last executing test programs: 14.28247008s ago: executing program 1 (id=2865): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x0, '\x00', @string=0x0}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x50000, 0x14000}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x21, 0xc, 0x0, 0x75, 0x81, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xff, 0x0, '\x00', 0x7}) close_range(r0, 0xffffffffffffffff, 0x0) 13.921277157s ago: executing program 1 (id=2869): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = timerfd_create(0x0, 0x0) read(r1, &(0x7f0000002180)=""/262, 0x106) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 13.687827222s ago: executing program 1 (id=2871): r0 = socket$netlink(0x10, 0x3, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0x70bd26, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x6000, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="89", 0x1, 0x4044840, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x10, 0x4, 0x0, 0x0, @sint={0x80000, 0x8}}]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000008c0)=[@nested_load_code={0x12e, 0xa9, {0x2, "48b8db000000000000000f23d00f21f8350000000f0f23f8c74424000b000000c744240277000000c7442406000000000f011c24b9800000c00f3235010000000f306626d9e466470f3880a700200000c4e1145da59ca70000c744240055000000c7442402643e0000c7442406000000000f011c2466ba410066b8251b66efb805000000b90f0000000f01d9f3430f1ee0"}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @set_irq_handler={0xc8, 0x20, {0xa8, 0x1}}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x7a, {0x2, "0f01f848b85d510000000000000f23d00f21f835200000000f23f8b9800000c00f3235000800000f30440f01cbb9730700000f32c40197c271fbcc8f89889425000000000f79d5b985050000b83ef60000ba000000000f30f2410f1b1c9d00000080"}}, @wr_crn={0x67, 0x20, {0x4, 0x2}}, @nested_load_syzos={0x136, 0x70, {0x1, 0x6, [@wr_crn={0x67, 0x20, {0x8, 0x6}}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x1}]}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x5d, 0x4, 0xae, 0x4}}, @nested_amd_clgi={0x17f, 0x10}, @set_irq_handler={0xc8, 0x20, {0x3e, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0x45b5, 0x1}}, @nested_load_syzos={0x136, 0x58, {0x1, 0x1, [@enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x2, 0x5}}]}}], 0x35b}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8080) socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000140)=[{0x80000006, 0x0, 0x0, 0x8001}, {0x4006, 0x4, 0x0, 0x1}]}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000180)={'syz1\x00', {0x10, 0x0, 0xffff}, 0x9, [0xb86, 0x7, 0x4, 0x7, 0x7ff, 0x3, 0x5, 0x100000, 0x5, 0x4, 0xd, 0x3, 0x9, 0x1f, 0xc795, 0x8, 0x7fff, 0x10001, 0x4, 0x4, 0x1, 0x6, 0xa, 0x6, 0x1, 0x5, 0x0, 0xfb82, 0x3, 0x0, 0x0, 0x1, 0xd, 0x2, 0x0, 0x1, 0x0, 0xfffffffc, 0x400, 0x5, 0x9, 0x5, 0x2, 0x2, 0x0, 0x8, 0x7, 0x4, 0x1, 0xe8, 0x5, 0x7, 0x4, 0x2, 0x2f03132e, 0x0, 0x3, 0x9, 0x3, 0x0, 0x0, 0x0, 0xdf, 0x287f], [0x101, 0x31, 0x6, 0x7, 0x23e, 0x80000001, 0x40a1, 0xe, 0x8, 0x8, 0x9, 0x7f, 0x75, 0x8, 0x7fff, 0x2, 0x7f, 0x5, 0x73, 0x8, 0xfffffffb, 0x1, 0x7ff, 0x4, 0x4d, 0x1, 0x0, 0x9, 0x0, 0x2, 0x8, 0xf, 0xd, 0x2, 0x2a, 0x8, 0x5, 0x3, 0x1, 0x8, 0x2, 0xfffffff0, 0x6, 0x8, 0x7cd, 0x8, 0x7, 0x3, 0xc6, 0x7, 0x9, 0x7, 0x10000, 0x6, 0x5, 0x0, 0x3, 0x4, 0x8, 0x0, 0x2, 0x0, 0x6], [0x0, 0xfffffff8, 0x1, 0x3, 0x9, 0x8001, 0x3, 0x3ea7, 0x6, 0xfffffff8, 0x9, 0x1, 0x700, 0x0, 0xfffffffa, 0xd, 0x7ff, 0x6, 0x80000, 0x7fffffff, 0x9, 0x48, 0x9, 0x6, 0x1, 0x9, 0x3, 0x709, 0x9, 0x9, 0x2, 0x7, 0xff, 0x7fffffff, 0x5, 0x6, 0x43cd, 0x5, 0xd, 0x8000, 0x4, 0x8001, 0x7, 0x7, 0x8, 0x10001, 0x4, 0xffff89a1, 0x1000, 0x19, 0xa, 0xa59, 0x3ff, 0x1, 0x3, 0xfffffff5, 0x9, 0x2, 0x10000, 0x1d, 0x3, 0x4, 0x40000, 0x1], [0x7, 0x8, 0x213, 0x789c, 0x40, 0x6, 0x1000, 0x8000, 0x2, 0x3, 0x2, 0x5, 0x7fffffff, 0xd, 0x6, 0x7, 0x8, 0x9, 0x7fffffff, 0x0, 0xffff, 0x0, 0x6, 0x7, 0x0, 0xda43, 0x2, 0x5, 0x14ac3b3b, 0x2, 0xb, 0x0, 0x2, 0x1, 0x1, 0x1000, 0x81, 0xff, 0xb6, 0x3, 0xffff, 0x10, 0xa114, 0x3, 0x6, 0x800, 0x4, 0x40, 0xfffffffb, 0x4, 0x0, 0xfffffff7, 0x7, 0x800, 0x0, 0x4, 0x5, 0x3, 0x2, 0x6, 0xe, 0x9a6, 0x5, 0xffffffff]}, 0x45c) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2275, &(0x7f00000018c0)) syz_emit_ethernet(0x66, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0be1b92a290852fecb23c8308ca6618b9d266e3fccee7aca7df84784d913e528ee2ac08a44b72147aff672e8ef4a5478eafd502050bf00f0655ae8e9b231178c13867cbe5ddc342ada1b7122e0c5d98750dfd83c977a098462c1378248c622a6f793192934cf62445d5644c58f027cc0ba57fc1454c53e8d5f26c6721cf8a8bebfe79b659e597562371dce8f92cf22f9dba496f092ef5476fdfb434d88e6a27ced89b28d239fd59089d4644b", @ANYRES64=r0, @ANYRESHEX, @ANYBLOB="cc1cb855da28c4013b358c6120fa0101891eda0101924ac3615cd8bebbce681a9e0b75a2698e09d9af31c84471", @ANYRES32=r1], 0x64}, 0x1, 0x0, 0x0, 0xcc93f1266b73d8bf}, 0x8050) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) 9.928486424s ago: executing program 1 (id=2877): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xffffae1d) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0xfa2, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x2}]}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) listen(r3, 0xfffffffd) r5 = socket$inet(0xa, 0x801, 0x84) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) listen(r5, 0x1) r7 = socket$netlink(0x10, 0x3, 0x4) listen(r2, 0x8200002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 9.732306928s ago: executing program 1 (id=2882): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = timerfd_create(0x0, 0x0) read(r1, &(0x7f0000002180)=""/262, 0x106) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 9.519241143s ago: executing program 1 (id=2884): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 7.387726569s ago: executing program 3 (id=2897): r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) close_range(r0, r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 6.300240153s ago: executing program 3 (id=2903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3c, 0x2, [@TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 5.918430361s ago: executing program 3 (id=2906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 4.921808993s ago: executing program 0 (id=2911): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000ec0)={'filter\x00', 0xb001, 0xff03, 0x418, 0xe0, 0x0, 0x0, 0x110, 0x330, 0x330, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x2}}}, {{@arp={@local, @multicast2, 0x0, 0xffffff00, 0xb, 0xf, {@empty, {[0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xfff6, 0x85, 0x200, 0x100, 0x7fe, 0x6, 'bond_slave_0\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @loopback, @multicast2, 0x2, 0xffffffff}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, 0x5, 0xf, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0x0, 0x100, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0xfff8, 0x7, 0x8, 0x9, 0x7fff, 0x5, 'syzkaller0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0x164}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010102, @rand_addr=0x64010101, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x468) 4.721144397s ago: executing program 3 (id=2912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x48800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fd, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x100000000000000, 0x2, 0x180, 0x4, 0xcbc, 0xf1, 0x2, 0x0, 0x8002, 0x6, 0xa32, 0xfffffffffffffffd, 0x9, 0x9, 0x9], 0x100000, 0x3c4210}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.632233619s ago: executing program 0 (id=2913): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x4043, 0x1ff) symlinkat(&(0x7f0000002000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r2, 0x0, 0x0) 4.401068284s ago: executing program 0 (id=2915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3c, 0x2, [@TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 4.079954991s ago: executing program 3 (id=2916): socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8d5c7dccd836f5fd, 0xffffffffffffffff, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @random="a082c3015da1"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20100}, 0x44010) 3.883523835s ago: executing program 0 (id=2918): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = timerfd_create(0x0, 0x0) read(r1, 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.586343592s ago: executing program 4 (id=2919): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 3.492559634s ago: executing program 0 (id=2920): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1a000}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 3.366624766s ago: executing program 3 (id=2921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) 3.366032117s ago: executing program 4 (id=2922): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r1, &(0x7f0000000140)={0x5e}, 0xffd3) write$FUSE_NOTIFY_INVAL_ENTRY(r1, 0x0, 0x2e) 3.197177s ago: executing program 0 (id=2923): openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x10c000) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000000c0)={0x1, 0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 2.376278768s ago: executing program 4 (id=2924): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x4043, 0x1ff) symlinkat(&(0x7f0000002000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r2, 0x0, 0x0) 2.189990222s ago: executing program 4 (id=2925): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xffffae1d) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0xfa2, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x2}]}, &(0x7f0000000080)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) listen(r3, 0xfffffffd) r5 = socket$inet(0xa, 0x801, 0x84) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) listen(r5, 0x1) r7 = socket$netlink(0x10, 0x3, 0x4) listen(r2, 0x8200002) syz_genetlink_get_family_id$nl80211(0x0, r7) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.199315924s ago: executing program 4 (id=2926): personality(0x400000a) pselect6(0x40, &(0x7f0000000000)={0x7, 0x800, 0x3c, 0x6, 0x4, 0xac, 0x10000, 0x3}, &(0x7f0000000040)={0x9, 0xe8d8, 0x9, 0x1000, 0x6, 0x3, 0x0, 0xfffffffffffff801}, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000", 0x46}, {&(0x7f0000000500)="5401", 0x2}], 0x2}, 0x1800) r1 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) r2 = dup2(r1, r1) ioctl$MEMISLOCKED(r2, 0x80084d17, &(0x7f0000000040)={0x5, 0x7}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xac, 0x0, 0x1, 0xfffffffc}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 1.082492626s ago: executing program 4 (id=2927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3c, 0x2, [@TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 815.862672ms ago: executing program 2 (id=2928): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x50000, 0x14000}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x21, 0xc, 0x0, 0x75, 0x81, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xff, 0x0, '\x00', 0x7}) close_range(r0, 0xffffffffffffffff, 0x0) 506.534859ms ago: executing program 2 (id=2929): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = timerfd_create(0x0, 0x0) read(r1, 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 306.645973ms ago: executing program 2 (id=2930): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x20000020064e, 0xe, 0x200000, 0x3, 0x5, 0x9}) 267.107534ms ago: executing program 2 (id=2931): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000000)="0e", 0x1) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 186.144655ms ago: executing program 2 (id=2932): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1a000}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 0s ago: executing program 2 (id=2933): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) kernel console output (not intermixed with test programs): 0:0000:0000.001C: unknown main item tag 0x0 [ 346.829895][ T4316] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 347.477814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 348.861284][ T8923] device syzkaller0 entered promiscuous mode [ 348.977885][ T4316] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 349.014284][ T8923] tipc: Enabled bearer , priority 0 [ 349.081454][ T8921] tipc: Resetting bearer [ 349.177989][ T4316] usb 5-1: Using ep0 maxpacket: 8 [ 349.192379][ T4316] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 349.231317][ T4316] usb 5-1: config 179 has no interface number 0 [ 349.237678][ T4316] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 349.255927][ T8921] tipc: Disabling bearer [ 349.297626][ T4316] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 349.346003][ T4316] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 349.404246][ T4316] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 349.442823][ T4316] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 349.478033][ T4316] usb 5-1: config 179 interface 65 has no altsetting 0 [ 349.484992][ T4316] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 349.568468][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.659518][ T4316] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input8 [ 350.129689][ T3598] usb 5-1: USB disconnect, device number 19 [ 350.129693][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 350.167415][ T3598] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 351.968765][ T8969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1550'. [ 352.014747][ T8968] binder: 8964:8968 ioctl 4018620d 0 returned -22 [ 352.037782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 352.162434][ T8968] No such timeout policy "syz1" [ 355.007902][ T27] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 355.187894][ T27] usb 4-1: device descriptor read/64, error -71 [ 355.239304][ T4354] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 355.457892][ T27] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 355.470436][ T9014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.518891][ T9014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.588267][ T9014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.637903][ T27] usb 4-1: device descriptor read/64, error -71 [ 355.654999][ T9014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.798107][ T27] usb usb4-port1: attempt power cycle [ 356.207984][ T27] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 356.278518][ T27] usb 4-1: device descriptor read/8, error -71 [ 356.333013][ T4354] usb 1-1: unable to get BOS descriptor or descriptor too short [ 356.363455][ T4354] usb 1-1: no configurations [ 356.376349][ T4354] usb 1-1: can't read configurations, error -22 [ 356.410818][ T127] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 356.582174][ T27] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 356.618724][ T27] usb 4-1: device descriptor read/8, error -71 [ 356.629627][ T127] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 356.654492][ T127] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.707261][ T127] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.740447][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.758207][ T27] usb usb4-port1: unable to enumerate USB device [ 356.782880][ T127] usb 3-1: config 0 descriptor?? [ 356.793021][ T127] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 357.908332][ T27] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 357.934848][ T27] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 358.241547][ T9051] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.302454][ T9047] fido_id[9047]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 358.980251][ T3598] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 359.199542][ T27] usb 3-1: USB disconnect, device number 35 [ 359.236613][ T9061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.290763][ T9061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.408080][ T9061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.655933][ T9061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.002114][ T127] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 360.178440][ T127] usb 1-1: device descriptor read/64, error -71 [ 360.457881][ T127] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 360.644102][ T127] usb 1-1: device descriptor read/64, error -71 [ 360.778145][ T127] usb usb1-port1: attempt power cycle [ 360.961381][ T3598] usb 5-1: unable to get BOS descriptor or descriptor too short [ 360.998873][ T3598] usb 5-1: no configurations [ 