-usb: bulk message failed: -22 (3/0) [ 1230.654334][ T24] usb 3-1: config 0 descriptor?? [ 1230.803294][T19807] SELinux: truncated policydb string identifier [ 1230.810880][T19807] SELinux: failed to load policy [ 1230.831601][T19807] dibusb: i2c wr: len=61 is too big! [ 1230.831601][T19807] [ 1230.845134][T19807] netlink: 'syz.4.3084': attribute type 6 has an invalid length. [ 1230.853712][T19807] netlink: 'syz.4.3084': attribute type 7 has an invalid length. [ 1230.862629][T19807] netlink: 'syz.4.3084': attribute type 8 has an invalid length. [ 1230.949364][ T5975] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1230.967506][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1230.974999][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1230.981724][ T5975] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1230.989751][ T5975] usb 5-1: media controller created [ 1230.997398][ T5975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1231.008306][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1231.017510][T19818] SELinux: truncated policydb string identifier [ 1231.024270][T19818] SELinux: failed to load policy [ 1231.031153][T19818] dvb-usb: bulk message failed: -22 (33/0) [ 1231.044614][T19818] netlink: 'syz.2.3087': attribute type 6 has an invalid length. [ 1231.052669][T19818] netlink: 'syz.2.3087': attribute type 7 has an invalid length. [ 1231.060508][T19818] netlink: 'syz.2.3087': attribute type 8 has an invalid length. [ 1231.081852][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1231.116092][ T5975] dvb-usb: bulk message failed: -22 (6/0) [ 1231.124180][ T24] usb 3-1: media controller created [ 1231.134904][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1231.144663][ T5975] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1231.352623][ T5975] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input61 [ 1231.374506][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1231.394663][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1231.422547][ T5975] dvb-usb: schedule remote query interval to 150 msecs. [ 1231.452288][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input62 [ 1231.464643][ T5975] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1231.517954][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 1231.622056][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 1231.646551][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1231.666169][ T5975] dvb-usb: error while querying for an remote control event. [ 1231.816022][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1231.826403][ T24] dvb-usb: error while querying for an remote control event. [ 1231.840122][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 1231.858435][ T5975] dvb-usb: error while querying for an remote control event. [ 1232.080253][ T5975] usb 5-1: USB disconnect, device number 64 [ 1232.087075][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1232.092906][ T24] dvb-usb: error while querying for an remote control event. [ 1232.641860][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1232.680634][ T24] dvb-usb: error while querying for an remote control event. [ 1232.973250][T13492] dvb-usb: bulk message failed: -22 (1/0) [ 1232.979051][T13492] dvb-usb: error while querying for an remote control event. [ 1233.150386][T13492] dvb-usb: bulk message failed: -22 (1/0) [ 1233.172809][T13492] dvb-usb: error while querying for an remote control event. [ 1233.350106][T13492] dvb-usb: bulk message failed: -22 (1/0) [ 1233.355868][T13492] dvb-usb: error while querying for an remote control event. [ 1233.384584][ T1006] team0 (unregistering): Port device team_slave_1 removed [ 1233.437485][ T5975] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1233.481369][ T978] usb 3-1: USB disconnect, device number 94 [ 1233.741117][ T5975] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1233.915346][ T1006] team0 (unregistering): Port device team_slave_0 removed [ 1233.926130][T12907] hid_parser_main: 4 callbacks suppressed [ 1233.926149][T12907] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1234.106318][ T978] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1234.124984][T12907] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1234.167677][T13492] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1234.202647][T12907] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1234.223271][ T5975] usb 5-1: config 0 has no interfaces? [ 1234.228807][ T5975] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1234.253992][T12907] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1234.291497][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.294070][T12907] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1234.336407][T12907] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1234.355707][T12907] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1234.409066][ T5975] usb 5-1: config 0 descriptor?? [ 1234.503341][T12907] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1234.680667][T12907] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1234.698427][T12907] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1234.720726][T12907] hid-generic 00A0:0006:0003.0020: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1234.723888][T13492] usb 6-1: config 0 has no interfaces? [ 1234.974340][T13492] usb 6-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1235.143413][T13492] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.201296][T13492] usb 6-1: config 0 descriptor?? [ 1235.871101][T13492] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1236.011467][T13492] usb 1-1: device descriptor read/64, error -71 [ 1236.210859][ T24] usb 5-1: USB disconnect, device number 65 [ 1236.250099][T13492] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1236.439909][T13492] usb 1-1: device descriptor read/64, error -71 [ 1236.893393][T19644] hsr_slave_0: entered promiscuous mode [ 1236.938523][T19644] hsr_slave_1: entered promiscuous mode [ 1236.960923][T13492] usb usb1-port1: attempt power cycle [ 1237.215677][ T24] usb 6-1: USB disconnect, device number 71 [ 1237.300104][T13492] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1237.329943][T13492] usb 1-1: device descriptor read/8, error -71 [ 1238.394976][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.408871][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.430117][T13492] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1239.106419][T13492] usb 1-1: device descriptor read/8, error -71 [ 1239.655609][T13492] usb usb1-port1: unable to enumerate USB device [ 1240.205113][T19916] create_pit_timer: 19 callbacks suppressed [ 1240.205223][T19916] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1240.298489][T19916] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1240.339765][T19916] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1240.385630][T19916] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1240.400957][T19916] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1240.429791][T19916] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1240.463950][T19916] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1240.492213][T19916] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1240.510273][T12907] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1240.521462][T19916] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1240.527981][T19644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1240.534352][T19916] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1240.548749][T19644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1240.563921][T19644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1240.602228][T19644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1240.640121][ T5955] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1240.690550][T12907] usb 1-1: Using ep0 maxpacket: 32 [ 1240.699612][T12907] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1240.713823][T12907] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1240.738432][T12907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1240.741513][T19644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.749884][T12907] usb 1-1: config 1 has no interface number 0 [ 1240.763540][T12907] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1240.777674][T12907] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1240.793820][T12907] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1240.804959][T12907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.813362][ T5955] usb 6-1: Using ep0 maxpacket: 32 [ 1240.906303][ T5955] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1240.920739][ T5955] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1240.959032][T12907] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1240.967520][ T5955] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1240.981437][T19644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.986857][ T5955] usb 6-1: config 1 has no interface number 0 [ 1241.002962][ T5955] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1241.019077][ T5955] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1241.038294][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.045612][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.128640][T12907] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1241.144764][ T5955] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1241.155903][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.163123][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1241.213482][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.563236][ T5955] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1241.763952][ T5955] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1241.784478][T13492] usb 1-1: USB disconnect, device number 98 [ 1241.804046][T13492] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1242.218687][T19644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1242.317030][T19644] veth0_vlan: entered promiscuous mode [ 1242.325641][T12907] usb 6-1: USB disconnect, device number 72 [ 1242.334794][T12907] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1242.362466][T19644] veth1_vlan: entered promiscuous mode [ 1242.453438][T19644] veth0_macvtap: entered promiscuous mode [ 1242.464965][ T5955] hid_parser_main: 4 callbacks suppressed [ 1242.464982][ T5955] hid-generic 00A0:0006:0003.0021: unknown main item tag 0x0 [ 1242.475355][T19644] veth1_macvtap: entered promiscuous mode [ 1242.835371][ T5955] hid-generic 00A0:0006:0003.0021: unknown main item tag 0x0 [ 1242.857214][T19644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1242.865436][ T5955] hid-generic 00A0:0006:0003.0021: unknown main item tag 0x0 [ 1242.876358][ T5955] hid-generic 00A0:0006:0003.0021: unknown main item tag 0x0 [ 1242.920673][T19644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1242.947739][ T5955] hid-generic 00A0:0006:0003.0021: unknown main item tag 0x0 [ 1242.972573][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.989972][ T5955] hid-generic 00A0:0006:0003.0021: unknown main item tag 0x0 [ 1243.009879][ T6566] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.061253][ T5955] hid-generic 00A0:0006:0003.0021: unknown main item tag 0x0 [ 1243.068693][ T5955] hid-generic 00A0:0006:0003.0021: unknown main item tag 0x0 [ 1243.110167][T12907] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 1243.334867][ T6566] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.554056][ T5955] hid-generic 00A0:0006:0003.0021: unknown main item tag 0x0 [ 1243.623634][ T5955] hid-generic 00A0:0006:0003.0021: unknown main item tag 0x0 [ 1243.660898][ T5955] hid-generic 00A0:0006:0003.0021: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1243.670561][ T6566] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.723434][T12907] usb 5-1: config 0 has no interfaces? [ 1243.728926][T12907] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1243.745871][T12907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.784674][T12907] usb 5-1: config 0 descriptor?? [ 1243.827345][ T9341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.845368][ T9341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.337656][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.349924][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.422199][T12907] usb 5-1: USB disconnect, device number 66 [ 1247.321518][T12907] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1247.504567][T18682] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1247.525772][T18682] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1247.538369][T18682] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1247.605394][T18682] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1247.614114][T18682] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1247.649781][T12907] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.812273][T12907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1247.858368][T12907] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1247.884008][T12907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.965794][T12907] usb 5-1: config 0 descriptor?? [ 1247.988962][ T6566] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.006742][T12907] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1248.021362][T12907] dvb-usb: bulk message failed: -22 (3/0) [ 1248.059076][T12907] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1248.119914][ T6566] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.200490][ T6566] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.240132][T12907] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1248.352977][T20050] netlink: 'syz.4.3121': attribute type 6 has an invalid length. [ 1248.360900][T12907] usb 5-1: media controller created [ 1248.370375][T20050] netlink: 'syz.4.3121': attribute type 7 has an invalid length. [ 1248.378298][T20050] netlink: 'syz.4.3121': attribute type 8 has an invalid length. [ 1248.426717][ T6566] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.506491][T20055] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1248.522300][T12907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1248.536124][T12907] dvb-usb: bulk message failed: -22 (6/0) [ 1248.543047][T12907] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1248.577671][T12907] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input63 [ 1248.649142][T12907] dvb-usb: schedule remote query interval to 150 msecs. [ 1248.755664][ T6566] bridge_slave_1: left allmulticast mode [ 1248.771209][ T6566] bridge_slave_1: left promiscuous mode [ 1248.774097][T12907] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1248.871587][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.927159][ T6566] bridge_slave_0: left allmulticast mode [ 1248.932942][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 1248.938683][ T978] dvb-usb: error while querying for an remote control event. [ 1248.954009][ T6566] bridge_slave_0: left promiscuous mode [ 1248.967129][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.102852][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1249.122372][T19981] dvb-usb: error while querying for an remote control event. [ 1249.300143][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1249.307215][T19981] dvb-usb: error while querying for an remote control event. [ 1249.480170][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1249.488922][T19981] dvb-usb: error while querying for an remote control event. [ 1249.690881][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1249.708591][T19981] dvb-usb: error while querying for an remote control event. [ 1249.731346][T18682] Bluetooth: hci3: command tx timeout [ 1249.910506][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 1249.917566][ T978] dvb-usb: error while querying for an remote control event. [ 1250.237361][ T978] usb 5-1: USB disconnect, device number 67 [ 1250.258554][ T978] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1250.899662][ T6566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1250.933909][ T6566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1250.945723][ T6566] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 1250.955779][ T6566] veth1_vlan: left allmulticast mode [ 1250.963083][ T6566] bond0 (unregistering): Released all slaves [ 1250.977373][T20039] chnl_net:caif_netlink_parms(): no params data found [ 1251.020358][T19981] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1251.235847][ T6566] : left promiscuous mode [ 1251.311357][T19981] usb 5-1: config 0 has no interfaces? [ 1251.321126][T20119] create_pit_timer: 57 callbacks suppressed [ 1251.321141][T20119] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1251.355545][T19981] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1251.426321][T19981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.448038][T19981] usb 5-1: Product: syz [ 1251.453560][T19981] usb 5-1: Manufacturer: syz [ 1251.458277][T19981] usb 5-1: SerialNumber: syz [ 1251.498113][T19981] usb 5-1: config 0 descriptor?? [ 1251.631491][T20039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.653794][T20115] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1251.660151][T20039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.661925][T20115] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1251.683306][T20115] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1251.821958][T20115] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1251.840448][T18682] Bluetooth: hci3: command tx timeout [ 1251.868434][T20039] bridge_slave_0: entered allmulticast mode [ 1251.894541][T20039] bridge_slave_0: entered promiscuous mode [ 1251.926605][T20039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.940871][T20115] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1251.950185][T20115] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1251.953644][T20039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.966880][T20039] bridge_slave_1: entered allmulticast mode [ 1251.974584][T20115] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1252.056087][T20115] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1252.057632][T20039] bridge_slave_1: entered promiscuous mode [ 1252.072703][T20115] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1252.328752][T20039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.522779][T20039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.652510][ T6566] hsr_slave_0: left promiscuous mode [ 1252.667316][ T6566] hsr_slave_1: left promiscuous mode [ 1252.685842][ T6566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1252.732746][ T6566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.768628][ T6566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1252.787254][ T6566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.845126][ T6566] veth1_macvtap: left promiscuous mode [ 1252.856400][ T6566] veth0_macvtap: left promiscuous mode [ 1252.871311][ T6566] veth1_vlan: left promiscuous mode [ 1252.885497][ T6566] veth0_vlan: left promiscuous mode [ 1253.648148][ T5975] usb 5-1: USB disconnect, device number 68 [ 1253.890214][T18682] Bluetooth: hci3: command tx timeout [ 1255.750640][ T6566] team0 (unregistering): Port device team_slave_1 removed [ 1255.794020][T20181] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1256.061980][T18682] Bluetooth: hci3: command tx timeout [ 1256.248695][ T6566] team0 (unregistering): Port device team_slave_0 removed [ 1256.640188][T19981] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1256.812103][T19981] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1256.820727][T19981] usb 6-1: config 192 has an invalid interface number: 142 but