361.003548][ T3598] usb 5-1: can't read configurations, error -22 [ 361.165818][ T9086] netlink: 'syz.3.1586': attribute type 1 has an invalid length. [ 361.188040][ T127] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 361.259359][ T127] usb 1-1: device descriptor read/8, error -71 [ 361.281307][ T9086] device bond8 entered promiscuous mode [ 361.359348][ T9086] 8021q: adding VLAN 0 to HW filter on device bond8 [ 361.441402][ T9086] bond8: (slave bridge2): making interface the new active one [ 361.455214][ T9086] device bridge2 entered promiscuous mode [ 361.472484][ T9086] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 361.501638][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 361.510381][ T4354] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 361.528324][ T127] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 361.552244][ T4354] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 361.571424][ T127] usb 1-1: device descriptor read/8, error -71 [ 361.723668][ T127] usb usb1-port1: unable to enumerate USB device [ 361.817462][ T9093] fido_id[9093]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 361.844463][ T9100] af_packet: tpacket_rcv: packet too big, clamped from 62 to 4294967286. macoff=82 [ 361.872279][ T9100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1590'. [ 362.051758][ T9109] fuse: Bad value for 'fd' [ 362.156431][ T9114] tipc: Enabled bearer , priority 0 [ 362.178194][ T9114] tipc: Resetting bearer [ 362.213863][ T9113] tipc: Disabling bearer [ 362.821293][ T127] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 362.844257][ T127] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 363.130546][ T9133] fido_id[9133]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 363.169628][ T9136] 8021q: adding VLAN 0 to HW filter on device bond9 [ 363.609435][ T9153] fuse: Bad value for 'fd' [ 363.968793][ T9163] tipc: Enabled bearer , priority 0 [ 363.980740][ T9163] tipc: Resetting bearer [ 364.044433][ T9160] tipc: Disabling bearer [ 364.228109][ T4315] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 364.397976][ T4315] usb 1-1: device descriptor read/64, error -71 [ 364.667875][ T4315] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 364.819106][ T9182] 8021q: adding VLAN 0 to HW filter on device bond8 [ 364.827991][ T4315] usb 1-1: device descriptor read/64, error -71 [ 364.958912][ T4315] usb usb1-port1: attempt power cycle [ 365.102853][ T9189] fuse: Bad value for 'fd' [ 365.386730][ T9200] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1622'. [ 365.396573][ T4315] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 365.438361][ T4315] usb 1-1: device descriptor read/8, error -71 [ 365.708094][ T4315] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 365.748357][ T4315] usb 1-1: device descriptor read/8, error -71 [ 365.878126][ T4315] usb usb1-port1: unable to enumerate USB device [ 367.067018][ T9213] 8021q: adding VLAN 0 to HW filter on device bond6 [ 367.611615][ T9231] device syzkaller0 entered promiscuous mode [ 367.716908][ T9231] tipc: Enabled bearer , priority 0 [ 367.737100][ T9230] tipc: Resetting bearer [ 367.810889][ T9230] tipc: Disabling bearer [ 367.884039][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1636'. [ 368.336595][ T9260] 8021q: adding VLAN 0 to HW filter on device bond3 [ 368.378043][ T4317] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 368.528049][ T4317] usb 5-1: device descriptor read/64, error -71 [ 368.547504][ T9264] netlink: 'syz.1.1642': attribute type 1 has an invalid length. [ 368.663908][ T9264] device bond7 entered promiscuous mode [ 368.684963][ T9264] 8021q: adding VLAN 0 to HW filter on device bond7 [ 368.797859][ T4317] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 368.897993][ T9264] bond7: (slave bridge1): making interface the new active one [ 368.905539][ T9264] device bridge1 entered promiscuous mode [ 368.920099][ T26] audit: type=1326 audit(1783248419.021:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.1.1642" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5417b9de59 code=0x0 [ 368.947950][ T4317] usb 5-1: device descriptor read/64, error -71 [ 368.987058][ T9264] bond7: (slave bridge1): Enslaving as an active interface with an up link [ 369.041545][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 369.068412][ T4317] usb usb5-port1: attempt power cycle [ 369.424502][ T9282] batman_adv: batadv0: Adding interface: dummy0 [ 369.478061][ T9282] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.503699][ T4317] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 369.558627][ T4317] usb 5-1: device descriptor read/8, error -71 [ 369.567383][ T9282] batman_adv: batadv0: Interface activated: dummy0 [ 369.615467][ T9281] batadv0: mtu less than device minimum [ 369.662625][ T9281] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 369.675543][ T9281] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 369.688040][ T9281] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 369.700374][ T9281] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 369.712072][ T9281] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 369.724463][ T9281] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 369.736397][ T9281] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 369.748276][ T9281] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 369.760004][ T9281] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 369.886195][ T9292] input: syz0 as /devices/virtual/input/input9 [ 369.932268][ T4317] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 369.988538][ T4317] usb 5-1: device descriptor read/8, error -71 [ 370.128268][ T4317] usb usb5-port1: unable to enumerate USB device [ 370.325815][ T9301] 8021q: adding VLAN 0 to HW filter on device bond8 [ 370.620737][ T9311] netlink: 'syz.1.1657': attribute type 1 has an invalid length. [ 370.656733][ T4315] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 370.667442][ T9311] device bond9 entered promiscuous mode [ 370.690320][ T4315] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 370.703013][ T9311] 8021q: adding VLAN 0 to HW filter on device bond9 [ 372.258066][ T9345] 8021q: adding VLAN 0 to HW filter on device bond4 [ 372.427005][ T9350] device syzkaller0 entered promiscuous mode [ 372.552171][ T9350] tipc: Enabled bearer , priority 0 [ 372.642285][ T9349] tipc: Resetting bearer [ 372.795414][ T9349] tipc: Disabling bearer [ 372.908100][ T14] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 373.088521][ T9358] tipc: Enabled bearer , priority 0 [ 373.099198][ T9358] tipc: Resetting bearer [ 373.127994][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 373.135067][ T14] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 373.145352][ T14] usb 1-1: config 179 has no interface number 0 [ 373.152968][ T9357] tipc: Disabling bearer [ 373.161787][ T14] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 373.175395][ T14] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 373.187175][ T14] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 373.198943][ T14] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 373.209610][ T14] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 373.224744][ T14] usb 1-1: config 179 interface 65 has no altsetting 0 [ 373.261563][ T14] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 373.297065][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.345026][ T14] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input10 [ 373.632877][ T9374] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1675'. [ 373.748563][ T127] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 373.779549][ T127] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 374.386049][ T9385] netlink: 'syz.2.1679': attribute type 1 has an invalid length. [ 374.507243][ T9385] 8021q: adding VLAN 0 to HW filter on device bond9 [ 374.851085][ T9393] device syzkaller0 entered promiscuous mode [ 375.012942][ T9393] tipc: Enabled bearer , priority 0 [ 375.079538][ T9392] tipc: Resetting bearer [ 375.236417][ T9392] tipc: Disabling bearer [ 375.812337][ T4354] usb 1-1: USB disconnect, device number 37 [ 375.818479][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 375.928825][ T4354] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 376.899765][ T9425] netlink: 'syz.4.1691': attribute type 1 has an invalid length. [ 377.015888][ T9425] 8021q: adding VLAN 0 to HW filter on device bond11 [ 377.105158][ T9433] input: syz0 as /devices/virtual/input/input11 [ 377.356495][ T4317] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 377.392481][ T4317] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 377.445108][ T9440] device syzkaller0 entered promiscuous mode [ 377.594905][ T9440] tipc: Enabled bearer , priority 0 [ 377.634719][ T9438] tipc: Resetting bearer [ 377.737889][ T27] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 377.743248][ T9438] tipc: Disabling bearer [ 377.918453][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 377.930119][ T27] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 377.971912][ T27] usb 5-1: config 179 has no interface number 0 [ 377.998089][ T27] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 378.051359][ T27] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 378.100772][ T27] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 378.142789][ T27] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 378.183957][ T27] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 378.217630][ T27] usb 5-1: config 179 interface 65 has no altsetting 0 [ 378.241327][ T27] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 378.273261][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.320807][ T27] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input12 [ 378.679773][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.686190][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.232591][ T9478] netlink: 'syz.0.1707': attribute type 1 has an invalid length. [ 380.423348][ T9478] 8021q: adding VLAN 0 to HW filter on device bond5 [ 380.624802][ T4315] usb 5-1: USB disconnect, device number 26 [ 380.624849][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 380.679076][ T4315] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 380.894353][ T9493] device syzkaller1 entered promiscuous mode [ 381.220420][ T27] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 381.269460][ T27] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 381.591599][ T9508] netlink: 'syz.0.1717': attribute type 1 has an invalid length. [ 381.776949][ T9508] device bond6 entered promiscuous mode [ 381.835894][ T9508] 8021q: adding VLAN 0 to HW filter on device bond6 [ 382.938167][ T127] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 383.147896][ T127] usb 3-1: Using ep0 maxpacket: 8 [ 383.155847][ T127] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 383.187800][ T127] usb 3-1: config 179 has no interface number 0 [ 383.194208][ T127] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 383.281371][ T127] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 383.337828][ T127] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 383.390447][ T127] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 383.408950][ T9527] netlink: 'syz.0.1722': attribute type 1 has an invalid length. [ 383.438255][ T127] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 383.502012][ T127] usb 3-1: config 179 interface 65 has no altsetting 0 [ 383.562712][ T9527] 8021q: adding VLAN 0 to HW filter on device bond7 [ 383.599182][ T127] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 383.619186][ T9536] netlink: 'syz.4.1723': attribute type 1 has an invalid length. [ 383.649012][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.741625][ T9536] device bond12 entered promiscuous mode [ 383.747638][ T9536] 8021q: adding VLAN 0 to HW filter on device bond12 [ 383.778321][ T127] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input13 [ 384.026856][ T9536] bond12: (slave bridge3): making interface the new active one [ 384.076668][ T9536] device bridge3 entered promiscuous mode [ 384.194853][ T9536] bond12: (slave bridge3): Enslaving as an active interface with an up link [ 384.209183][ T4315] usb 3-1: USB disconnect, device number 36 [ 384.215237][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 384.255877][ T4315] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 384.288334][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready [ 384.300141][ T9548] input: syz0 as /devices/virtual/input/input14 [ 384.683588][ T9551] xt_hashlimit: size too large, truncated to 1048576 [ 384.722056][ T9559] netlink: 'syz.4.1729': attribute type 1 has an invalid length. [ 384.996722][ T9559] device bond13 entered promiscuous mode [ 385.078301][ T9559] 8021q: adding VLAN 0 to HW filter on device bond13 [ 385.623732][ T127] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 385.668049][ T127] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 386.728427][ T9584] netlink: 'syz.0.1737': attribute type 1 has an invalid length. [ 386.873112][ T9584] 8021q: adding VLAN 0 to HW filter on device bond8 [ 387.436620][ T9594] netlink: 'syz.0.1739': attribute type 1 has an invalid length. [ 387.609904][ T9594] device bond9 entered promiscuous mode [ 387.734611][ T9594] 8021q: adding VLAN 0 to HW filter on device bond9 [ 387.752018][ T9599] input: syz0 as /devices/virtual/input/input15 [ 387.923832][ T9601] bond9: (slave bridge1): making interface the new active one [ 388.046377][ T9601] device bridge1 entered promiscuous mode [ 388.138910][ T9601] bond9: (slave bridge1): Enslaving as an active interface with an up link [ 388.201729][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 388.908101][ T4354] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 389.068056][ T4354] usb 3-1: device descriptor read/64, error -71 [ 389.337941][ T4354] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 389.508691][ T4354] usb 3-1: device descriptor read/64, error -71 [ 389.578162][ T9629] netlink: 'syz.3.1749': attribute type 1 has an invalid length. [ 389.628171][ T4354] usb usb3-port1: attempt power cycle [ 389.742500][ T9629] 8021q: adding VLAN 0 to HW filter on device bond10 [ 390.039308][ T4354] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 390.108672][ T4354] usb 3-1: device descriptor read/8, error -71 [ 390.388261][ T4354] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 390.428996][ T4354] usb 3-1: device descriptor read/8, error -71 [ 390.548088][ T4354] usb usb3-port1: unable to enumerate USB device [ 391.316049][ T9647] netlink: 'syz.1.1754': attribute type 1 has an invalid length. [ 391.383728][ T9647] device bond10 entered promiscuous mode [ 391.443360][ T9647] 8021q: adding VLAN 0 to HW filter on device bond10 [ 391.649442][ T9647] bond10: (slave bridge2): making interface the new active one [ 391.732562][ T9647] device bridge2 entered promiscuous mode [ 391.782794][ T9647] bond10: (slave bridge2): Enslaving as an active interface with an up link [ 391.823687][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 392.420240][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1761'. [ 392.947906][ T127] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 393.148012][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 393.156984][ T127] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 393.180658][ T127] usb 4-1: config 179 has no interface number 0 [ 393.231989][ T127] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 393.263854][ T127] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 393.303533][ T127] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 393.339840][ T127] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 393.368552][ T127] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 393.423706][ T127] usb 4-1: config 179 interface 65 has no altsetting 0 [ 393.448627][ T127] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 393.484849][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.578695][ T127] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input16 [ 393.702720][ T127] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 393.777696][ T127] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 394.047797][ T4354] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 394.102726][ T14] usb 4-1: USB disconnect, device number 41 [ 394.102942][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 394.151766][ T14] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 394.180004][ T9699] input: syz0 as /devices/virtual/input/input17 [ 394.217853][ T4354] usb 5-1: device descriptor read/64, error -71 [ 394.487914][ T4354] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 394.657868][ T4354] usb 5-1: device descriptor read/64, error -71 [ 394.788025][ T4354] usb usb5-port1: attempt power cycle [ 395.184139][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1773'. [ 395.208115][ T4354] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 395.288864][ T4354] usb 5-1: device descriptor read/8, error -71 [ 395.558092][ T4354] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 395.612609][ T4354] usb 5-1: device descriptor read/8, error -71 [ 395.737531][ T9718] netlink: 'syz.3.1774': attribute type 1 has an invalid length. [ 395.746114][ T4354] usb usb5-port1: unable to enumerate USB device [ 395.952400][ T9718] device bond11 entered promiscuous mode [ 395.999141][ T9718] 8021q: adding VLAN 0 to HW filter on device bond11 [ 396.260170][ T9713] bond11: (slave bridge3): making interface the new active one [ 396.277666][ T9713] device bridge3 entered promiscuous mode [ 396.309423][ T9713] bond11: (slave bridge3): Enslaving as an active interface with an up link [ 396.348960][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready [ 396.407394][ T9723] bond11: (slave bridge4): Enslaving as a backup interface with an up link [ 396.924917][ T9737] input: syz0 as /devices/virtual/input/input18 [ 397.283084][ T9741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1781'. [ 397.487936][ T3598] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 397.505085][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'. [ 397.560550][ T27] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 397.588192][ T27] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 397.678441][ T3598] usb 4-1: Using ep0 maxpacket: 8 [ 397.693237][ T3598] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 397.722102][ T3598] usb 4-1: config 179 has no interface number 0 [ 397.744509][ T3598] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 397.805667][ T3598] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 397.847410][ T3598] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 397.893230][ T3598] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 397.931874][ T3598] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 397.964484][ T3598] usb 4-1: config 179 interface 65 has no altsetting 0 [ 398.001081][ T3598] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 398.030305][ T3598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.140220][ T3598] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input19 [ 398.550905][ T4315] usb 4-1: USB disconnect, device number 42 [ 398.550938][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 398.589269][ T4315] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 399.033709][ T9770] netlink: 'syz.2.1791': attribute type 1 has an invalid length. [ 399.170183][ T9770] device bond10 entered promiscuous mode [ 399.178184][ T9770] 8021q: adding VLAN 0 to HW filter on device bond10 [ 399.389223][ T9779] bond10: (slave bridge2): making interface the new active one [ 399.398159][ T127] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 399.412250][ T9779] device bridge2 entered promiscuous mode [ 399.439940][ T9779] bond10: (slave bridge2): Enslaving as an active interface with an up link [ 399.476707][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 399.568564][ T127] usb 1-1: device descriptor read/64, error -71 [ 399.857962][ T127] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 400.027997][ T127] usb 1-1: device descriptor read/64, error -71 [ 400.158113][ T127] usb usb1-port1: attempt power cycle [ 400.586186][ T9796] netlink: 'syz.4.1798': attribute type 1 has an invalid length. [ 400.598117][ T127] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 400.649688][ T127] usb 1-1: device descriptor read/8, error -71 [ 400.820867][ T9796] device bond14 entered promiscuous mode [ 400.855691][ T9796] 8021q: adding VLAN 0 to HW filter on device bond14 [ 400.897413][ T9807] tipc: Enabling of bearer rejected, failed to enable media [ 400.918071][ T127] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 400.966921][ T127] usb 1-1: device descriptor read/8, error -71 [ 401.112872][ T127] usb usb1-port1: unable to enumerate USB device [ 401.871093][ T9823] device syzkaller0 entered promiscuous mode [ 401.916472][ T4317] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 401.952173][ T4317] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 402.014599][ T9830] tipc: Enabled bearer , priority 0 [ 402.044716][ T9822] tipc: Resetting bearer [ 402.133408][ T9822] tipc: Disabling bearer [ 402.389268][ T9832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1807'. [ 403.057470][ T9852] tipc: Enabling of bearer rejected, failed to enable media [ 403.914120][ T9872] device syzkaller0 entered promiscuous mode [ 403.969022][ T9872] tipc: Enabled bearer , priority 0 [ 404.013552][ T9871] tipc: Resetting bearer [ 404.102158][ T9871] tipc: Disabling bearer [ 404.384095][ T9880] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1822'. [ 404.692228][ T14] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 404.728475][ T14] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 404.964301][ T9895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1827'. [ 406.090398][ T9911] tipc: Enabling of bearer rejected, failed to enable media [ 406.189148][ T9915] device syzkaller0 entered promiscuous mode [ 406.328276][ T9915] tipc: Enabled bearer , priority 0 [ 406.395039][ T9912] tipc: Resetting bearer [ 406.534373][ T9912] tipc: Disabling bearer [ 406.555274][ T9926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1835'. [ 406.770765][ T9930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1838'. [ 407.497310][ T9957] device syzkaller0 entered promiscuous mode [ 407.583557][ T9957] tipc: Enabled bearer , priority 0 [ 407.644513][ T9955] tipc: Resetting bearer [ 407.743362][ T9955] tipc: Disabling bearer [ 407.759482][ T9959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1848'. [ 408.177235][ T9967] tipc: Enabling of bearer rejected, failed to enable media [ 408.457968][ T9973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1851'. [ 409.340889][ T9995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1859'. [ 409.506750][ T9998] device syzkaller0 entered promiscuous mode [ 409.628101][ T9998] tipc: Enabled bearer , priority 0 [ 409.661036][ T9997] tipc: Resetting bearer [ 409.750649][ T9997] tipc: Disabling bearer [ 409.995108][T10021] tipc: Enabling of bearer rejected, failed to enable media [ 411.355576][T10053] netlink: 'syz.3.1877': attribute type 1 has an invalid length. [ 411.576530][T10053] device bond12 entered promiscuous mode [ 411.599978][T10053] 8021q: adding VLAN 0 to HW filter on device bond12 [ 411.691046][T10058] device syzkaller0 entered promiscuous mode [ 411.747613][T10058] tipc: Enabled bearer , priority 0 [ 411.811514][T10055] tipc: Resetting bearer [ 411.965696][T10055] tipc: Disabling bearer [ 412.144847][T10072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1884'. [ 412.465604][T10090] tipc: Enabling of bearer rejected, failed to enable media [ 413.756463][T10117] device syzkaller0 entered promiscuous mode [ 413.870209][T10117] tipc: Enabled bearer , priority 0 [ 413.909662][T10114] tipc: Resetting bearer [ 413.995546][T10114] tipc: Disabling bearer [ 414.022495][T10124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1898'. [ 414.424418][T10142] tipc: Enabling of bearer rejected, failed to enable media [ 414.798983][T10154] netlink: 'syz.0.1904': attribute type 1 has an invalid length. [ 414.958956][T10154] device bond10 entered promiscuous mode [ 414.965774][T10154] 8021q: adding VLAN 0 to HW filter on device bond10 [ 415.387475][T10163] netlink: 'syz.0.1905': attribute type 1 has an invalid length. [ 415.413284][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'. [ 415.456825][T10163] device bond11 entered promiscuous mode [ 415.509934][T10163] 8021q: adding VLAN 0 to HW filter on device bond11 [ 416.011959][T10179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1911'. [ 416.102345][T10184] device syzkaller0 entered promiscuous mode [ 416.174876][T10184] tipc: Enabled bearer , priority 0 [ 416.185780][T10183] tipc: Resetting bearer [ 416.283287][T10183] tipc: Disabling bearer [ 416.741033][T10200] tipc: Enabled bearer , priority 0 [ 416.792832][T10200] tipc: Resetting bearer [ 416.849443][T10199] tipc: Disabling bearer [ 417.272421][T10211] netlink: 'syz.0.1919': attribute type 1 has an invalid length. [ 417.315394][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'. [ 417.375688][T10211] device bond12 entered promiscuous mode [ 417.467074][T10211] 8021q: adding VLAN 0 to HW filter on device bond12 [ 417.656127][T10223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1924'. [ 417.876498][T10235] netlink: 'syz.0.1926': attribute type 1 has an invalid length. [ 417.924028][T10235] device bond13 entered promiscuous mode [ 418.006854][T10235] 8021q: adding VLAN 0 to HW filter on device bond13 [ 418.088297][T10234] tipc: Enabled bearer , priority 0 [ 418.308036][T10240] device syzkaller0 entered promiscuous mode [ 418.385942][T10233] tipc: Resetting bearer [ 418.474019][T10233] tipc: Disabling bearer [ 418.563680][T10249] tipc: Enabled bearer , priority 0 [ 418.585611][T10249] tipc: Resetting bearer [ 418.703058][T10248] tipc: Disabling bearer [ 418.818686][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1933'. [ 419.427224][T10277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1937'. [ 419.596439][T10281] netlink: 'syz.3.1939': attribute type 1 has an invalid length. [ 419.645638][T10281] device bond13 entered promiscuous mode [ 419.654762][T10281] 8021q: adding VLAN 0 to HW filter on device bond13 [ 419.876186][T10294] netlink: 'syz.0.1942': attribute type 1 has an invalid length. [ 419.903841][T10294] device bond14 entered promiscuous mode [ 419.910195][T10294] 8021q: adding VLAN 0 to HW filter on device bond14 [ 419.971968][T10298] device syzkaller0 entered promiscuous mode [ 420.082401][T10298] tipc: Enabled bearer , priority 0 [ 420.152476][T10296] tipc: Resetting bearer [ 420.224175][T10296] tipc: Disabling bearer [ 420.293887][T10303] tipc: Enabled bearer , priority 0 [ 420.327052][T10303] tipc: Resetting bearer [ 420.570787][T10321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1950'. [ 420.764834][T10302] tipc: Disabling bearer [ 421.690476][T10351] netlink: 'syz.1.1958': attribute type 1 has an invalid length. [ 421.731881][T10351] device bond11 entered promiscuous mode [ 421.739240][T10351] 8021q: adding VLAN 0 to HW filter on device bond11 [ 422.070986][T10361] device syzkaller0 entered promiscuous mode [ 422.108387][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1962'. [ 422.126895][T10359] netlink: 'syz.1.1960': attribute type 1 has an invalid length. [ 422.172622][T10359] device bond12 entered promiscuous mode [ 422.202059][T10359] 8021q: adding VLAN 0 to HW filter on device bond12 [ 422.211576][T10368] tipc: Enabled bearer , priority 0 [ 422.226088][T10360] tipc: Resetting bearer [ 422.335684][T10360] tipc: Disabling bearer [ 422.484325][T10373] device syzkaller0 entered promiscuous mode [ 422.557510][T10373] tipc: Enabled bearer , priority 0 [ 422.612511][T10373] tipc: Resetting bearer [ 422.642625][T10372] tipc: Resetting bearer [ 422.716406][T10372] tipc: Disabling bearer [ 423.324528][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1973'. [ 424.220335][T10422] device syzkaller0 entered promiscuous mode [ 424.329774][T10424] netlink: 'syz.0.1980': attribute type 1 has an invalid length. [ 424.415222][T10424] device bond15 entered promiscuous mode [ 424.438669][T10424] 8021q: adding VLAN 0 to HW filter on device bond15 [ 424.496578][T10429] tipc: Enabled bearer , priority 0 [ 424.552572][T10421] tipc: Resetting bearer [ 424.663401][T10421] tipc: Disabling bearer [ 425.109781][T10438] device syzkaller0 entered promiscuous mode [ 425.130501][T10438] tipc: Enabled bearer , priority 0 [ 425.166845][T10438] tipc: Resetting bearer [ 425.187144][T10434] tipc: Resetting bearer [ 425.307121][T10434] tipc: Disabling bearer [ 425.371582][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1985'. [ 426.024154][T10473] device syzkaller0 entered promiscuous mode [ 426.109148][T10473] tipc: Enabled bearer , priority 0 [ 426.125946][T10472] tipc: Resetting bearer [ 426.186106][T10472] tipc: Disabling bearer [ 426.796419][T10481] netlink: 'syz.0.1996': attribute type 1 has an invalid length. [ 426.985422][T10481] device bond16 entered promiscuous mode [ 427.038900][T10481] 8021q: adding VLAN 0 to HW filter on device bond16 [ 427.541691][T10493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2000'. [ 427.717688][T10497] device syzkaller0 entered promiscuous mode [ 427.753542][T10497] tipc: Enabled bearer , priority 0 [ 427.814903][T10497] tipc: Resetting bearer [ 427.841465][T10495] tipc: Resetting bearer [ 427.929377][T10495] tipc: Disabling bearer [ 428.037224][T10506] device syzkaller0 entered promiscuous mode [ 428.193163][T10506] tipc: Enabled bearer , priority 0 [ 428.261913][T10505] tipc: Resetting bearer [ 428.368320][T10505] tipc: Disabling bearer [ 428.776715][T10537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2013'. [ 429.416583][T10549] netlink: 'syz.4.2018': attribute type 1 has an invalid length. [ 429.653518][T10549] device bond15 entered promiscuous mode [ 429.678135][T10549] 8021q: adding VLAN 0 to HW filter on device bond15 [ 429.767057][T10554] device syzkaller0 entered promiscuous mode [ 429.781945][T10554] tipc: Enabled bearer , priority 0 [ 429.833078][T10554] tipc: Resetting bearer [ 430.250820][T10553] tipc: Resetting bearer [ 430.298959][T10553] tipc: Disabling bearer [ 430.348605][T10561] device syzkaller0 entered promiscuous mode [ 430.891661][T10580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2025'. [ 431.567472][T10599] netlink: 'syz.0.2032': attribute type 1 has an invalid length. [ 431.621487][T10599] device bond17 entered promiscuous mode [ 431.628441][T10599] 8021q: adding VLAN 0 to HW filter on device bond17 [ 431.998291][T10610] device syzkaller0 entered promiscuous mode [ 432.012168][T10610] tipc: Enabled bearer , priority 0 [ 432.050940][T10610] tipc: Resetting bearer [ 432.084232][T10609] tipc: Resetting bearer [ 432.217840][T10609] tipc: Disabling bearer [ 432.276849][T10613] device syzkaller0 entered promiscuous mode [ 432.710786][T10622] netlink: 'syz.4.2039': attribute type 1 has an invalid length. [ 432.818372][T10622] 8021q: adding VLAN 0 to HW filter on device bond16 [ 433.464155][T10651] netlink: 'syz.1.2047': attribute type 1 has an invalid length. [ 433.703753][T10651] device bond13 entered promiscuous mode [ 433.719088][T10651] 8021q: adding VLAN 0 to HW filter on device bond13 [ 433.813955][T10659] device syzkaller0 entered promiscuous mode [ 433.852486][T10659] tipc: Enabled bearer , priority 0 [ 433.896746][T10659] tipc: Resetting bearer [ 433.914215][T10658] tipc: Resetting bearer [ 433.986119][T10658] tipc: Disabling bearer [ 434.309197][T10664] device syzkaller0 entered promiscuous mode [ 434.607065][T10679] netlink: 'syz.0.2056': attribute type 1 has an invalid length. [ 434.738634][T10679] 8021q: adding VLAN 0 to HW filter on device bond18 [ 435.037168][T10692] netlink: 'syz.3.2060': attribute type 1 has an invalid length. [ 435.203586][T10692] device bond14 entered promiscuous mode [ 435.210404][T10692] 8021q: adding VLAN 0 to HW filter on device bond14 [ 435.251766][T10704] device syzkaller0 entered promiscuous mode [ 435.323346][T10704] tipc: Enabled bearer , priority 0 [ 435.382898][T10704] tipc: Resetting bearer [ 435.404307][T10701] tipc: Resetting bearer [ 435.511374][T10701] tipc: Disabling bearer [ 436.524553][T10731] device syzkaller0 entered promiscuous mode [ 436.695487][T10733] netlink: 'syz.3.2071': attribute type 1 has an invalid length. [ 436.778753][T10733] 8021q: adding VLAN 0 to HW filter on device bond15 [ 436.952589][T10745] netlink: 'syz.1.2074': attribute type 1 has an invalid length. [ 437.182243][T10745] device bond14 entered promiscuous mode [ 437.249806][T10745] 8021q: adding VLAN 0 to HW filter on device bond14 [ 437.652600][T10768] device syzkaller0 