max is 0 [ 1256.829276][T19981] usb 6-1: config 192 has no interface number 0 [ 1256.836178][T19981] usb 6-1: config 192 interface 142 altsetting 5 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1256.849017][T19981] usb 6-1: config 192 interface 142 has no altsetting 0 [ 1256.912675][T19981] usb 6-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=1e.52 [ 1256.921942][T19981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.930535][T19981] usb 6-1: Product: syz [ 1256.946868][T19981] usb 6-1: Manufacturer: syz [ 1256.957655][T19981] usb 6-1: SerialNumber: syz [ 1257.089018][T20039] team0: Port device team_slave_0 added [ 1257.139424][T20039] team0: Port device team_slave_1 added [ 1257.200379][T19981] s2255 6-1:192.142: Could not find bulk-in endpoint [ 1257.214247][T20039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1257.224815][T19981] Sensoray 2255 driver load failed: 0xfffffff4 [ 1257.232869][T20039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.471262][T20039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.480755][T19981] s2255 6-1:192.142: probe with driver s2255 failed with error -12 [ 1257.493481][T19981] usb 6-1: USB disconnect, device number 73 [ 1257.507295][T20039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.516309][T20039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.635279][T20039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.837622][T20039] hsr_slave_0: entered promiscuous mode [ 1257.949786][T20039] hsr_slave_1: entered promiscuous mode [ 1257.959282][T20039] debugfs: 'hsr0' already exists in 'hsr' [ 1257.967037][T20039] Cannot create hsr debugfs directory [ 1258.778412][T20217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3144'. [ 1259.933724][T20231] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3146'. [ 1262.337720][T20039] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1262.642924][T20039] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1262.719240][T20039] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1262.833907][T20039] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1264.104662][ T5975] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1264.262099][T20039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.302620][T20039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.318837][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.325951][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.360680][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.367914][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.411077][T20295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3156'. [ 1264.445512][ T5975] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1264.470340][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.478362][ T5975] usb 6-1: Product: syz [ 1264.511728][ T5975] usb 6-1: Manufacturer: syz [ 1264.516543][ T5975] usb 6-1: SerialNumber: syz [ 1264.552033][ T5975] usb 6-1: config 0 descriptor?? [ 1264.562110][T20039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1264.574038][ T5975] usb 6-1: interface 1 not found [ 1265.786846][T20039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1265.931397][T20039] veth0_vlan: entered promiscuous mode [ 1265.972032][ T5167] Bluetooth: hci5: command 0x0406 tx timeout [ 1266.019911][T20039] veth1_vlan: entered promiscuous mode [ 1266.094655][T20039] veth0_macvtap: entered promiscuous mode [ 1266.316973][ T5975] usb 6-1: USB disconnect, device number 74 [ 1266.731910][T20334] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3160'. [ 1266.879017][T20039] veth1_macvtap: entered promiscuous mode [ 1267.339429][T20039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1267.353713][T20039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1267.380151][ T1006] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.459914][ T1006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.479789][ T1006] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.533380][ T1006] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.121571][ T5961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.205908][ T5961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.264042][ T9341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.307920][ T9341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.330164][ T5955] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1268.368050][T20351] create_pit_timer: 104 callbacks suppressed [ 1268.368063][T20351] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1268.389559][T20351] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1268.397505][T20351] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1268.407520][T20351] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1268.416708][T20351] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1268.427868][T20351] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1268.465501][T20351] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1268.475785][T20351] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1268.506281][T20351] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1268.517468][T20351] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1268.562570][ T5955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.599933][ T5955] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1268.610155][ T5955] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1268.629109][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.666523][ T5955] usb 5-1: config 0 descriptor?? [ 1268.680925][ T5955] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1268.689726][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 1268.988396][ T5955] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1269.019673][T20348] SELinux: truncated policydb string identifier [ 1269.027925][T20348] SELinux: failed to load policy [ 1269.038119][T20348] dibusb: i2c wr: len=61 is too big! [ 1269.038119][T20348] [ 1269.048314][T20348] netlink: 'syz.4.3163': attribute type 6 has an invalid length. [ 1269.084329][T20348] netlink: 'syz.4.3163': attribute type 7 has an invalid length. [ 1269.108308][ T5955] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1269.134113][ T5955] usb 5-1: media controller created [ 1269.156435][T20348] netlink: 'syz.4.3163': attribute type 8 has an invalid length. [ 1269.192947][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1269.272078][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 1269.279353][ T5955] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1269.310172][ T5955] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input64 [ 1269.562174][ T5955] dvb-usb: schedule remote query interval to 150 msecs. [ 1269.573271][ T5955] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1269.740789][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1269.747370][T19981] dvb-usb: error while querying for an remote control event. [ 1269.920586][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1269.927436][T19981] dvb-usb: error while querying for an remote control event. [ 1270.091502][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1270.137868][T19981] dvb-usb: error while querying for an remote control event. [ 1270.212337][T20376] netdevsim netdevsim1: Direct firmware load for . [ 1270.212337][T20376] failed with error -2 [ 1270.260991][T20376] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1270.260991][T20376] [ 1270.440154][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 1270.447244][ T5955] dvb-usb: error while querying for an remote control event. [ 1270.550157][T19981] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1270.671546][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 1270.677499][ T5955] dvb-usb: error while querying for an remote control event. [ 1270.767580][T19981] usb 3-1: Using ep0 maxpacket: 32 [ 1270.798488][T19981] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1270.813812][T19981] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1270.898895][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 1270.954804][ T5955] dvb-usb: error while querying for an remote control event. [ 1270.960081][ T5975] usb 5-1: USB disconnect, device number 69 [ 1270.966158][T19981] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1271.030088][T19981] usb 3-1: config 1 has no interface number 0 [ 1271.096393][T20372] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3168'. [ 1271.133001][T19981] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1271.752058][T19981] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1271.765238][T19981] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1271.775035][T19981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.883715][ T5975] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1271.901457][T19981] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1272.082647][T19981] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1272.602902][T20404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3173'. [ 1272.835775][ T5975] usb 3-1: USB disconnect, device number 95 [ 1272.845897][ T5975] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1273.940214][ T5975] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1274.180175][ T5975] usb 6-1: Using ep0 maxpacket: 32 [ 1274.617178][ T5975] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1274.640050][ T5975] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1274.648935][ T5975] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1274.658688][ T5975] usb 6-1: config 1 has no interface number 0 [ 1275.109138][ T5975] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1275.133563][ T5975] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1275.160905][ T5975] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1275.284509][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.341942][ T5975] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1275.616106][ T5975] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1275.939013][T20449] create_pit_timer: 19 callbacks suppressed [ 1275.939031][T20449] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1276.248634][ T5975] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1276.312689][T19981] usb 6-1: USB disconnect, device number 75 [ 1276.321994][T19981] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1276.420074][ T5975] usb 5-1: Using ep0 maxpacket: 32 [ 1276.428224][ T5975] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1276.440115][ T978] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1276.449487][T20450] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1276.463029][T20450] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1276.464578][ T5975] usb 5-1: config 0 has no interface number 0 [ 1276.550231][T20450] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1276.593845][T20450] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1276.609651][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.642475][T20450] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1276.650459][T20450] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1276.658692][ T5975] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1276.660507][ T978] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1276.671072][ T5975] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1276.686771][T20450] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1276.701006][T20450] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1276.763877][ T978] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1276.770167][T20450] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1276.773024][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.788880][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.797601][ T5975] usb 5-1: Product: syz [ 1276.797917][ T978] usb 2-1: config 0 descriptor?? [ 1276.830196][ T5975] usb 5-1: Manufacturer: syz [ 1276.835009][ T5975] usb 5-1: SerialNumber: syz [ 1276.878048][ T5975] usb 5-1: config 0 descriptor?? [ 1276.878486][ T978] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1276.910658][ T978] dvb-usb: bulk message failed: -22 (3/0) [ 1276.925101][ T978] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1276.936610][ T978] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1276.954495][ T5975] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1276.966990][ T978] usb 2-1: media controller created [ 1276.979432][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1277.026412][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 1277.035035][ T978] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1277.054883][T20452] SELinux: truncated policydb string identifier [ 1277.061440][T20452] SELinux: failed to load policy [ 1277.068181][T20452] dibusb: i2c wr: len=61 is too big! [ 1277.068181][T20452] [ 1277.098113][T20452] netlink: 'syz.1.3182': attribute type 6 has an invalid length. [ 1277.106047][T20452] netlink: 'syz.1.3182': attribute type 7 has an invalid length. [ 1277.113828][T20452] netlink: 'syz.1.3182': attribute type 8 has an invalid length. [ 1277.158665][ T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input65 [ 1277.200645][ T5975] em28xx 5-1:0.132: Video interface 132 found: [ 1277.343269][ T978] dvb-usb: schedule remote query interval to 150 msecs. [ 1277.440113][ T978] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1277.450117][ T5975] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1277.600922][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 1277.602665][ T5975] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1277.620821][ T978] dvb-usb: error while querying for an remote control event. [ 1278.419076][ T5975] em28xx 5-1:0.132: board has no eeprom [ 1278.570090][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 1278.575857][ T978] dvb-usb: error while querying for an remote control event. [ 1278.668615][ T5975] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1278.694581][ T5975] em28xx 5-1:0.132: analog set to bulk mode. [ 1278.703239][T19114] em28xx 5-1:0.132: Registering V4L2 extension [ 1278.740171][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 1278.745937][ T978] dvb-usb: error while querying for an remote control event. [ 1278.748520][ T5975] usb 5-1: USB disconnect, device number 70 [ 1278.786817][ T5975] em28xx 5-1:0.132: Disconnecting em28xx [ 1278.949099][T19092] usb 2-1: USB disconnect, device number 77 [ 1279.020435][T20477] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3189'. [ 1279.085457][T20479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3188'. [ 1279.118212][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 1279.147647][ T978] dvb-usb: error while querying for an remote control event. [ 1279.211277][T19092] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1279.411312][T19114] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1279.443886][T19114] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1279.487391][T19114] em28xx 5-1:0.132: No AC97 audio processor [ 1279.495813][ T24] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1279.531538][T20485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3191'. [ 1279.656735][T19114] usb 5-1: Decoder not found [ 1279.681231][T19114] em28xx 5-1:0.132: failed to create media graph [ 1279.712921][T19114] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1280.052665][T19114] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1280.166738][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1280.215493][ T5975] em28xx 5-1:0.132: Closing input extension [ 1280.223817][ T24] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1280.240052][ T24] usb 1-1: config 0 has no interface number 0 [ 1280.246196][ T24] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1280.261062][ T5975] em28xx 5-1:0.132: Freeing device [ 1280.321482][ T24] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1280.330729][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.338721][ T24] usb 1-1: Product: syz [ 1280.437843][ T24] usb 1-1: Manufacturer: syz [ 1280.447913][ T24] usb 1-1: SerialNumber: syz [ 1280.468547][ T24] usb 1-1: config 0 descriptor?? [ 1280.486753][ T24] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1280.539115][T20494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3192'. [ 1280.558534][ T24] em28xx 1-1:0.132: Video interface 132 found: [ 1280.714325][T20498] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3194'. [ 1280.896572][ T24] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1280.970091][ T5975] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1281.111603][ T24] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1281.127120][ T24] em28xx 1-1:0.132: board has no eeprom [ 1281.133415][ T5975] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1281.153123][ T5975] usb 5-1: config 192 has an invalid interface number: 142 but max is 0 [ 1281.180890][ T5975] usb 5-1: config 192 has no interface number 0 [ 1281.204626][ T5975] usb 5-1: config 192 interface 142 altsetting 5 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1281.220076][ T24] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1281.228075][ T24] em28xx 1-1:0.132: analog set to bulk mode. [ 1281.239727][ T5975] usb 5-1: config 192 interface 142 has no altsetting 0 [ 1281.267174][T19114] em28xx 1-1:0.132: Registering V4L2 extension [ 1281.291891][ T5975] usb 5-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=1e.52 [ 1281.326535][ T24] usb 1-1: USB disconnect, device number 99 [ 1281.337059][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.355003][ T24] em28xx 1-1:0.132: Disconnecting em28xx [ 1281.363643][ T5975] usb 5-1: Product: syz [ 1281.369150][ T5975] usb 5-1: Manufacturer: syz [ 1281.374511][ T5975] usb 5-1: SerialNumber: syz [ 1281.709389][ T5975] s2255 5-1:192.142: Could not find bulk-in endpoint [ 1281.719174][ T5975] Sensoray 2255 driver load failed: 0xfffffff4 [ 1281.809604][ T5975] s2255 5-1:192.142: probe with driver s2255 failed with error -12 [ 1281.902437][T19114] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1281.921956][ T5975] usb 5-1: USB disconnect, device number 71 [ 1282.003273][T19114] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1282.053292][T19114] em28xx 1-1:0.132: No AC97 audio processor [ 1282.341476][T19114] usb 1-1: Decoder not found [ 1282.364622][T19114] em28xx 1-1:0.132: failed to create media graph [ 1282.384541][T19114] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1282.405922][T19114] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1282.580103][ T24] em28xx 1-1:0.132: Closing input extension [ 1282.761289][ T24] em28xx 1-1:0.132: Freeing device [ 1283.111960][T20522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3199'. [ 1283.406203][T20527] create_pit_timer: 28 callbacks suppressed [ 1283.406215][T20527] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1284.368524][T20527] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1284.475103][T20527] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1284.764755][T20527] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1284.785329][T20527] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1284.826782][T20527] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1284.845612][T20527] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1284.863079][T20527] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1285.056923][T20527] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1285.211082][T20527] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1289.070369][ T5955] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1289.230086][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 1289.291724][ T5955] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1289.300497][ T5955] usb 5-1: config 0 has no interface number 0 [ 1289.316731][ T5955] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1289.331630][ T5955] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1289.341079][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.356771][ T5955] usb 5-1: Product: syz [ 1289.367017][ T5955] usb 5-1: Manufacturer: syz [ 1289.380014][ T5955] usb 5-1: SerialNumber: syz [ 1289.600351][ T5955] usb 5-1: config 0 descriptor?? [ 1289.631118][ T5955] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1289.642441][ T5955] em28xx 5-1:0.132: Video interface 132 found: [ 1289.738817][T20604] netdevsim netdevsim0: Direct firmware load for . [ 1289.738817][T20604] failed with error -2 [ 1289.754351][T20604] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1289.754351][T20604] [ 1290.080144][ T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1290.082082][ T5955] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1290.182072][ T5955] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1290.191719][ T5955] em28xx 5-1:0.132: board has no eeprom [ 1290.250360][ T5955] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1290.250765][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1290.265799][ T5955] em28xx 5-1:0.132: analog set to bulk mode. [ 1290.272285][T19981] em28xx 5-1:0.132: Registering V4L2 extension [ 1290.286659][ T5955] usb 5-1: USB disconnect, device number 72 [ 1290.301226][ T24] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1290.309942][ T24] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1290.322386][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1290.344708][ T5955] em28xx 5-1:0.132: Disconnecting em28xx [ 1290.348060][ T24] usb 2-1: config 1 has no interface number 0 [ 1290.357225][ T24] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1290.370677][ T24] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1290.373462][T20616] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer. [ 1290.389874][ T24] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1290.410949][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.451872][ T24] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1290.527188][T19981] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1290.538013][T19981] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1290.563495][T20616] netlink: 'syz.0.3218': attribute type 39 has an invalid length. [ 1290.575293][T19981] em28xx 5-1:0.132: No AC97 audio processor [ 1290.599376][T19981] usb 5-1: Decoder not found [ 1290.604055][T19981] em28xx 5-1:0.132: failed to create media graph [ 1290.631215][T19981] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1290.652532][T19981] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1290.662942][ T5955] em28xx 5-1:0.132: Closing input extension [ 1290.666547][ T24] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1290.673496][ T5955] em28xx 5-1:0.132: Freeing device [ 1291.511842][ T5955] usb 2-1: USB disconnect, device number 78 [ 1291.519171][ T5955] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1291.740107][ T24] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1291.936466][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1291.944652][ T24] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1291.953385][ T24] usb 6-1: config 0 has no interface number 0 [ 1291.963564][ T24] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1291.999357][ T24] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1292.008745][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.018681][ T24] usb 6-1: Product: syz [ 1292.062190][ T24] usb 6-1: Manufacturer: syz [ 1292.084957][ T24] usb 6-1: SerialNumber: syz [ 1292.190724][ T24] usb 6-1: config 0 descriptor?? [ 1292.217135][ T24] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1292.280494][ T24] em28xx 6-1:0.132: Video interface 132 found: [ 1292.702917][ T24] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 1292.945179][ T24] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1292.982014][ T24] em28xx 6-1:0.132: board has no eeprom [ 1293.097536][ T24] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1293.105872][ T24] em28xx 6-1:0.132: analog set to bulk mode. [ 1293.112052][ T5968] em28xx 6-1:0.132: Registering V4L2 extension [ 1293.192534][ T24] usb 6-1: USB disconnect, device number 76 [ 1293.233625][ T24] em28xx 6-1:0.132: Disconnecting em28xx [ 1293.394688][ T5968] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 1293.405506][ T5968] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 1293.413839][ T5968] em28xx 6-1:0.132: No AC97 audio processor [ 1293.598570][ T5968] usb 6-1: Decoder not found [ 1293.612251][ T5968] em28xx 6-1:0.132: failed to create media graph [ 1293.800553][ T5968] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 1293.822828][ T5968] em28xx 6-1:0.132: Remote control support is not available for this card. [ 1293.835159][ T24] em28xx 6-1:0.132: Closing input extension [ 1293.843825][ T24] em28xx 6-1:0.132: Freeing device [ 1293.959368][T20666] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1295.576759][T20695] create_pit_timer: 29 callbacks suppressed [ 1295.576776][T20695] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1295.650359][T20695] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1295.747798][T20695] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1295.820238][T19981] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1295.867622][T20695] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1295.942948][T20695] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1296.082434][T20695] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1296.176607][T20695] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1296.185032][T20695] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1296.219216][T20695] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1296.229050][T20695] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1296.264329][T19981] usb 1-1: no configurations [ 1296.269687][T19981] usb 1-1: can't read configurations, error -22 [ 1296.411470][T19981] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1296.692072][ T5167] Bluetooth: hci2: command 0x0406 tx timeout [ 1296.831134][T19981] usb 1-1: no configurations [ 1296.843313][ T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1296.852474][T19981] usb 1-1: can't read configurations, error -22 [ 1296.873890][T19981] usb usb1-port1: attempt power cycle [ 1297.000039][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1297.043431][ T24] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1297.112176][ T24] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1297.161277][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1297.180051][ T24] usb 5-1: config 1 has no interface number 0 [ 1297.186391][ T24] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1297.201972][ T24] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1297.215616][ T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1297.414139][T19981] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1297.435813][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.689427][T19981] usb 1-1: no configurations [ 1297.693131][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1297.694149][T19981] usb 1-1: can't read configurations, error -22 [ 1297.861301][T19981] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 1297.913403][T19981] usb 1-1: no configurations [ 1297.918254][T19981] usb 1-1: can't read configurations, error -22 [ 1297.919477][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1297.925061][T19981] usb usb1-port1: unable to enumerate USB device [ 1298.931123][ T5975] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1299.074284][T19981] usb 5-1: USB disconnect, device number 73 [ 1299.095654][T19981] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1299.737721][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.754710][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.381098][T19981] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1300.424642][T20742] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1300.720658][T19981] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1300.733252][T19981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.746747][T19981] usb 2-1: Product: syz [ 1300.757211][T19981] usb 2-1: Manufacturer: syz [ 1300.898701][T19981] usb 2-1: SerialNumber: syz [ 1300.910639][T19981] usb 2-1: config 0 descriptor?? [ 1300.933472][T19981] usb 2-1: interface 1 not found [ 1302.537767][T20770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3249'. [ 1302.605808][ T5975] usb 2-1: USB disconnect, device number 79 [ 1303.374059][T19981] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1304.350168][T19981] usb 3-1: Using ep0 maxpacket: 32 [ 1304.363798][T19981] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1304.372723][T19981] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1304.569757][T19981] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1304.578935][T19981] usb 3-1: config 1 has no interface number 0 [ 1304.680885][T19981] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1304.805820][T19981] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1304.829858][T19981] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1304.852715][T19981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.034018][T19981] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1305.231375][T19981] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1305.416093][T20810] create_pit_timer: 71 callbacks suppressed [ 1305.416110][T20810] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1305.640221][T20810] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1305.740344][T20810] kvm: requested 20114 ns i8254 timer period limited to 200000 ns [ 1305.801812][T20810] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 1305.862525][T20810] kvm: requested 38552 ns i8254 timer period limited to 200000 ns [ 1305.878655][ T5975] usb 3-1: USB disconnect, device number 96 [ 1305.885907][T20810] kvm: requested 90514 ns i8254 timer period limited to 200000 ns [ 1305.909538][ T5975] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1305.944998][T20810] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1305.968122][T20810] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1305.983312][T20810] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1305.999071][T20810] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1308.780060][T19981] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1309.131288][T19981] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1309.142062][T19981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.162476][T19981] usb 6-1: Product: syz [ 1309.171062][T19981] usb 6-1: Manufacturer: syz [ 1309.179575][T19981] usb 6-1: SerialNumber: syz [ 1309.200374][T19981] usb 6-1: config 0 descriptor?? [ 1309.224294][T19981] usb 6-1: interface 1 not found [ 1310.397145][T20859] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1310.422496][T20860] create_pit_timer: 23 callbacks suppressed [ 1310.422507][T20860] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1310.447545][T20860] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1310.463713][T20860] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1310.472618][T20860] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1310.480988][T20860] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1310.488874][T20860] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1310.497260][T20860] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1310.506590][T20860] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1310.515648][T20860] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1310.524966][T20860] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1310.957303][T12907] usb 6-1: USB disconnect, device number 77 [ 1311.168304][T20868] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer. [ 1311.455687][T20868] netlink: 'syz.1.3269': attribute type 39 has an invalid length. [ 1311.920250][ T5968] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1312.228141][ T5968] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1312.237866][ T5968] usb 1-1: config 192 has an invalid interface number: 142 but max is 0 [ 1312.252856][ T5968] usb 1-1: config 192 has no interface number 0 [ 1312.280732][ T5968] usb 1-1: config 192 interface 142 altsetting 5 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1312.303888][ T5968] usb 1-1: config 192 interface 142 has no altsetting 0 [ 1312.321863][ T5968] usb 1-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=1e.52 [ 1312.331330][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.345451][ T5968] usb 1-1: Product: syz [ 1312.349599][ T5968] usb 1-1: Manufacturer: syz [ 1312.428160][ T5968] usb 1-1: SerialNumber: syz [ 1312.650088][ T24] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1313.077786][ T5968] s2255 1-1:192.142: Could not find bulk-in endpoint [ 1313.084859][ T5968] Sensoray 2255 driver load failed: 0xfffffff4 [ 1313.092993][ T5968] s2255 1-1:192.142: probe with driver s2255 failed with error -12 [ 1313.150078][ T24] usb 3-1: device descriptor read/64, error -71 [ 1313.164637][ T5968] usb 1-1: USB disconnect, device number 104 [ 1313.410234][ T24] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1313.566494][ T24] usb 3-1: device descriptor read/64, error -71 [ 1313.619060][T20887] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer. [ 1313.682165][T20892] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3274'. [ 1313.692058][ T24] usb usb3-port1: attempt power cycle [ 1314.353289][ T24] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1314.580296][ T24] usb 3-1: device descriptor read/8, error -71 [ 1314.830079][ T24] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1315.278991][ T24] usb 3-1: device descriptor read/8, error -71 [ 1315.400294][ T24] usb usb3-port1: unable to enumerate USB device [ 1316.458830][T20922] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1316.488979][ T24] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1316.801186][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1316.810347][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.846267][ T24] usb 3-1: Product: syz [ 1316.865754][ T24] usb 3-1: Manufacturer: syz [ 1316.950295][ T24] usb 3-1: SerialNumber: syz [ 1316.968193][ T24] usb 3-1: config 0 descriptor?? [ 1316.986144][ T24] usb 3-1: interface 1 not found [ 1316.991316][ T5968] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1317.380238][ T5968] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.390577][ T5968] usb 5-1: config 0 has no interfaces? [ 1317.396051][ T5968] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1317.405154][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.459046][ T5968] usb 5-1: config 0 descriptor?? [ 1317.778949][T20929] SELinux: truncated policydb string identifier [ 1317.785562][T20929] SELinux: failed to load policy [ 1317.792558][T20929] netlink: 'syz.4.3281': attribute type 6 has an invalid length. [ 1317.804894][T20929] netlink: 'syz.4.3281': attribute type 7 has an invalid length. [ 1317.812997][T20929] netlink: 'syz.4.3281': attribute type 8 has an invalid length. [ 1318.498462][T19981] usb 3-1: USB disconnect, device number 101 [ 1319.848182][T12907] usb 5-1: USB disconnect, device number 74 [ 1320.350276][T20964] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer. [ 1321.116872][T20964] netlink: 'syz.1.3289': attribute type 39 has an invalid length. [ 1321.138010][T20976] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3291'. [ 1321.812089][T20981] netlink: 'syz.2.3292': attribute type 39 has an invalid length. [ 1322.005274][T20986] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer. [ 1322.272740][T20986] netlink: 'syz.0.3293': attribute type 39 has an invalid length. [ 1323.150179][T12907] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1323.460076][T12907] usb 6-1: Using ep0 maxpacket: 32 [ 1323.466825][T12907] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1323.475295][T12907] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1323.485095][T12907] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1323.494042][T12907] usb 6-1: config 1 has no interface number 0 [ 1323.501392][T12907] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1323.503045][T21005] netdevsim netdevsim1: Direct firmware load for . [ 1323.503045][T21005] failed with error -2 [ 1323.524558][T12907] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1323.534582][T21005] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1323.534582][T21005] [ 1323.613976][T12907] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1324.076337][T12907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.115027][T12907] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1324.312599][T12907] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1325.331576][T12907] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1325.383820][T12907] usb 6-1: USB disconnect, device number 78 [ 1325.391732][T12907] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1325.874941][T21040] create_pit_timer: 26 callbacks suppressed [ 1325.874962][T21040] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1326.171430][T21043] netdevsim netdevsim1: Direct firmware load for . [ 1326.171430][T21043] failed with error -2 [ 1326.182349][T21043] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1326.182349][T21043] [ 1327.916029][T21063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3307'. [ 1329.650778][ T5955] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1329.820397][ T5955] usb 6-1: Using ep0 maxpacket: 32 [ 1329.827947][ T5955] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1329.837795][ T5955] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1329.889087][ T5955] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1330.047221][ T5955] usb 6-1: config 1 has no interface number 0 [ 1330.091821][ T5955] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1330.112957][ T5955] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1330.126433][ T5955] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1330.135873][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.153946][ T5955] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1330.355188][ T5955] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1330.750111][ T5955] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1330.933136][T19981] usb 6-1: USB disconnect, device number 79 [ 1330.939692][T19981] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1331.085637][ T5955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.096334][ T5955] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1331.105431][ T5955] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1331.116507][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.471470][ T5955] usb 2-1: config 0 descriptor?? [ 1331.556754][ T5955] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1331.580107][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 1331.676966][ T5955] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1331.701163][T21100] SELinux: policydb version 1449998477 does not match my version range 15-35 [ 1331.740954][ T5955] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1331.779602][ T5955] usb 2-1: media controller created [ 1331.798156][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1331.822922][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 1331.861455][ T5955] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1331.883668][T21124] dibusb: i2c wr: len=61 is