entered promiscuous mode [ 437.682359][T10768] tipc: Enabled bearer , priority 0 [ 437.737607][T10768] tipc: Resetting bearer [ 437.772622][T10767] tipc: Resetting bearer [ 437.837673][T10767] tipc: Disabling bearer [ 438.199249][T10788] device syzkaller0 entered promiscuous mode [ 438.543190][T10791] netlink: 'syz.1.2086': attribute type 1 has an invalid length. [ 438.584033][T10791] 8021q: adding VLAN 0 to HW filter on device bond15 [ 438.850491][T10799] netlink: 'syz.1.2089': attribute type 1 has an invalid length. [ 438.915651][T10799] device bond16 entered promiscuous mode [ 438.967244][T10799] 8021q: adding VLAN 0 to HW filter on device bond16 [ 439.553751][T10825] device syzkaller0 entered promiscuous mode [ 439.602079][T10825] tipc: Enabled bearer , priority 0 [ 439.645998][T10825] tipc: Resetting bearer [ 439.678500][T10823] tipc: Resetting bearer [ 439.741410][T10823] tipc: Disabling bearer [ 439.794078][T10827] device syzkaller0 entered promiscuous mode [ 440.078022][T10834] netlink: 'syz.1.2098': attribute type 1 has an invalid length. [ 440.120620][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.127072][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.302916][T10834] 8021q: adding VLAN 0 to HW filter on device bond17 [ 441.340087][T10861] netlink: 'syz.4.2106': attribute type 1 has an invalid length. [ 441.564533][T10861] device bond17 entered promiscuous mode [ 441.710842][T10861] 8021q: adding VLAN 0 to HW filter on device bond17 [ 441.772873][T10874] device syzkaller0 entered promiscuous mode [ 441.828405][T10874] tipc: Enabled bearer , priority 0 [ 441.936550][T10874] tipc: Resetting bearer [ 441.984204][T10870] tipc: Resetting bearer [ 442.082663][T10870] tipc: Disabling bearer [ 442.319818][T10885] device syzkaller0 entered promiscuous mode [ 442.436993][T10890] netlink: 'syz.1.2112': attribute type 1 has an invalid length. [ 442.474826][T10890] 8021q: adding VLAN 0 to HW filter on device bond18 [ 443.821931][T10924] device syzkaller0 entered promiscuous mode [ 443.833141][T10924] tipc: Enabled bearer , priority 0 [ 443.861125][T10924] tipc: Resetting bearer [ 443.874123][T10923] tipc: Resetting bearer [ 443.943497][T10923] tipc: Disabling bearer [ 444.279810][T10931] netlink: 'syz.3.2128': attribute type 1 has an invalid length. [ 444.324572][T10931] 8021q: adding VLAN 0 to HW filter on device bond16 [ 444.352695][T10935] device syzkaller0 entered promiscuous mode [ 445.696900][T10964] device syzkaller0 entered promiscuous mode [ 445.737625][T10964] tipc: Enabled bearer , priority 0 [ 445.796676][T10964] tipc: Resetting bearer [ 445.821345][T10962] tipc: Resetting bearer [ 445.938874][T10962] tipc: Disabling bearer [ 446.073622][T10975] netlink: 'syz.0.2143': attribute type 1 has an invalid length. [ 446.170215][T10975] 8021q: adding VLAN 0 to HW filter on device bond19 [ 446.266567][T10984] device syzkaller0 entered promiscuous mode [ 447.949683][T11015] netlink: 'syz.0.2156': attribute type 1 has an invalid length. [ 448.063494][T11015] 8021q: adding VLAN 0 to HW filter on device bond20 [ 448.125222][T11018] device syzkaller0 entered promiscuous mode [ 448.203603][T11020] tipc: Enabled bearer , priority 0 [ 448.267066][T11018] tipc: Resetting bearer [ 448.297377][T11017] tipc: Resetting bearer [ 448.382082][T11017] tipc: Disabling bearer [ 448.460095][T11026] device syzkaller0 entered promiscuous mode [ 449.684887][T11060] netlink: 'syz.4.2170': attribute type 1 has an invalid length. [ 449.758096][T11060] 8021q: adding VLAN 0 to HW filter on device bond18 [ 450.142531][T11070] device syzkaller0 entered promiscuous mode [ 450.176410][T11070] tipc: Enabled bearer , priority 0 [ 450.239830][T11070] tipc: Resetting bearer [ 450.262724][T11069] tipc: Resetting bearer [ 450.350441][T11069] tipc: Disabling bearer [ 450.439557][T11072] device syzkaller0 entered promiscuous mode [ 451.026853][T11096] netlink: 'syz.2.2184': attribute type 1 has an invalid length. [ 451.076141][T11096] 8021q: adding VLAN 0 to HW filter on device bond11 [ 451.585285][T11116] device syzkaller0 entered promiscuous mode [ 451.621581][T11116] tipc: Enabled bearer , priority 0 [ 451.646540][T11116] tipc: Resetting bearer [ 451.661290][T11118] device syzkaller0 entered promiscuous mode [ 451.686362][T11115] tipc: Resetting bearer [ 451.721091][T11115] tipc: Disabling bearer [ 452.645350][T11139] netlink: 'syz.4.2200': attribute type 1 has an invalid length. [ 452.767836][T11139] 8021q: adding VLAN 0 to HW filter on device bond19 [ 452.926196][T11151] tipc: Enabled bearer , priority 0 [ 452.958376][T11151] tipc: Resetting bearer [ 453.054136][T11150] tipc: Disabling bearer [ 453.109594][T11156] device syzkaller0 entered promiscuous mode [ 453.839428][T11180] netlink: 'syz.1.2216': attribute type 1 has an invalid length. [ 454.007567][T11180] 8021q: adding VLAN 0 to HW filter on device bond19 [ 454.333276][T11191] tipc: Enabled bearer , priority 0 [ 454.369474][T11191] tipc: Resetting bearer [ 454.433284][T11190] tipc: Disabling bearer [ 454.623662][T11198] device syzkaller0 entered promiscuous mode [ 455.200423][T11210] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2227'. [ 455.363056][T11214] netlink: 'syz.2.2229': attribute type 1 has an invalid length. [ 455.395103][T11214] 8021q: adding VLAN 0 to HW filter on device bond12 [ 455.694245][T11231] tipc: Enabled bearer , priority 0 [ 455.727665][T11231] tipc: Resetting bearer [ 455.769536][T11229] tipc: Disabling bearer [ 455.978344][T11234] device syzkaller0 entered promiscuous mode [ 456.678139][T11251] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2241'. [ 456.703429][T11253] netlink: 'syz.2.2242': attribute type 1 has an invalid length. [ 456.791755][T11253] 8021q: adding VLAN 0 to HW filter on device bond13 [ 457.365581][T11265] device syzkaller0 entered promiscuous mode [ 457.386992][T11265] tipc: Enabled bearer , priority 0 [ 457.420208][T11264] tipc: Resetting bearer [ 457.522149][T11264] tipc: Disabling bearer [ 457.742002][T11275] device syzkaller0 entered promiscuous mode [ 458.257375][T11290] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2255'. [ 458.322363][T11292] netlink: 'syz.1.2256': attribute type 1 has an invalid length. [ 458.402106][T11292] 8021q: adding VLAN 0 to HW filter on device bond20 [ 458.818380][T11306] device syzkaller0 entered promiscuous mode [ 458.867106][T11306] tipc: Enabled bearer , priority 0 [ 458.953534][T11303] tipc: Resetting bearer [ 459.049457][T11303] tipc: Disabling bearer [ 459.675104][T11318] device syzkaller0 entered promiscuous mode [ 460.063329][T11327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2268'. [ 460.128970][T11329] netlink: 'syz.3.2269': attribute type 1 has an invalid length. [ 460.209140][T11329] 8021q: adding VLAN 0 to HW filter on device bond17 [ 460.444361][T11342] device syzkaller0 entered promiscuous mode [ 460.480500][T11342] tipc: Enabled bearer , priority 0 [ 460.495532][T11341] tipc: Resetting bearer [ 460.567004][T11341] tipc: Disabling bearer [ 461.473669][T11356] device syzkaller0 entered promiscuous mode [ 461.832829][T11362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2280'. [ 462.185186][T11371] netlink: 'syz.2.2284': attribute type 1 has an invalid length. [ 462.237549][T11371] 8021q: adding VLAN 0 to HW filter on device bond14 [ 462.385523][T11383] device syzkaller0 entered promiscuous mode [ 463.647169][T11401] device syzkaller0 entered promiscuous mode [ 463.724756][T11403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2294'. [ 464.367278][T11411] netlink: 'syz.1.2299': attribute type 1 has an invalid length. [ 464.454874][T11411] 8021q: adding VLAN 0 to HW filter on device bond21 [ 464.719301][T11423] device syzkaller0 entered promiscuous mode [ 465.207950][T11438] device syzkaller0 entered promiscuous mode [ 466.029288][T11448] netlink: 'syz.4.2313': attribute type 1 has an invalid length. [ 466.176455][T11448] 8021q: adding VLAN 0 to HW filter on device bond20 [ 467.162207][T11466] device syzkaller0 entered promiscuous mode [ 467.441491][T11474] device syzkaller0 entered promiscuous mode [ 468.141686][T11492] netlink: 'syz.0.2327': attribute type 1 has an invalid length. [ 468.192666][T11492] 8021q: adding VLAN 0 to HW filter on device bond21 [ 468.774060][T11507] device syzkaller0 entered promiscuous mode [ 468.888060][ T27] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 469.087862][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 469.095970][ T27] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 469.113875][ T27] usb 4-1: config 179 has no interface number 0 [ 469.130530][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 469.174629][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 469.208521][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 469.224755][T11515] device syzkaller0 entered promiscuous mode [ 469.241863][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 469.275620][ T27] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 469.318366][ T27] usb 4-1: config 179 interface 65 has no altsetting 0 [ 469.326235][ T27] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 469.370235][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.466307][ T27] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input20 [ 469.877586][ T27] usb 4-1: USB disconnect, device number 43 [ 469.883867][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 469.918326][ T27] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 470.002808][T11529] netlink: 'syz.2.2340': attribute type 1 has an invalid length. [ 470.084352][T11529] 8021q: adding VLAN 0 to HW filter on device bond15 [ 470.324379][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2343'. [ 470.542293][T11545] device syzkaller0 entered promiscuous mode [ 470.960774][T11553] device syzkaller0 entered promiscuous mode [ 471.733546][T11565] netlink: 'syz.4.2353': attribute type 1 has an invalid length. [ 471.849761][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2354'. [ 471.906516][T11565] 8021q: adding VLAN 0 to HW filter on device bond21 [ 472.189178][T11580] device syzkaller0 entered promiscuous mode [ 472.377799][ T27] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 472.577929][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 472.585522][ T27] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 472.610738][ T27] usb 1-1: config 179 has no interface number 0 [ 472.617579][ T27] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 472.635230][ T27] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 472.647316][ T27] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 472.677253][ T27] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 472.693497][ T27] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 472.708628][ T27] usb 1-1: config 179 interface 65 has no altsetting 0 [ 472.723291][ T27] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 472.734853][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.752391][T11589] device syzkaller0 entered promiscuous mode [ 472.775245][ T27] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input21 [ 473.045129][T11576] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 473.068273][T11576] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 473.419918][ T4354] usb 1-1: USB disconnect, device number 42 [ 473.420209][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 473.437565][ T4354] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 473.760451][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2368'. [ 474.062459][T11611] netlink: 'syz.4.2369': attribute type 1 has an invalid length. [ 474.226940][T11611] 8021q: adding VLAN 0 to HW filter on device bond22 [ 474.586302][T11627] device syzkaller0 entered promiscuous mode [ 475.047472][T11637] device syzkaller0 entered promiscuous mode [ 475.097293][T11637] tipc: Enabling of bearer rejected, failed to enable media [ 475.678987][T11654] netlink: 'syz.3.2384': attribute type 1 has an invalid length. [ 475.716006][T11654] 8021q: adding VLAN 0 to HW filter on device bond18 [ 475.927863][ T27] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 476.060225][T11662] device syzkaller0 entered promiscuous mode [ 476.148130][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 476.161734][ T27] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 476.186172][ T27] usb 2-1: config 179 has no interface number 0 [ 476.203196][ T27] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 476.261469][ T27] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 476.318456][ T27] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 476.394966][ T27] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 476.460569][ T27] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 476.526465][ T27] usb 2-1: config 179 interface 65 has no altsetting 0 [ 476.537079][ T27] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 476.553987][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.606341][T11676] device syzkaller0 entered promiscuous mode [ 476.635045][ T27] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input22 [ 476.804092][T11676] tipc: Enabling of bearer rejected, failed to enable media [ 477.122789][ T4354] usb 2-1: USB disconnect, device number 29 [ 477.123039][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 477.179271][ T4354] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 477.418632][ T27] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 477.436474][ T27] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 477.542904][T11692] netlink: 'syz.4.2396': attribute type 1 has an invalid length. [ 477.695583][T11692] 8021q: adding VLAN 0 to HW filter on device bond23 [ 478.045333][T11706] device syzkaller0 entered promiscuous mode [ 478.826679][T11723] device syzkaller0 entered promiscuous mode [ 478.909787][T11723] tipc: Enabling of bearer rejected, failed to enable media [ 479.197968][ T4354] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 479.245488][T11735] netlink: 'syz.2.2410': attribute type 1 has an invalid length. [ 479.297410][T11735] 8021q: adding VLAN 0 to HW filter on device bond16 [ 479.388878][ T4354] usb 4-1: Using ep0 maxpacket: 8 [ 479.411727][ T4354] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 479.453322][ T4354] usb 4-1: config 179 has no interface number 0 [ 479.466130][ T4354] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 479.482595][ T4354] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 479.494649][ T4354] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 479.515575][ T4354] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 479.527195][ T4354] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 479.544136][ T4354] usb 4-1: config 179 interface 65 has no altsetting 0 [ 479.552543][ T4354] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 479.566204][ T4354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.593393][ T4354] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input23 [ 479.670841][T11742] device syzkaller0 entered promiscuous mode [ 479.833296][ T27] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 479.862222][ T27] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 480.033260][ T27] usb 4-1: USB disconnect, device number 44 [ 480.033266][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 480.083065][ T27] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 480.763256][T11758] input: syz0 as /devices/virtual/input/input24 [ 481.008499][T11768] device syzkaller0 entered promiscuous mode [ 481.058039][T11768] tipc: Enabling of bearer rejected, failed to enable media [ 481.192286][T11772] netlink: 'syz.4.2423': attribute type 1 has an invalid length. [ 481.245400][T11772] 8021q: adding VLAN 0 to HW filter on device bond24 [ 481.330052][T11779] device syzkaller0 entered promiscuous mode [ 481.947963][ T27] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 482.152324][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 482.168952][ T27] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 482.215624][ T27] usb 4-1: config 179 has no interface number 0 [ 482.236956][ T14] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 482.253204][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 482.268074][ T14] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 482.326141][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 482.378340][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 482.430043][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 482.460912][ T27] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 482.505297][ T27] usb 4-1: config 179 interface 65 has no altsetting 0 [ 482.548950][ T27] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 482.571476][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.658617][ T27] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input26 [ 482.964824][T11810] device syzkaller0 entered promiscuous mode [ 482.989644][T11812] netlink: 'syz.4.2437': attribute type 1 has an invalid length. [ 482.998061][ T27] usb 4-1: USB disconnect, device number 45 [ 483.005395][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 483.019075][ T27] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 483.092213][T11812] 8021q: adding VLAN 0 to HW filter on device bond25 [ 483.150410][T11816] tipc: Enabling of bearer rejected, failed to enable media [ 483.592120][T11822] device syzkaller0 entered promiscuous mode [ 484.185301][T11845] netlink: 'syz.3.2449': attribute type 1 has an invalid length. [ 484.239178][T11845] 8021q: adding VLAN 0 to HW filter on device bond19 [ 484.257994][T11849] device syzkaller0 entered promiscuous mode [ 484.285841][T11849] tipc: Enabling of bearer rejected, failed to enable media [ 484.473150][ T127] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 484.503078][ T127] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 484.827911][ T3598] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 484.999747][T11866] device syzkaller0 entered promiscuous mode [ 485.017856][ T3598] usb 3-1: Using ep0 maxpacket: 8 [ 485.024829][ T3598] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 485.049454][ T3598] usb 3-1: config 179 has no interface number 0 [ 485.065776][ T3598] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 485.096287][ T3598] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 485.114441][ T3598] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 485.136573][ T3598] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 485.154721][ T3598] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 485.208412][ T3598] usb 3-1: config 179 interface 65 has no altsetting 0 [ 485.223405][ T3598] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 485.240924][ T3598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.322014][ T3598] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input29 [ 485.702606][ T3598] usb 3-1: USB disconnect, device number 41 [ 485.708810][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 485.748397][ T3598] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 486.078067][ T4354] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 486.172575][T11885] netlink: 'syz.3.2462': attribute type 1 has an invalid length. [ 486.278154][T11878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.323261][T11878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.354863][T11885] 8021q: adding VLAN 0 to HW filter on device bond20 [ 486.386542][T11878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.398411][T11878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.451023][T11894] device syzkaller0 entered promiscuous mode [ 486.494849][ T4354] usb 2-1: unable to get BOS descriptor or descriptor too short [ 486.510589][ T4354] usb 2-1: no configurations [ 486.515349][ T4354] usb 2-1: can't read configurations, error -22 [ 486.523152][T11894] tipc: Enabling of bearer rejected, failed to enable media [ 486.788485][T11903] device syzkaller0 entered promiscuous mode [ 486.805005][ T3598] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 486.822691][ T3598] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 487.125330][T11909] input: syz0 as /devices/virtual/input/input30 [ 487.778737][T11928] netlink: 'syz.0.2477': attribute type 1 has an invalid length. [ 487.882679][T11928] 8021q: adding VLAN 0 to HW filter on device bond22 [ 487.980426][ T4317] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 488.085636][T11936] device syzkaller0 entered promiscuous mode [ 488.141585][T11936] tipc: Enabling of bearer rejected, failed to enable media [ 488.188468][ T4317] usb 5-1: Using ep0 maxpacket: 8 [ 488.209798][ T4317] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 488.237514][ T4317] usb 5-1: config 179 has no interface number 0 [ 488.244736][ T4317] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 488.266672][ T4317] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 488.286628][ T4317] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 488.310580][ T4317] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 488.328467][ T4317] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 488.345368][ T4317] usb 5-1: config 179 interface 65 has no altsetting 0 [ 488.360650][ T4317] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 488.373117][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.422931][ T4317] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input31 [ 488.773485][T11950] input: syz0 as /devices/virtual/input/input32 [ 488.791221][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 488.820286][ T4354] usb 5-1: USB disconnect, device number 31 [ 488.844414][ T4354] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 489.063845][T11945] device syzkaller0 entered promiscuous mode [ 489.084614][T11945] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 489.640827][ T27] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 489.666427][ T27] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 489.802582][ T4354] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 489.944736][T11975] netlink: 'syz.3.2491': attribute type 1 has an invalid length. [ 489.993513][T11966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.011124][T11975] 8021q: adding VLAN 0 to HW filter on device bond21 [ 490.052402][T11966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.099094][T11966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.144945][T11966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.211877][ T4354] usb 2-1: unable to get BOS descriptor or descriptor too short [ 490.226976][ T4354] usb 2-1: no configurations [ 490.233351][ T4354] usb 2-1: can't read configurations, error -22 [ 490.378279][T11987] device syzkaller0 entered promiscuous mode [ 490.431205][T11987] tipc: Enabling of bearer rejected, failed to enable media [ 490.489509][T11989] input: syz0 as /devices/virtual/input/input33 [ 490.583133][T11991] device syzkaller0 entered promiscuous mode [ 491.169303][ T27] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 491.292029][T12012] netlink: 'syz.1.2503': attribute type 1 has an invalid length. [ 491.387046][T12012] 8021q: adding VLAN 0 to HW filter on device bond22 [ 491.395109][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 491.409229][ T27] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 491.443029][ T27] usb 5-1: config 179 has no interface number 0 [ 491.486634][ T27] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 491.553438][ T27] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 491.607434][ T27] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 491.643100][ T27] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 491.665753][ T27] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 491.699088][ T27] usb 5-1: config 179 interface 65 has no altsetting 0 [ 491.712919][ T27] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 491.723255][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.740971][ T27] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input34 [ 492.272396][ T27] usb 5-1: USB disconnect, device number 32 [ 492.272453][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 492.296370][ T27] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 492.412298][ T22] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 492.420492][T12030] device syzkaller0 entered promiscuous mode [ 492.437088][ T22] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 492.747845][ T22] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 492.776852][T12039] device syzkaller0 entered promiscuous mode [ 492.944699][T12034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.973781][T12034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.992217][T12034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.031570][T12034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.093871][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 493.108199][T12047] netlink: 'syz.3.2516': attribute type 1 has an invalid length. [ 493.116626][ T22] usb 1-1: no configurations [ 493.132551][ T22] usb 1-1: can't read configurations, error -22 [ 493.172327][T12047] 8021q: adding VLAN 0 to HW filter on device bond22 [ 493.875725][T12067] device syzkaller0 entered promiscuous mode [ 494.616138][T12076] device syzkaller0 entered promiscuous mode [ 494.637838][ T3598] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 494.806976][T12081] netlink: 'syz.2.2529': attribute type 1 has an invalid length. [ 494.831589][ T3598] usb 1-1: Using ep0 maxpacket: 8 [ 494.856356][ T3598] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 494.878050][ T3598] usb 1-1: config 179 has no interface number 0 [ 494.891079][T12081] 8021q: adding VLAN 0 to HW filter on device bond17 [ 494.896106][ T3598] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 494.918075][ T3598] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 494.931481][ T3598] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 494.944192][ T3598] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 494.954875][ T3598] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 494.970756][ T3598] usb 1-1: config 179 interface 65 has no altsetting 0 [ 494.978537][ T3598] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 494.998074][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.052641][ T3598] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input37 [ 495.223170][T12088] qfq: no options [ 495.458260][ T3598] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 495.478689][ T3598] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 495.655793][T12100] device syzkaller0 entered promiscuous mode [ 495.682201][ T22] usb 1-1: USB disconnect, device number 45 [ 495.682239][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 495.716571][ T22] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 496.039035][ T4317] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 496.235598][T12103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.272348][T12103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.295059][T12103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.334330][T12103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.387035][ T4317] usb 4-1: unable to get BOS descriptor or descriptor too short [ 496.407993][ T4317] usb 4-1: no configurations [ 496.426325][ T4317] usb 4-1: can't read configurations, error -22 [ 496.670363][T12119] device syzkaller0 entered promiscuous mode [ 497.018239][T12124] netlink: 'syz.2.2544': attribute type 1 has an invalid length. [ 497.076873][T12124] 8021q: adding VLAN 0 to HW filter on device bond18 [ 497.519399][T12137] qfq: no options [ 497.692780][T12139] device syzkaller0 entered promiscuous mode [ 497.978868][ T27] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 497.999320][ T22] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 498.018643][ T27] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 498.218765][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 498.227550][ T22] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 498.277270][ T22] usb 4-1: config 179 has no interface number 0 [ 498.317817][ T22] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 498.397914][ T22] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 498.430597][ T22] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 498.488101][ T22] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 498.507819][ T22] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 498.527577][T12150] device syzkaller0 entered promiscuous mode [ 498.537919][ T22] usb 4-1: config 179 interface 65 has no altsetting 0 [ 498.544866][ T22] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 498.569130][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.599360][ T22] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input39 [ 498.921850][T12158] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 499.168787][T12165] netlink: 'syz.0.2559': attribute type 1 has an invalid length. [ 499.221936][T12165] 8021q: adding VLAN 0 to HW filter on device bond23 [ 499.315156][ T4317] usb 4-1: USB disconnect, device number 48 [ 499.315196][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 499.337922][ T127] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 499.350213][ T4317] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 499.532046][T12162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.555252][T12162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.583067][T12162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.605174][T12176] qfq: no options [ 499.619788][T12162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.654891][ T127] usb 3-1: unable to get BOS descriptor or descriptor too short [ 499.666808][T12178] device syzkaller0 entered promiscuous mode [ 499.683802][ T127] usb 3-1: no configurations [ 499.695729][ T127] usb 3-1: can't read configurations, error -22 [ 500.107470][T12191] device syzkaller0 entered promiscuous mode [ 500.396064][ T3598] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 500.426817][ T3598] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 500.596147][T12201] netlink: 'syz.4.2572': attribute type 1 has an invalid length. [ 500.709686][T12201] 8021q: adding VLAN 0 to HW filter on device bond26 [ 501.560519][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.566903][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.755179][T12222] device syzkaller0 entered promiscuous mode [ 501.908968][T12230] netlink: 'syz.4.2584': attribute type 1 has an invalid length. [ 501.931324][T12230] 8021q: adding VLAN 0 to HW filter on device bond27 [ 501.938291][ T4317] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 502.025893][T12233] device syzkaller0 entered promiscuous mode [ 502.032556][ T14] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 502.118300][ T4317] usb 3-1: Using ep0 maxpacket: 8 [ 502.135516][ T4317] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 502.165007][ T4317] usb 3-1: config 179 has no interface number 0 [ 502.181942][ T4317] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 502.212048][ T4317] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 502.227636][T12227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.256192][T12227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.280869][ T4317] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 502.302079][T12227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.314341][T12227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.335832][ T4317] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 502.362266][ T4317] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 502.386145][ T4317] usb 3-1: config 179 interface 65 has no altsetting 0 [ 502.402337][ T4317] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 502.422072][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.464134][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 502.494615][ T14] usb 4-1: no configurations [ 502.501148][ T4317] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input40 [ 502.512951][ T14] usb 4-1: can't read configurations, error -22 [ 502.730903][T12221] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 502.769065][ T3598] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 502.785172][ T3598] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 503.536235][T12265] device syzkaller0 entered promiscuous mode [ 503.895914][T12268] netlink: 'syz.0.2597': attribute type 1 has an invalid length. [ 503.978614][T12268] 8021q: adding VLAN 0 to HW filter on device bond24 [ 504.004236][T12274] trusted_key: encrypted_key: insufficient parameters specified [ 504.407456][T12280] device syzkaller0 entered promiscuous mode [ 504.864656][ T22] usb 3-1: USB disconnect, device number 44 [ 504.864895][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 504.897286][ T22] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 