too big! [ 1331.883668][T21124] [ 1331.891721][T21100] SELinux: failed to load policy [ 1331.892747][T21124] netlink: 'syz.1.3314': attribute type 6 has an invalid length. [ 1331.921258][ T5955] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input66 [ 1331.943154][ T5955] dvb-usb: schedule remote query interval to 150 msecs. [ 1331.950260][ T5955] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1331.960562][T21124] netlink: 'syz.1.3314': attribute type 7 has an invalid length. [ 1331.996065][T21124] netlink: 'syz.1.3314': attribute type 8 has an invalid length. [ 1332.110227][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 1332.116071][ T5955] dvb-usb: error while querying for an remote control event. [ 1332.124483][T19981] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1332.340200][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 1332.345976][ T5955] dvb-usb: error while querying for an remote control event. [ 1332.353575][T19981] usb 1-1: Using ep0 maxpacket: 32 [ 1332.404937][T19981] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1332.423092][T19981] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1332.456876][T19981] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1332.467151][T19981] usb 1-1: config 1 has no interface number 0 [ 1332.477365][T19981] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1332.497559][T19981] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1332.511128][T19981] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1332.527729][T19981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.576595][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 1332.588165][ T5955] dvb-usb: error while querying for an remote control event. [ 1332.634845][T19981] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1332.760531][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 1332.766309][ T5955] dvb-usb: error while querying for an remote control event. [ 1332.833786][T19981] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1332.931845][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1332.938175][T19981] dvb-usb: error while querying for an remote control event. [ 1333.101525][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1333.107306][T19981] dvb-usb: error while querying for an remote control event. [ 1333.270178][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1333.276068][T19981] dvb-usb: error while querying for an remote control event. [ 1333.713314][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1333.732583][T19981] dvb-usb: error while querying for an remote control event. [ 1333.741826][ T5955] usb 1-1: USB disconnect, device number 105 [ 1333.750846][ T5955] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1333.812496][T21129] netlink: 'syz.4.3320': attribute type 39 has an invalid length. [ 1333.884234][T19981] usb 2-1: USB disconnect, device number 80 [ 1333.921355][T19981] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1334.281245][T21148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3322'. [ 1334.628644][T21155] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1337.669219][T18682] Bluetooth: hci0: command 0x0406 tx timeout [ 1337.870157][T19981] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 1338.043204][T19981] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.054815][T19981] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1338.074113][T19981] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1338.093390][T19981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.126193][T19981] usb 6-1: config 0 descriptor?? [ 1338.163528][T19981] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1338.170811][T19981] dvb-usb: bulk message failed: -22 (3/0) [ 1338.192501][T19981] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1338.257199][T19981] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1338.278253][T19981] usb 6-1: media controller created [ 1338.477478][T21177] dibusb: i2c wr: len=61 is too big! [ 1338.477478][T21177] [ 1338.486176][T21177] netlink: 'syz.5.3328': attribute type 6 has an invalid length. [ 1338.493999][T21177] netlink: 'syz.5.3328': attribute type 7 has an invalid length. [ 1338.501954][T21177] netlink: 'syz.5.3328': attribute type 8 has an invalid length. [ 1338.556210][T19981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1338.635982][T19981] dvb-usb: bulk message failed: -22 (6/0) [ 1338.655803][T19981] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1338.967231][T19981] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input67 [ 1339.042376][T19981] dvb-usb: schedule remote query interval to 150 msecs. [ 1339.082347][T19981] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1339.246494][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1339.266230][T19981] dvb-usb: error while querying for an remote control event. [ 1339.516983][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1339.602320][T19981] dvb-usb: error while querying for an remote control event. [ 1339.800145][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1339.812835][T19981] dvb-usb: error while querying for an remote control event. [ 1339.990087][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1339.997206][T19981] dvb-usb: error while querying for an remote control event. [ 1340.190216][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1340.247227][T19981] dvb-usb: error while querying for an remote control event. [ 1340.411735][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1340.433060][T19981] dvb-usb: error while querying for an remote control event. [ 1340.441103][ T5955] usb 6-1: USB disconnect, device number 80 [ 1340.514933][ T5955] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1340.853123][T21222] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer. [ 1341.427964][T21225] netlink: 'syz.4.3338': attribute type 39 has an invalid length. [ 1343.533496][T21238] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer. [ 1343.900638][T21241] netlink: 'syz.2.3342': attribute type 39 has an invalid length. [ 1344.383176][T21255] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1344.525029][T21257] netdevsim netdevsim1: Direct firmware load for . [ 1344.525029][T21257] failed with error -2 [ 1344.536281][T21257] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1344.536281][T21257] [ 1345.292299][T21266] netdevsim netdevsim0: Direct firmware load for . [ 1345.292299][T21266] failed with error -2 [ 1345.369885][T21266] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1345.369885][T21266] [ 1345.850297][T19981] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1346.055731][T19981] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.066175][T19981] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1346.093104][T19981] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1346.113063][T19981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.146182][T19981] usb 3-1: config 0 descriptor?? [ 1346.182944][T19981] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1346.199737][T19981] dvb-usb: bulk message failed: -22 (3/0) [ 1346.215902][T19981] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1346.234920][T19981] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1346.253756][T19981] usb 3-1: media controller created [ 1346.261993][T19981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1346.280807][T19981] dvb-usb: bulk message failed: -22 (6/0) [ 1346.296540][T19981] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1346.311946][T19981] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input68 [ 1346.359945][T19981] dvb-usb: schedule remote query interval to 150 msecs. [ 1346.373688][T19981] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1346.396717][T21267] dibusb: i2c wr: len=61 is too big! [ 1346.396717][T21267] [ 1346.413330][T21267] netlink: 'syz.2.3347': attribute type 6 has an invalid length. [ 1346.421330][T21267] netlink: 'syz.2.3347': attribute type 7 has an invalid length. [ 1346.490306][T21267] netlink: 'syz.2.3347': attribute type 8 has an invalid length. [ 1346.531379][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 1346.537755][ T5955] dvb-usb: error while querying for an remote control event. [ 1347.407719][ T5975] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1347.610055][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1347.618334][T19981] dvb-usb: error while querying for an remote control event. [ 1347.830081][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1347.835831][T19981] dvb-usb: error while querying for an remote control event. [ 1347.965433][ T5975] usb 2-1: Using ep0 maxpacket: 32 [ 1348.039265][ T5975] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1348.054053][ T5975] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1348.080794][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1348.089250][T19981] dvb-usb: error while querying for an remote control event. [ 1348.146904][T21294] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer. [ 1348.260072][ T5975] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.272000][T21294] netlink: 'syz.0.3351': attribute type 39 has an invalid length. [ 1348.326544][ T5975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1348.365405][ T5975] usb 2-1: config 1 has no interface number 0 [ 1348.387963][ T5975] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 1348.414518][ T5975] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1348.426498][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.435254][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1348.484643][ T5975] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1348.693493][ T5975] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 1348.720557][ T5975] snd_usb_pod 2-1:1.1: invalid control EP [ 1348.730369][T19981] dvb-usb: error