505.097429][ T14] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 505.134882][ T14] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 505.252693][T12301] device syzkaller0 entered promiscuous mode [ 505.301765][T12303] trusted_key: encrypted_key: insufficient parameters specified [ 505.524291][T12307] netlink: 'syz.2.2612': attribute type 1 has an invalid length. [ 505.608523][T12307] 8021q: adding VLAN 0 to HW filter on device bond19 [ 505.748010][ T14] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 505.941353][T12305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.961303][T12319] device syzkaller0 entered promiscuous mode [ 505.978230][T12305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.997993][T12305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.030267][T12305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.070896][ T14] usb 5-1: unable to get BOS descriptor or descriptor too short [ 506.088616][ T14] usb 5-1: no configurations [ 506.093356][ T14] usb 5-1: can't read configurations, error -22 [ 506.317990][ T4317] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 506.518030][ T4317] usb 4-1: Using ep0 maxpacket: 8 [ 506.533152][ T4317] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 506.632241][ T4317] usb 4-1: config 179 has no interface number 0 [ 506.698104][ T4317] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 506.748428][ T4317] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 506.763114][T12336] trusted_key: encrypted_key: insufficient parameters specified [ 506.770882][ T4317] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 506.770919][ T4317] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 506.770944][ T4317] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 506.770972][ T4317] usb 4-1: config 179 interface 65 has no altsetting 0 [ 506.771008][ T4317] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 506.771033][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.846058][ T4317] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input41 [ 506.872159][T12338] device syzkaller0 entered promiscuous mode [ 507.082812][T12342] netlink: 'syz.1.2625': attribute type 1 has an invalid length. [ 507.197073][T12342] 8021q: adding VLAN 0 to HW filter on device bond23 [ 507.537190][ T127] usb 4-1: USB disconnect, device number 51 [ 507.537308][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 507.569374][ T127] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 507.839331][T12360] device syzkaller0 entered promiscuous mode [ 507.874980][ T22] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 507.892045][ T22] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 508.483236][T12375] netlink: 'syz.4.2636': attribute type 1 has an invalid length. [ 508.555946][T12375] 8021q: adding VLAN 0 to HW filter on device bond28 [ 508.634253][T12377] device syzkaller0 entered promiscuous mode [ 509.179747][T12399] device syzkaller0 entered promiscuous mode [ 509.261291][ T4317] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 509.476616][T12396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.529265][T12396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.559097][T12396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.599313][ T3598] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 509.655342][T12396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.737383][ T4317] usb 4-1: unable to get BOS descriptor or descriptor too short [ 509.768481][ T4317] usb 4-1: no configurations [ 509.773159][ T4317] usb 4-1: can't read configurations, error -22 [ 509.798008][ T3598] usb 3-1: Using ep0 maxpacket: 8 [ 509.805527][ T3598] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 509.834884][ T3598] usb 3-1: config 179 has no interface number 0 [ 509.853604][ T3598] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 509.904195][ T3598] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 509.965576][ T3598] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 510.015850][ T3598] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 510.045689][ T3598] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 510.060714][ T3598] usb 3-1: config 179 interface 65 has no altsetting 0 [ 510.068969][ T3598] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 510.079454][ T3598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.116227][ T3598] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input44 [ 510.306068][T12419] netlink: 'syz.0.2651': attribute type 1 has an invalid length. [ 510.330953][ T4354] usb 3-1: USB disconnect, device number 45 [ 510.336993][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 510.364142][T12419] 8021q: adding VLAN 0 to HW filter on device bond25 [ 510.371733][ T4354] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 510.619860][T12428] device syzkaller0 entered promiscuous mode [ 510.832096][ T4317] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 510.864488][ T4317] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 510.962283][T12437] device syzkaller0 entered promiscuous mode [ 511.399177][T12449] netlink: 'syz.3.2663': attribute type 1 has an invalid length. [ 511.561972][T12449] 8021q: adding VLAN 0 to HW filter on device bond23 [ 511.781722][T12462] device syzkaller0 entered promiscuous mode [ 511.888252][ T22] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 512.090495][T12460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.105778][T12460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.133737][T12460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.166738][T12460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.254944][ T22] usb 2-1: unable to get BOS descriptor or descriptor too short [ 512.287029][ T22] usb 2-1: no configurations [ 512.301414][ T22] usb 2-1: can't read configurations, error -22 [ 512.527908][ T3598] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 512.633303][T12477] device syzkaller0 entered promiscuous mode [ 512.650311][T12477] tipc: Enabling of bearer rejected, failed to enable media [ 512.717918][ T3598] usb 4-1: Using ep0 maxpacket: 8 [ 512.725081][ T3598] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 512.739319][ T3598] usb 4-1: config 179 has no interface number 0 [ 512.745813][ T3598] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 512.760989][ T3598] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 512.772648][ T3598] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 512.810204][ T3598] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 512.840077][ T3598] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 512.892701][ T3598] usb 4-1: config 179 interface 65 has no altsetting 0 [ 512.912703][ T3598] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 512.952237][ T3598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.982969][ T3598] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input46 [ 512.997353][T12486] netlink: 'syz.0.2677': attribute type 1 has an invalid length. [ 513.015788][T12485] input: syz0 as /devices/virtual/input/input47 [ 513.088048][T12486] 8021q: adding VLAN 0 to HW filter on device bond26 [ 513.186001][ T4354] usb 4-1: USB disconnect, device number 54 [ 513.192324][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 513.202443][ T4354] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 513.325168][T12490] device syzkaller0 entered promiscuous mode [ 513.693703][ T3598] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 513.717398][ T3598] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 514.078771][T12510] device syzkaller0 entered promiscuous mode [ 514.136138][T12511] tipc: Enabling of bearer rejected, failed to enable media [ 514.230629][ T127] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 514.435256][T12508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.455733][T12508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.503266][T12508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.553513][T12508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.605611][ T127] usb 4-1: unable to get BOS descriptor or descriptor too short [ 514.623081][ T127] usb 4-1: no configurations [ 514.631595][ T127] usb 4-1: can't read configurations, error -22 [ 514.728187][T12519] netlink: 'syz.4.2690': attribute type 1 has an invalid length. [ 514.780804][T12519] 8021q: adding VLAN 0 to HW filter on device bond29 [ 514.992673][T12522] device syzkaller0 entered promiscuous mode [ 515.021151][T12526] input: syz0 as /devices/virtual/input/input48 [ 515.444676][T12541] device syzkaller0 entered promiscuous mode [ 515.474792][T12541] tipc: Enabling of bearer rejected, failed to enable media [ 515.614035][ T22] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 515.621338][ T3598] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 515.634984][ T22] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 515.733075][T12550] netlink: 'syz.1.2703': attribute type 1 has an invalid length. [ 515.771351][T12550] 8021q: adding VLAN 0 to HW filter on device bond24 [ 515.817868][ T3598] usb 1-1: Using ep0 maxpacket: 8 [ 515.825080][ T3598] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 515.843165][ T3598] usb 1-1: config 179 has no interface number 0 [ 515.856460][ T3598] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 515.868638][ T3598] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 515.880478][ T3598] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 515.892256][ T3598] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 515.902710][ T3598] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 515.916464][ T3598] usb 1-1: config 179 interface 65 has no altsetting 0 [ 515.923669][ T3598] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 515.933051][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.999089][ T3598] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input49 [ 516.180764][ T3598] usb 1-1: USB disconnect, device number 46 [ 516.186926][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 516.205345][ T3598] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 516.787940][ T22] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 516.814996][T12566] device syzkaller0 entered promiscuous mode [ 516.961533][T12570] input: syz0 as /devices/virtual/input/input50 [ 516.981468][T12563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.020058][T12563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.158295][T12563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.228870][T12563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.325763][ T22] usb 5-1: unable to get BOS descriptor or descriptor too short [ 517.378534][ T22] usb 5-1: no configurations [ 517.398385][ T22] usb 5-1: can't read configurations, error -22 [ 517.481112][T12576] qfq: no options [ 517.745853][T12582] device syzkaller0 entered promiscuous mode [ 517.770476][T12582] tipc: Enabling of bearer rejected, failed to enable media [ 517.779929][T12584] netlink: 'syz.3.2715': attribute type 1 has an invalid length. [ 517.812132][T12584] 8021q: adding VLAN 0 to HW filter on device bond24 [ 518.284982][ T27] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 518.311945][ T27] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 518.460059][T12605] input: syz0 as /devices/virtual/input/input51 [ 518.607937][ T3598] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 518.800998][ T3598] usb 2-1: Using ep0 maxpacket: 8 [ 518.811534][ T3598] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 518.825082][ T3598] usb 2-1: config 179 has no interface number 0 [ 518.862633][ T3598] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 518.882195][ T3598] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 518.910878][ T3598] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 518.939549][ T3598] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 518.967914][ T3598] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 518.988919][ T3598] usb 2-1: config 179 interface 65 has no altsetting 0 [ 518.995882][ T3598] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 519.008470][T12614] qfq: no options [ 519.012454][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.075489][ T3598] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input52 [ 519.275838][ T3598] usb 2-1: USB disconnect, device number 36 [ 519.281903][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 519.317649][ T3598] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 519.410891][T12619] netlink: 'syz.3.2728': attribute type 1 has an invalid length. [ 519.526982][T12619] 8021q: adding VLAN 0 to HW filter on device bond25 [ 519.582072][T12625] device syzkaller0 entered promiscuous mode [ 519.610057][T12625] tipc: Enabling of bearer rejected, failed to enable media [ 519.749092][ T4315] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 519.985170][T12621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.023649][T12621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.072509][T12621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.117025][T12621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.272782][T12638] input: syz0 as /devices/virtual/input/input53 [ 520.667423][ T4315] usb 5-1: unable to get BOS descriptor or descriptor too short [ 520.694166][ T4315] usb 5-1: no configurations [ 520.702580][ T4315] usb 5-1: can't read configurations, error -22 [ 520.786283][T12653] qfq: no options [ 520.875260][ T22] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 520.893130][ T22] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 520.993265][T12658] netlink: 'syz.2.2742': attribute type 1 has an invalid length. [ 521.059847][T12658] 8021q: adding VLAN 0 to HW filter on device bond20 [ 521.082104][T12660] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2742'. [ 521.325243][T12665] device syzkaller0 entered promiscuous mode [ 521.340027][T12665] tipc: Enabling of bearer rejected, failed to enable media [ 521.621706][ T4315] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 521.837985][ T4315] usb 5-1: Using ep0 maxpacket: 8 [ 521.844606][ T4315] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 521.864737][ T4315] usb 5-1: config 179 has no interface number 0 [ 521.889044][ T4315] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 521.923671][T12680] input: syz0 as /devices/virtual/input/input54 [ 521.937305][ T4315] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 521.967796][ T4315] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 522.017719][ T4315] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 522.042516][ T4315] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 522.097769][ T4315] usb 5-1: config 179 interface 65 has no altsetting 0 [ 522.104770][ T4315] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 522.133988][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.178361][ T4315] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input55 [ 522.365510][T12687] netlink: 'syz.0.2753': attribute type 1 has an invalid length. [ 522.397007][ T4315] usb 5-1: USB disconnect, device number 38 [ 522.403112][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 522.456836][ T4315] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 522.535241][T12687] 8021q: adding VLAN 0 to HW filter on device bond27 [ 522.550674][T12692] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2753'. [ 522.857866][ T3598] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 522.886915][T12698] device syzkaller0 entered promiscuous mode [ 522.901128][T12698] tipc: Enabling of bearer rejected, failed to enable media [ 523.064055][T12694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.098131][T12694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.114006][T12694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.137597][T12694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.250423][T12707] trusted_key: encrypted_key: key user:syz not found [ 523.561548][ T4354] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 523.624857][ T4354] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 523.766335][ T3598] usb 2-1: unable to get BOS descriptor or descriptor too short [ 523.798197][ T3598] usb 2-1: no configurations [ 523.802877][ T3598] usb 2-1: can't read configurations, error -22 [ 524.184232][T12728] netlink: 'syz.3.2766': attribute type 1 has an invalid length. [ 524.263366][T12728] 8021q: adding VLAN 0 to HW filter on device bond26 [ 524.371791][T12728] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2766'. [ 524.507211][T12738] device syzkaller0 entered promiscuous mode [ 524.532126][T12738] tipc: Enabling of bearer rejected, failed to enable media [ 524.703118][T12743] trusted_key: encrypted_key: key user:syz not found [ 525.097959][ T4354] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 525.317904][ T4354] usb 5-1: Using ep0 maxpacket: 8 [ 525.333149][ T4354] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 525.360558][ T4354] usb 5-1: config 179 has no interface number 0 [ 525.367000][ T4354] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 525.391155][ T4354] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 525.415560][ T4354] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 525.430596][ T4354] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 525.442600][ T4354] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 525.474249][ T4354] usb 5-1: config 179 interface 65 has no altsetting 0 [ 525.494505][ T4354] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 525.515926][ T4354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.566510][ T4354] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input56 [ 525.744752][ T4354] usb 5-1: USB disconnect, device number 39 [ 525.750954][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 525.787369][T12771] netlink: 'syz.0.2781': attribute type 1 has an invalid length. [ 525.800051][ T4354] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 525.818034][ T127] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 525.915324][T12771] 8021q: adding VLAN 0 to HW filter on device bond28 [ 525.980270][T12774] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2781'. [ 526.031470][T12767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.058154][T12767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.078042][T12767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.127474][T12767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.492148][T12785] trusted_key: encrypted_key: key user:syz not found [ 526.583586][ T4315] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 526.652533][ T4315] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 526.758511][ T127] usb 4-1: unable to get BOS descriptor or descriptor too short [ 526.775339][T12791] device syzkaller0 entered promiscuous mode [ 526.784244][ T127] usb 4-1: no configurations [ 526.804347][ T127] usb 4-1: can't read configurations, error -22 [ 526.823216][T12791] tipc: Enabling of bearer rejected, failed to enable media [ 527.389429][T12811] netlink: 'syz.3.2794': attribute type 1 has an invalid length. [ 527.425965][T12811] 8021q: adding VLAN 0 to HW filter on device bond27 [ 527.447177][T12811] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2794'. [ 527.801806][T12821] trusted_key: encrypted_key: key user:syz not found [ 527.968178][ T127] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 528.188283][T12832] device syzkaller0 entered promiscuous mode [ 528.198057][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 528.211803][ T127] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 528.291664][ T127] usb 4-1: config 179 has no interface number 0 [ 528.313569][ T127] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 528.329260][ T127] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 528.344139][ T127] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 528.358717][ T127] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 528.382256][ T127] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 528.414102][ T127] usb 4-1: config 179 interface 65 has no altsetting 0 [ 528.429721][ T127] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 528.448182][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.503051][ T127] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input57 [ 528.567961][ T3598] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 528.762271][T12838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.794655][T12838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.819101][T12838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.834459][T12838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.896294][ T4316] usb 4-1: USB disconnect, device number 58 [ 528.902548][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 528.927077][ T4316] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 529.140782][T12850] netlink: 'syz.0.2808': attribute type 1 has an invalid length. [ 529.242433][T12850] 8021q: adding VLAN 0 to HW filter on device bond29 [ 529.263003][T12854] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2808'. [ 529.330719][ T3598] usb 3-1: unable to get BOS descriptor or descriptor too short [ 529.350161][ T3598] usb 3-1: no configurations [ 529.354923][ T3598] usb 3-1: can't read configurations, error -22 [ 529.726099][T12860] trusted_key: encrypted_key: key user:syz not found [ 529.743055][ T127] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 529.775004][ T127] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 530.128713][T12871] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 530.367136][T12880] device syzkaller0 entered promiscuous mode [ 530.380687][T12883] netlink: 'syz.3.2820': attribute type 1 has an invalid length. [ 530.405068][T12883] 8021q: adding VLAN 0 to HW filter on device bond28 [ 530.467449][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'. [ 530.476945][T12883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2820'. [ 530.804347][T12893] trusted_key: encrypted_key: key user:syz not found [ 531.327997][ T127] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 531.352618][T12907] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 531.358224][ T4317] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 531.540270][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 531.550551][ T127] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 531.571309][T12900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.587512][ T127] usb 4-1: config 179 has no interface number 0 [ 531.609843][T12900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.615034][ T127] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 531.653692][ T127] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 531.665930][T12900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.701043][ T127] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 531.718332][T12900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.740183][ T127] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 531.769108][ T127] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 531.797226][T12913] device syzkaller0 entered promiscuous mode [ 531.830728][ T127] usb 4-1: config 179 interface 65 has no altsetting 0 [ 531.847145][ T127] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 531.876366][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.934554][ T127] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input58 [ 532.260453][ T127] usb 4-1: USB disconnect, device number 59 [ 532.269760][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 532.285714][ T127] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 532.413762][ T4317] usb 1-1: unable to get BOS descriptor or descriptor too short [ 532.427899][ T4317] usb 1-1: no configurations [ 532.438202][ T4317] usb 1-1: can't read configurations, error -22 [ 532.489847][T12922] netlink: 'syz.4.2835': attribute type 1 has an invalid length. [ 532.526049][T12922] 8021q: adding VLAN 0 to HW filter on device bond30 [ 532.560468][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2835'. [ 532.571295][T12922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2835'. [ 532.749630][T12925] trusted_key: encrypted_key: key user:syz not found [ 532.947202][ T3598] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 533.014448][ T3598] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 533.456433][T12945] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 533.581054][T12949] device syzkaller0 entered promiscuous mode [ 533.606370][T12951] netlink: 'syz.0.2847': attribute type 1 has an invalid length. [ 533.668430][T12951] 8021q: adding VLAN 0 to HW filter on device bond30 [ 533.766149][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2847'. [ 533.822939][T12951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2847'. [ 534.085550][T12964] trusted_key: encrypted_key: key user:syz not found [ 534.368926][ T4317] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 534.498572][ T4316] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 534.568052][ T4317] usb 1-1: Using ep0 maxpacket: 8 [ 534.576823][ T4317] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 534.599547][ T4317] usb 1-1: config 179 has no interface number 0 [ 534.606802][ T4317] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 534.641370][ T4317] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 534.658584][ T4317] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 534.671368][ T4317] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 534.684515][ T4317] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 534.710595][ T4317] usb 1-1: config 179 interface 65 has no altsetting 0 [ 534.722335][ T4317] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 534.731867][T12970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.735816][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.779155][T12970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.858894][ T4317] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input59 [ 534.861773][T12970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.967365][T12970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.983222][ T4316] usb 3-1: unable to get BOS descriptor or descriptor too short [ 536.004683][ T4316] usb 3-1: no configurations [ 536.017056][ T4316] usb 3-1: can't read configurations, error -22 [ 536.042360][T12993] device syzkaller0 entered promiscuous mode [ 536.272363][T12995] netlink: 'syz.3.2862': attribute type 1 has an invalid length. [ 536.298328][T12995] 8021q: adding VLAN 0 to HW filter on device bond29 [ 536.314821][T12998] trusted_key: encrypted_key: key user:syz not found [ 536.316673][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2862'. [ 536.332694][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2862'. [ 536.750121][ T4354] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 536.779373][ T4354] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 537.243777][ T22] usb 1-1: USB disconnect, device number 49 [ 537.244023][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 537.259639][ T22] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 538.692042][T13021] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.699512][T13021] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.456635][T13021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.505284][T13021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.997076][T13021] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.006237][T13021] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.015947][T13021] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.025031][T13021] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.468864][T13048] netlink: 'syz.4.2875': attribute type 1 has an invalid length. [ 540.500273][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2875'. [ 540.515661][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2875'. [ 540.549517][T13046] device syzkaller0 entered promiscuous mode [ 540.793363][T13067] trusted_key: encrypted_key: key user:syz not found [ 541.265682][ T4354] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 541.281003][ T4317] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 541.299872][ T4354] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 541.480898][T13074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.488376][ T3598] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 541.506267][T13074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.518891][T13074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.535977][T13074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.687925][ T3598] usb 5-1: Using ep0 maxpacket: 8 [ 541.695710][ T3598] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 541.710134][ T3598] usb 5-1: config 179 has no interface number 0 [ 541.718522][ T3598] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 541.730265][ T3598] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 541.742124][ T3598] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 541.753795][ T3598] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 541.764530][ T3598] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 541.788428][ T3598] usb 5-1: config 179 interface 65 has no altsetting 0 [ 541.805630][ T3598] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 541.819392][ T3598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.873455][ T4317] usb 3-1: unable to get BOS descriptor or descriptor too short [ 541.891293][ T3598] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input60 [ 541.891841][T13100] netlink: 'syz.0.2886': attribute type 1 has an invalid length. [ 541.904331][ T4317] usb 3-1: no configurations [ 541.916733][ T4317] usb 3-1: can't read configurations, error -22 [ 541.965295][T13100] 8021q: adding VLAN 0 to HW filter on device bond31 [ 541.995757][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2886'. [ 542.014544][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2886'. [ 542.243751][T13084] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 542.298978][T13084] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 542.683844][T13111] trusted_key: encrypted_key: key user:syz not found [ 542.701810][ T22] usb 5-1: USB disconnect, device number 40 [ 542.701960][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 542.726804][ T22] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 542.765883][T13113] device syzkaller0 entered promiscuous mode [ 543.361740][T13127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 543.371915][T13127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 543.381861][T13127] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 543.390419][T13127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 543.438824][T13127] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 543.449323][T13127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 543.465004][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 543.473847][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 543.491896][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 543.502248][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 543.533036][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 543.561522][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 544.258186][ T4413] tipc: Left network mode [ 544.294264][T13125] chnl_net:caif_netlink_parms(): no params data found [ 544.388039][T13148] trusted_key: encrypted_key: key user:syz not found [ 544.598205][ T7] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 544.602910][T13154] device syzkaller0 entered promiscuous mode [ 544.780381][T13125] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.811863][T13146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.828519][T13146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.845232][T13125] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.875513][T13146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.917268][T13125] device bridge_slave_0 entered promiscuous mode [ 544.934792][T13146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.085936][T13125] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.108815][T13125] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.117625][T13125] device bridge_slave_1 entered promiscuous mode [ 545.388765][T13125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.439055][T13125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.583677][ T4413] bond1: (slave gretap1): Releasing active interface [ 545.638036][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 545.652696][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 545.690604][ T7] usb 3-1: no configurations [ 545.747982][ T7] usb 3-1: can't read configurations, error -22 [ 545.827377][T13125] team0: Port device team_slave_0 added [ 545.891923][T13125] team0: Port device team_slave_1 