while querying for an remote control event. [ 1348.784220][ T5975] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 1348.878373][ T5975] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1348.890335][ T5975] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1348.901768][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1348.907526][T19981] dvb-usb: error while querying for an remote control event. [ 1349.063042][ T24] usb 2-1: USB disconnect, device number 81 [ 1349.090143][T19981] dvb-usb: bulk message failed: -22 (1/0) [ 1349.095915][T19981] dvb-usb: error while querying for an remote control event. [ 1349.167099][T19981] usb 3-1: USB disconnect, device number 102 [ 1349.311908][T19981] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1350.280125][ T24] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1350.291887][T21318] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1350.636385][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.647178][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1350.658482][T21318] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1350.660647][ T24] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1350.704409][T21318] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1350.716709][T21318] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1350.761171][T21318] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1350.773584][T21318] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1350.786658][T21318] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1350.801284][T21318] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1350.877590][T21318] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1350.898615][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.945180][T21318] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1350.970654][ T24] usb 3-1: config 0 descriptor?? [ 1351.028302][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1351.340274][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1351.355399][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1351.370937][T21313] SELinux: policydb version 1449998477 does not match my version range 15-35 [ 1351.435497][T21313] SELinux: failed to load policy [ 1351.456243][T21313] dibusb: i2c wr: len=61 is too big! [ 1351.456243][T21313] [ 1351.494232][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1351.510543][T21329] netlink: 'syz.2.3354': attribute type 6 has an invalid length. [ 1351.548827][ T24] usb 3-1: media controller created [ 1351.578451][T21329] netlink: 'syz.2.3354': attribute type 7 has an invalid length. [ 1351.613607][T21329] netlink: 'syz.2.3354': attribute type 8 has an invalid length. [ 1351.670485][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1351.740502][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1351.765191][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1351.779510][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input69 [ 1351.864185][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 1351.886310][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1352.045284][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1352.053441][ T24] dvb-usb: error while querying for an remote control event. [ 1352.185013][T21340] netdevsim netdevsim4: Direct firmware load for . [ 1352.185013][T21340] failed with error -2 [ 1352.195869][T21340] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1352.195869][T21340] [ 1352.230054][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1352.239373][ T24] dvb-usb: error while querying for an remote control event. [ 1352.647565][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1352.940025][ T24] dvb-usb: error while querying for an remote control event. [ 1353.076560][ T24] usb 3-1: USB disconnect, device number 103 [ 1353.208252][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1354.293099][T21365] netdevsim netdevsim0: Direct firmware load for . [ 1354.293099][T21365] failed with error -2 [ 1354.310323][T21365] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1354.310323][T21365] [ 1356.861725][T21407] Driver unsupported XDP return value 0 on prog (id 603) dev N/A, expect packet loss! [ 1357.338733][T21427] veth1_macvtap: left promiscuous mode [ 1357.382255][T21427] macsec0: entered promiscuous mode [ 1357.650832][ T30] audit: type=1400 audit(1754786824.413:3020): avc: denied { relabelfrom } for pid=21438 comm="syz.0.3392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1357.722606][ T30] audit: type=1400 audit(1754786824.413:3021): avc: denied { relabelto } for pid=21438 comm="syz.0.3392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1360.989998][T21503] veth1_macvtap: left promiscuous mode [ 1360.999717][T21503] macsec0: entered promiscuous mode [ 1361.036556][T21507] pim6reg1: entered promiscuous mode [ 1361.050321][T21507] pim6reg1: entered allmulticast mode [ 1361.136971][T21513] wg2: entered promiscuous mode [ 1361.142218][T21513] wg2: entered allmulticast mode [ 1361.176513][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.182940][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.745213][T21542] pim6reg1: entered promiscuous mode [ 1361.782912][T21542] pim6reg1: entered allmulticast mode [ 1362.236405][ T30] audit: type=1400 audit(1754786829.013:3022): avc: denied { read } for pid=21554 comm="syz.4.3442" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1362.299108][ T30] audit: type=1400 audit(1754786829.013:3023): avc: denied { open } for pid=21554 comm="syz.4.3442" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1362.400022][ T30] audit: type=1400 audit(1754786829.013:3024): avc: denied { ioctl } for pid=21554 comm="syz.4.3442" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1362.604656][T21566] pim6reg1: entered promiscuous mode [ 1362.644742][T21566] pim6reg1: entered allmulticast mode [ 1363.889907][T21606] pim6reg1: entered promiscuous mode [ 1363.906943][T21606] pim6reg1: entered allmulticast mode [ 1364.027472][T21612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.035026][T21612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.049732][T21612] bridge0: entered allmulticast mode [ 1364.359398][T21633] pim6reg1: entered promiscuous mode [ 1364.405075][T21633] pim6reg1: entered allmulticast mode [ 1364.423728][T21630] pim6reg1: entered promiscuous mode [ 1364.429089][T21630] pim6reg1: entered allmulticast mode [ 1364.705907][T21646] wg2: entered promiscuous mode [ 1364.715150][T21646] wg2: entered allmulticast mode [ 1365.244910][T21675] pim6reg1: entered promiscuous mode [ 1365.273760][T21675] pim6reg1: entered allmulticast mode [ 1368.397109][T21719] [ 1368.402287][T21719] ============================= [ 1368.407136][T21719] WARNING: suspicious RCU usage [ 1368.412121][T21719] 6.16.0-syzkaller-12256-g561c80369df0 #0 Not tainted [ 1368.418867][T21719] ----------------------------- [ 1368.423897][T21719] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 1368.432677][T21719] [ 1368.432677][T21719] other info that might help us debug this: [ 1368.432677][T21719] [ 1368.443044][T21719] [ 1368.443044][T21719] rcu_scheduler_active = 2, debug_locks = 1 [ 1368.451473][T21719] 1 lock held by syz.5.3515/21719: [ 1368.456582][T21719] #0: ffffffff8e5c07e0 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x344/0x780 [ 1368.467700][T21719] [ 1368.467700][T21719] stack backtrace: [ 1368.474040][T21719] CPU: 1 UID: 0 PID: 21719 Comm: syz.5.3515 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1368.474070][T21719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1368.474082][T21719] Call Trace: [ 1368.474090][T21719] [ 1368.474098][T21719] dump_stack_lvl+0x16c/0x1f0 [ 1368.474124][T21719] lockdep_rcu_suspicious+0x166/0x260 [ 1368.474156][T21719] get_callchain_entry+0x278/0x3f0 [ 1368.474191][T21719] get_perf_callchain+0xdb/0x760 [ 1368.474225][T21719] ? __pfx_get_perf_callchain+0x10/0x10 [ 1368.474262][T21719] ? __pfx___schedule+0x10/0x10 [ 1368.474292][T21719] ? find_held_lock+0x2b/0x80 [ 1368.474319][T21719] __bpf_get_stack+0x4f5/0xa10 [ 1368.474354][T21719] ? __pfx___bpf_get_stack+0x10/0x10 [ 1368.474397][T21719] bpf_get_stack+0x32/0x40 [ 1368.474428][T21719] bpf_get_stack_raw_tp+0x1dd/0x280 [ 1368.474453][T21719] bpf_prog_2ae546726a474a42+0x46/0x4e [ 1368.474472][T21719] bpf_prog_test_run_syscall+0x3b0/0x780 [ 1368.474495][T21719] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1368.474516][T21719] ? fput+0x9b/0xd0 [ 1368.474541][T21719] ? __bpf_prog_get+0x97/0x2a0 [ 1368.474562][T21719] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1368.474583][T21719] __sys_bpf+0x1050/0x4de0 [ 1368.474606][T21719] ? __pfx_futex_wake+0x10/0x10 [ 1368.474629][T21719] ? __pfx___sys_bpf+0x10/0x10 [ 1368.474660][T21719] ? do_futex+0x122/0x350 [ 1368.474689][T21719] ? __pfx_do_futex+0x10/0x10 [ 1368.474728][T21719] ? exc_page_fault+0x5c/0xb0 [ 1368.474748][T21719] ? xfd_validate_state+0x61/0x180 [ 1368.474783][T21719] __x64_sys_bpf+0x78/0xc0 [ 1368.474807][T21719] ? lockdep_hardirqs_on+0x7c/0x110 [ 1368.474824][T21719] do_syscall_64+0xcd/0x4c0 [ 1368.474846][T21719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.474865][T21719] RIP: 0033:0x7fb19b38ebe9 [ 1368.474880][T21719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1368.474899][T21719] RSP: 002b:00007fb19c166038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1368.474917][T21719] RAX: ffffffffffffffda RBX: 00007fb19b5b5fa0 RCX: 00007fb19b38ebe9 [ 1368.474929][T21719] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1368.474940][T21719] RBP: 00007fb19b411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1368.474951][T21719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1368.474962][T21719] R13: 00007fb19b5b6038 R14: 00007fb19b5b5fa0 R15: 00007ffda31faf98 [ 1368.474988][T21719] [ 1373.490063][T18682] Bluetooth: hci3: command 0x0406 tx timeout