added [ 546.138008][T13125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.166005][T13125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.252288][T13125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.369606][T13125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.377566][T13125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.477898][T13125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.846121][ T4413] device hsr_slave_0 left promiscuous mode [ 546.880640][ T4413] device hsr_slave_1 left promiscuous mode [ 546.902062][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.915968][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.924976][ T4413] device bridge_slave_1 left promiscuous mode [ 546.934331][ T4413] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.985568][ T4413] device bridge_slave_0 left promiscuous mode [ 547.001454][ T4413] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.399179][ T4413] bond24 (unregistering): Released all slaves [ 547.728278][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 547.991273][ T4413] bond23 (unregistering): Released all slaves [ 548.526700][ T4413] bond22 (unregistering): Released all slaves [ 548.824558][ T4413] bond21 (unregistering): Released all slaves [ 549.025362][ T4413] bond20 (unregistering): Released all slaves [ 549.168481][ T4413] bond19 (unregistering): Released all slaves [ 549.304223][ T4413] bond18 (unregistering): Released all slaves [ 549.456164][ T4413] bond17 (unregistering): Released all slaves [ 549.678281][ T4413] bond16 (unregistering): Released all slaves [ 549.798607][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 549.963852][ T4413] bond15 (unregistering): Released all slaves [ 550.140638][ T4413] bond14 (unregistering): Released all slaves [ 550.338311][ T4413] bond13 (unregistering): Released all slaves [ 550.624756][ T4413] bond12 (unregistering): Released all slaves [ 550.789941][T13272] [ 550.792347][T13272] ====================================================== [ 550.799396][T13272] WARNING: possible circular locking dependency detected [ 550.806443][T13272] syzkaller #0 Not tainted [ 550.810876][T13272] ------------------------------------------------------ [ 550.817925][T13272] syz.2.2933/13272 is trying to acquire lock: [ 550.824012][T13272] ffff8880736362d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 550.833796][T13272] [ 550.833796][T13272] but task is already holding lock: [ 550.841176][T13272] ffff888079798290 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 550.852193][T13272] [ 550.852193][T13272] which lock already depends on the new lock. [ 550.852193][T13272] [ 550.862614][T13272] [ 550.862614][T13272] the existing dependency chain (in reverse order) is: [ 550.871653][T13272] [ 550.871653][T13272] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 550.880376][T13272] down_write+0x36/0x60 [ 550.885154][T13272] process_measurement+0x3af/0x1c40 [ 550.890959][T13272] ima_file_mmap+0xe9/0x140 [ 550.896012][T13272] __se_sys_remap_file_pages+0x55a/0x7b0 [ 550.902197][T13272] do_syscall_64+0x4c/0xa0 [ 550.907196][T13272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 550.913635][T13272] [ 550.913635][T13272] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 550.921213][T13272] __lock_acquire+0x2d18/0x7c40 [ 550.926647][T13272] lock_acquire+0x1bb/0x4a0 [ 550.931701][T13272] down_read_killable+0x4c/0x340 [ 550.937178][T13272] mmap_read_lock_killable+0x1d/0x60 [ 550.943005][T13272] lock_mm_and_find_vma+0x2b1/0x2f0 [ 550.948743][T13272] do_user_addr_fault+0x2e8/0xb20 [ 550.954343][T13272] exc_page_fault+0x60/0x100 [ 550.959527][T13272] asm_exc_page_fault+0x22/0x30 [ 550.964937][T13272] fault_in_readable+0x13e/0x1f0 [ 550.970478][T13272] fault_in_iov_iter_readable+0xbf/0x2f0 [ 550.976676][T13272] generic_perform_write+0x1f1/0x5c0 [ 550.982512][T13272] __generic_file_write_iter+0x148/0x2a0 [ 550.988695][T13272] generic_file_write_iter+0xab/0x2e0 [ 550.994643][T13272] vfs_write+0x482/0x9a0 [ 550.999524][T13272] ksys_write+0x14d/0x260 [ 551.004516][T13272] do_syscall_64+0x4c/0xa0 [ 551.009568][T13272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.016007][T13272] [ 551.016007][T13272] other info that might help us debug this: [ 551.016007][T13272] [ 551.026251][T13272] Possible unsafe locking scenario: [ 551.026251][T13272] [ 551.036604][T13272] CPU0 CPU1 [ 551.042007][T13272] ---- ---- [ 551.047439][T13272] lock(&sb->s_type->i_mutex_key#13); [ 551.052957][T13272] lock(&mm->mmap_lock); [ 551.059853][T13272] lock(&sb->s_type->i_mutex_key#13); [ 551.067870][T13272] lock(&mm->mmap_lock); [ 551.072223][T13272] [ 551.072223][T13272] *** DEADLOCK *** [ 551.072223][T13272] [ 551.080384][T13272] 3 locks held by syz.2.2933/13272: [ 551.085600][T13272] #0: ffff888079824d68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 551.094954][T13272] #1: ffff88807313c460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 551.103882][T13272] #2: ffff888079798290 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 551.115230][T13272] [ 551.115230][T13272] stack backtrace: [ 551.121148][T13272] CPU: 1 PID: 13272 Comm: syz.2.2933 Not tainted syzkaller #0 [ 551.128623][T13272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 551.138701][T13272] Call Trace: [ 551.142000][T13272] [ 551.144993][T13272] dump_stack_lvl+0x188/0x24e [ 551.149710][T13272] ? load_image+0x410/0x410 [ 551.154265][T13272] ? show_regs_print_info+0x12/0x12 [ 551.159497][T13272] ? print_circular_bug+0x12b/0x1a0 [ 551.164728][T13272] check_noncircular+0x296/0x330 [ 551.169698][T13272] ? add_chain_block+0x9b0/0x9b0 [ 551.174665][T13272] ? lockdep_lock+0xf1/0x1f0 [ 551.179288][T13272] ? _find_first_zero_bit+0xd2/0x100 [ 551.184602][T13272] __lock_acquire+0x2d18/0x7c40 [ 551.189489][T13272] ? verify_lock_unused+0x140/0x140 [ 551.195159][T13272] ? verify_lock_unused+0x140/0x140 [ 551.200388][T13272] ? verify_lock_unused+0x140/0x140 [ 551.205615][T13272] lock_acquire+0x1bb/0x4a0 [ 551.210143][T13272] ? mmap_read_lock_killable+0x1d/0x60 [ 551.215639][T13272] ? read_lock_is_recursive+0x10/0x10 [ 551.221056][T13272] ? cmp_ex_search+0x1a/0x70 [ 551.225782][T13272] ? bsearch+0x86/0xb0 [ 551.229883][T13272] ? fault_in_readable+0x13e/0x1f0 [ 551.235040][T13272] ? search_extable+0x8c/0xd0 [ 551.239750][T13272] ? trim_init_extable+0x3b0/0x3b0 [ 551.244889][T13272] ? mmap_read_lock_killable+0x1d/0x60 [ 551.250366][T13272] down_read_killable+0x4c/0x340 [ 551.255326][T13272] ? mmap_read_lock_killable+0x1d/0x60 [ 551.260805][T13272] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 551.266815][T13272] mmap_read_lock_killable+0x1d/0x60 [ 551.272124][T13272] lock_mm_and_find_vma+0x2b1/0x2f0 [ 551.277363][T13272] do_user_addr_fault+0x2e8/0xb20 [ 551.282425][T13272] ? _raw_spin_unlock_irq+0x1f/0x40 [ 551.287666][T13272] ? lockdep_hardirqs_on+0x94/0x140 [ 551.292896][T13272] exc_page_fault+0x60/0x100 [ 551.297512][T13272] asm_exc_page_fault+0x22/0x30 [ 551.302406][T13272] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 551.308157][T13272] Code: 78 5a c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 57 5a c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 3a 5a [ 551.327785][T13272] RSP: 0018:ffffc90003a47ab0 EFLAGS: 00050287 [ 551.333874][T13272] RAX: ffffffff81bdc749 RBX: 0000000000001000 RCX: 0000000000080000 [ 551.341869][T13272] RDX: ffffc9000c959000 RSI: 000000000004e359 RDI: 000000000004e35a [ 551.349867][T13272] RBP: 0000000000000000 R08: ffff88802bdbbc00 R09: 0000000000000002 [ 551.357859][T13272] R10: 0000000000000006 R11: 0000000000000002 R12: 00002000002b3000 [ 551.365876][T13272] R13: dffffc0000000000 R14: 00002000002b2000 R15: 00002000002b2000 [ 551.373873][T13272] ? fault_in_readable+0x139/0x1f0 [ 551.379023][T13272] fault_in_iov_iter_readable+0xbf/0x2f0 [ 551.384685][T13272] generic_perform_write+0x1f1/0x5c0 [ 551.390006][T13272] ? generic_file_direct_write+0x330/0x330 [ 551.395840][T13272] ? __file_remove_privs+0x5f0/0x5f0 [ 551.401154][T13272] ? rwsem_write_trylock+0x135/0x1c0 [ 551.406491][T13272] ? clear_nonspinnable+0x60/0x60 [ 551.411542][T13272] ? generic_write_checks_count+0x363/0x440 [ 551.417535][T13272] __generic_file_write_iter+0x148/0x2a0 [ 551.423203][T13272] generic_file_write_iter+0xab/0x2e0 [ 551.428606][T13272] vfs_write+0x482/0x9a0 [ 551.436398][T13272] ? file_end_write+0x250/0x250 [ 551.441644][T13272] ? __fget_files+0x3fc/0x460 [ 551.446375][T13272] ? __fdget_pos+0x2ae/0x360 [ 551.450999][T13272] ? ksys_write+0x70/0x260 [ 551.455473][T13272] ksys_write+0x14d/0x260 [ 551.459867][T13272] ? __ia32_sys_read+0x80/0x80 [ 551.464683][T13272] ? lockdep_hardirqs_on+0x94/0x140 [ 551.469916][T13272] do_syscall_64+0x4c/0xa0 [ 551.474368][T13272] ? clear_bhb_loop+0x60/0xb0 [ 551.479147][T13272] ? clear_bhb_loop+0x60/0xb0 [ 551.483975][T13272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.489931][T13272] RIP: 0033:0x7f4b6b39de59 [ 551.494395][T13272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.514030][T13272] RSP: 002b:00007f4b6c276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 551.522492][T13272] RAX: ffffffffffffffda RBX: 00007f4b6b625fa0 RCX: 00007f4b6b39de59 [ 551.530480][T13272] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000005 [ 551.538472][T13272] RBP: 00007f4b6b433e6f R08: 0000000000000000 R09: 0000000000000000 [ 551.546559][T13272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.554548][T13272] R13: 00007f4b6b626038 R14: 00007f4b6b625fa0 R15: 00007ffd588fea48 [ 551.562553][T13272] [ 551.616079][ T4413] bond11 (unregistering): Released all slaves [ 551.647475][ T4413] bond10 (unregistering): (slave bridge2): Releasing backup interface [ 551.657533][ T4413] device bridge2 left promiscuous mode [ 551.833529][ T4413] bond10 (unregistering): Released all slaves [ 551.887877][T13127] Bluetooth: hci2: command 0x0419 tx timeout [ 551.967753][ T4413] bond9 (unregistering): Released all slaves [ 552.093814][ T4413] bond8 (unregistering): Released all slaves [ 552.112305][ T4413] bond7 (unregistering): (slave bridge1): Releasing backup interface [ 552.120807][ T4413] device bridge1 left promiscuous mode [ 552.286618][ T4413] bond7 (unregistering): Released all slaves [ 552.425027][ T4413] bond6 (unregistering): Released all slaves [ 552.547340][ T4413] bond5 (unregistering): Released all slaves [ 552.671959][ T4413] bond4 (unregistering): Released all slaves [ 552.809726][ T4413] bond3 (unregistering): Released all slaves [ 552.939089][ T4413] bond2 (unregistering): Released all slaves [ 553.062045][ T4413] bond1 (unregistering): Released all slaves [ 553.519011][ T4413] team0 (unregistering): Port device team_slave_1 removed [ 553.560296][ T4413] team0 (unregistering): Port device team_slave_0 removed [ 553.602002][ T4413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.645884][ T4413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.945064][ T4413] bond0 (unregistering): Released all slaves [ 554.033198][T13125] device hsr_slave_0 entered promiscuous mode [ 554.042818][T13125] device hsr_slave_1 entered promiscuous mode [ 554.049601][T13125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.058484][T13125] Cannot create hsr debugfs directory [ 554.861364][T13125] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 554.870666][T13125] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 554.882161][T13125] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 554.893236][T13125] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 554.951738][T13125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.964357][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 554.980018][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 554.990386][T13125] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.005800][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 555.019902][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 555.028688][ T4597] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.035975][ T4597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.047234][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 555.060590][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 555.069555][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 555.080028][ T4597] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.087303][ T4597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.100221][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 555.123085][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 555.134147][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 555.143861][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 555.155203][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 555.171317][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 555.180743][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 555.192443][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 555.201448][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 555.215623][T13125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 555.232198][T13125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 555.241829][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 555.252980][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 555.478846][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 555.486350][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 555.503710][T13125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.525947][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 555.535777][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 555.555640][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 555.566824][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 555.578568][T13125] device veth0_vlan entered promiscuous mode [ 555.589049][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 555.597539][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 555.607757][T13125] device veth1_vlan entered promiscuous mode [ 555.627621][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 555.640874][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 555.649417][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 555.659917][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 555.673118][T13125] device veth0_macvtap entered promiscuous mode [ 555.684599][T13125] device veth1_macvtap entered promiscuous mode [ 555.701293][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.712615][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.726140][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.737045][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.747182][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.758288][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.769814][T13125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.778702][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 555.794464][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 555.809485][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 555.818483][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 555.829028][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.840276][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.850470][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.861271][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.871736][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.882881][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.894818][T13125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.904369][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 555.919932][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 555.932635][T13125] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.942221][T13125] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.951346][T13125] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.961453][T13125] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.995287][T13125] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 556.042026][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.045478][T13125] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 556.060028][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.078247][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 556.106279][ T4741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.115995][ T4741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.131872][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready