last executing test programs: 5.324540769s ago: executing program 0 (id=640): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) close(0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x2c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x20}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x4c}}, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="f00fba760004f3ab0f3036deb9800066b9800000c00f326635000400000f300fbf81c5b0e600f20f017e0064f364f30f20160f01cf", 0x35}], 0x1, 0x1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r6, 0x540b, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3, 0x100) 4.201537387s ago: executing program 0 (id=647): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) sendmmsg(r0, &(0x7f0000005ac0)=[{{&(0x7f0000000080)=@caif=@util={0x25, "8ba6e0f9c51896ea022d83c681e17a32"}, 0x80, 0x0}}], 0x1, 0x10) 4.04897711s ago: executing program 0 (id=648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 3.915300484s ago: executing program 0 (id=650): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) getgroups(0xa, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 3.615396901s ago: executing program 3 (id=655): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x44004) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 3.508260164s ago: executing program 3 (id=656): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = gettid() r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000480)={{0x80a0000, 0xf000, 0xc, 0x80, 0x4, 0x0, 0xa, 0x6, 0x0, 0xb, 0x6, 0xa4}, {0x4000, 0x6000, 0xe, 0x8, 0x5f, 0x0, 0x0, 0x1, 0xf, 0x5, 0xee, 0xf}, {0x8000000, 0xb000, 0x4, 0x8, 0xf0, 0x1, 0x8c, 0x6, 0x7, 0x99, 0xfd, 0x1}, {0x100000, 0x5000, 0x8, 0xe, 0x7, 0x5, 0x1, 0x87, 0x5, 0x2, 0x2}, {0x10000, 0x8000000, 0xa, 0x0, 0x5, 0x4, 0xf9, 0x6b, 0x5, 0x0, 0xfd, 0x80}, {0xeeee8000, 0xeeef0000, 0xb, 0xf, 0x30, 0x3, 0x9, 0x8, 0x8, 0x7, 0xe, 0x8}, {0xe6ef8000, 0x0, 0x0, 0x3, 0x53, 0x4, 0x0, 0xb9, 0x7, 0x5, 0x6, 0x7}, {0xeeee0000, 0x1332e2000, 0x9, 0x7, 0xfe, 0x0, 0xc, 0x3, 0x0, 0x6, 0xf9, 0x6}, {0x3000, 0x6}, {0x1, 0x3}, 0x2, 0x0, 0x2000, 0x2, 0xd, 0x2000, 0x10000, [0xfffffffffffffffc, 0x4, 0x9, 0xa]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000000c0)={0x7, 0xfffffffc}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.297039789s ago: executing program 2 (id=658): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$char_usb(r1, &(0x7f0000000040)='N', 0x1) 3.151372663s ago: executing program 2 (id=660): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) close(0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x2c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x20}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x4c}}, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="f00fba760004f3ab0f3036deb9800066b9800000c00f326635000400000f300fbf81c5b0e600f20f017e0064f364f30f20160f01cf", 0x35}], 0x1, 0x1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r6, 0x540b, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3, 0x100) 2.995529206s ago: executing program 4 (id=661): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="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", 0x200}, {0x0, 0x20000}], 0x2) sendfile(r0, r0, 0x0, 0x200000) 2.752974152s ago: executing program 4 (id=662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 2.749274432s ago: executing program 4 (id=663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002000)=@delchain={0x24, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xffeb, 0x1d0c5d7c03b59b98}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004880) 2.490178169s ago: executing program 4 (id=664): socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[], 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_open_dev$I2C(&(0x7f00000001c0), 0x0, 0x40080) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) shmdt(0x0) shmdt(0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r4, 0x11, 0x66, 0x0, &(0x7f0000000440)) syz_extract_tcp_res(&(0x7f0000000000), 0x8, 0xb) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r3, &(0x7f00000050c0)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000001480)=""/206, 0xce}, {&(0x7f0000001580)=""/174, 0xae}, {&(0x7f0000001640)=""/99, 0x63}], 0x4}}, {{&(0x7f0000001740)=@abs, 0x6e, &(0x7f0000004100)=[{0x0}, {&(0x7f00000027c0)=""/147, 0x93}, {&(0x7f0000002880)=""/32, 0x20}, {&(0x7f00000028c0)=""/8, 0x8}, {&(0x7f0000002900)=""/105, 0x69}], 0x5, &(0x7f0000004180)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}}, {{&(0x7f00000041c0)=@abs, 0x6e, &(0x7f0000004500)=[{&(0x7f0000004240)=""/91, 0x5b}, {&(0x7f00000042c0)=""/48, 0x30}, {&(0x7f0000004300)=""/143, 0x8f}, {&(0x7f0000004440)=""/191, 0xbf}], 0x4, &(0x7f0000004580)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000045c0)=@abs, 0x6e, &(0x7f0000004b00)=[{&(0x7f0000004640)=""/114, 0x72}, {&(0x7f00000046c0)=""/228, 0xe4}, {&(0x7f00000047c0)=""/115, 0x73}, {&(0x7f0000004840)=""/189, 0xbd}, {&(0x7f0000004980)=""/105, 0x69}], 0x5, &(0x7f0000004b80)}}, {{&(0x7f0000004bc0), 0x6e, &(0x7f0000000240)=[{&(0x7f0000004c40)=""/249, 0xf9}, {&(0x7f0000004d40)=""/103, 0x67}, {&(0x7f0000004dc0)=""/111, 0x6f}, {&(0x7f0000004e40)=""/160, 0xa0}, {&(0x7f0000004f00)=""/163, 0xa3}], 0x5, &(0x7f0000005040)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x5, 0x2002, 0x0) lchown(0x0, 0x0, 0x0) r5 = dup3(r3, r2, 0x0) recvmmsg(r5, &(0x7f0000008500)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}, {{&(0x7f00000002c0)=@nfc, 0x80, &(0x7f0000001d40)=[{&(0x7f00000017c0)=""/186, 0xba}, {&(0x7f0000001880)=""/162, 0xa2}, {&(0x7f0000001940)=""/44, 0x2c}, {&(0x7f0000001980)=""/43, 0x2b}, {&(0x7f00000019c0)=""/203, 0xcb}, {&(0x7f0000001ac0)=""/102, 0x66}, {&(0x7f0000001b40)=""/136, 0x88}, {&(0x7f0000001c00)=""/128, 0x80}, {&(0x7f0000001c80)=""/165, 0xa5}], 0x9}, 0x7ff}, {{&(0x7f0000001ec0)=@hci, 0x80, 0x0, 0x0, &(0x7f0000007380)=""/56, 0x38}, 0xc}, {{0x0, 0x0, &(0x7f00000074c0)=[{&(0x7f00000073c0)=""/148, 0x94}, {&(0x7f0000007480)=""/21, 0x15}], 0x2, &(0x7f0000007500)=""/4096, 0x1000}, 0x9}], 0x4, 0x40000121, 0x0) read$FUSE(r5, 0x0, 0x0) unshare(0x2030b00) add_key$keyring(0x0, &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) 2.489341409s ago: executing program 3 (id=674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002000)=@delchain={0x24, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xffeb, 0x1d0c5d7c03b59b98}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004880) 2.203826296s ago: executing program 3 (id=667): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = open_tree(r0, &(0x7f00000001c0)='./cgroup\x00', 0x8901) move_mount(r0, 0x0, r1, 0x0, 0x46) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newsa={0x19c, 0x10, 0x1, 0x70bc2c, 0x8000000, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x2c}, [@algo_crypt={0x60, 0x2, {{'cbc(twofish)\x00'}, 0xc0, "6e000b000000002000000000000000007ffffffe00001818"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x19c}}, 0x44050) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) syz_usb_connect$uac1(0x2, 0xb9, &(0x7f0000001100)=ANY=[@ANYBLOB="12010003000000406b1d01014000010203010902a700030100a0b50904000000010100000a24016bff"], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x10, 0x3, "91abc12404cf378042f26c43"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x8c}}, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x0, 0xc, 0x4, "05c6a41c"}, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4008000) 2.171189096s ago: executing program 2 (id=668): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[]) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e", 0x82}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c4", 0x66}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.109492628s ago: executing program 1 (id=669): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x20000, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x80000, 0x0, 0x1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000004300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1.904717313s ago: executing program 2 (id=670): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0xea, 0x440, 0x0, 0x10, 0x0, 0x4}, 0x9c) r1 = socket$kcm(0x11, 0x3, 0x300) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/53, 0x35}, {&(0x7f0000000500)=""/208, 0xd0}, {&(0x7f0000000600)=""/219, 0xdb}], 0x3}, 0x6}, {{0x0, 0xfffffffffffffe36, &(0x7f0000003c40)=[{&(0x7f0000000480)=""/108, 0x6c}, {&(0x7f0000000b80)=""/4080, 0xff0}], 0x2}, 0x3}], 0x2, 0x12000, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xc}}}, 0x24}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000100)={r4, 0x4114}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000003c0)={r4, 0xc8, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x800, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7fffffff}, @in6={0xa, 0x4e22, 0xfcd, @mcast2, 0x10001}, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfd6}, @in6={0xa, 0x4e23, 0x40, @remote, 0x9}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x10, @remote, 0x2}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0xaf, @private0, 0x5}]}, &(0x7f0000000480)=0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000040), 0x4) recvmsg(r1, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) 1.792141346s ago: executing program 1 (id=671): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 1.677589479s ago: executing program 1 (id=672): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @loopback, @broadcast}, &(0x7f0000000240)=0xc) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) close(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.568899091s ago: executing program 4 (id=673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 1.510142213s ago: executing program 4 (id=675): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) getgroups(0xa, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_open_dev$sg(0x0, 0x0, 0x40100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 1.428784214s ago: executing program 1 (id=676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) gettid() r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000480)={{0x80a0000, 0xf000, 0xc, 0x80, 0x4, 0x0, 0xa, 0x6, 0x0, 0xb, 0x6, 0xa4}, {0x4000, 0x6000, 0xe, 0x8, 0x5f, 0x0, 0x0, 0x1, 0xf, 0x5, 0xee, 0xf}, {0x8000000, 0xb000, 0x4, 0x8, 0xf0, 0x1, 0x8c, 0x6, 0x7, 0x99, 0xfd, 0x1}, {0x100000, 0x5000, 0x8, 0xe, 0x7, 0x5, 0x1, 0x87, 0x5, 0x2, 0x2}, {0x10000, 0x8000000, 0xa, 0x0, 0x5, 0x4, 0xf9, 0x6b, 0x5, 0x0, 0xfd, 0x80}, {0xeeee8000, 0xeeef0000, 0xb, 0xf, 0x30, 0x3, 0x9, 0x8, 0x8, 0x7, 0xe, 0x8}, {0xe6ef8000, 0x0, 0x0, 0x3, 0x53, 0x4, 0x0, 0xb9, 0x7, 0x5, 0x6, 0x7}, {0xeeee0000, 0x1332e2000, 0x9, 0x7, 0xfe, 0x0, 0xc, 0x3, 0x0, 0x6, 0xf9, 0x6}, {0x3000, 0x6}, {0x1, 0x3}, 0x2, 0x0, 0x2000, 0x2, 0xd, 0x2000, 0x10000, [0xfffffffffffffffc, 0x4, 0x9, 0xa]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f00000000c0)={0x7, 0xfffffffc}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.024950015s ago: executing program 2 (id=677): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0xea, 0x440, 0x0, 0x10, 0x0, 0x4}, 0x9c) r1 = socket$kcm(0x11, 0x3, 0x300) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/53, 0x35}, {&(0x7f0000000500)=""/208, 0xd0}, {&(0x7f0000000600)=""/219, 0xdb}], 0x3}, 0x6}, {{0x0, 0xfffffffffffffe36, &(0x7f0000003c40)=[{&(0x7f0000000480)=""/108, 0x6c}, {&(0x7f0000000b80)=""/4080, 0xff0}], 0x2}, 0x3}], 0x2, 0x12000, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xc}}}, 0x24}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000100)={r4, 0x4114}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000003c0)={r4, 0xc8, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x800, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7fffffff}, @in6={0xa, 0x4e22, 0xfcd, @mcast2, 0x10001}, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfd6}, @in6={0xa, 0x4e23, 0x40, @remote, 0x9}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x10, @remote, 0x2}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0xaf, @private0, 0x5}]}, &(0x7f0000000480)=0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000040), 0x4) recvmsg(r1, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x3dbc, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 775.02543ms ago: executing program 0 (id=678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002000)=@delchain={0x24, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xffeb, 0x1d0c5d7c03b59b98}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004880) 721.926202ms ago: executing program 0 (id=679): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) close(0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x2c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x20}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x4c}}, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="f00fba760004f3ab0f3036deb9800066b9800000c00f326635000400000f300fbf81c5b0e600f20f017e0064f364f30f20160f01cf", 0x35}], 0x1, 0x1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r6, 0x540b, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3, 0x100) 480.392338ms ago: executing program 1 (id=680): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) 177.104256ms ago: executing program 3 (id=681): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000480)={{0x80a0000, 0xf000, 0xc, 0x80, 0x4, 0x0, 0xa, 0x6, 0x0, 0xb, 0x6, 0xa4}, {0x4000, 0x6000, 0xe, 0x8, 0x5f, 0x0, 0x0, 0x1, 0xf, 0x5, 0xee, 0xf}, {0x8000000, 0xb000, 0x4, 0x8, 0xf0, 0x1, 0x8c, 0x6, 0x7, 0x99, 0xfd, 0x1}, {0x100000, 0x5000, 0x8, 0xe, 0x7, 0x5, 0x1, 0x87, 0x5, 0x2, 0x2}, {0x10000, 0x8000000, 0xa, 0x0, 0x5, 0x4, 0xf9, 0x6b, 0x5, 0x0, 0xfd, 0x80}, {0xeeee8000, 0xeeef0000, 0xb, 0xf, 0x30, 0x3, 0x9, 0x8, 0x8, 0x7, 0xe, 0x8}, {0xe6ef8000, 0x0, 0x0, 0x3, 0x53, 0x4, 0x0, 0xb9, 0x7, 0x5, 0x6, 0x7}, {0xeeee0000, 0x1332e2000, 0x9, 0x7, 0xfe, 0x0, 0xc, 0x3, 0x0, 0x6, 0xf9, 0x6}, {0x3000, 0x6}, {0x1, 0x3}, 0x2, 0x0, 0x2000, 0x2, 0xd, 0x2000, 0x10000, [0xfffffffffffffffc, 0x4, 0x9, 0xa]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f00000000c0)={0x7, 0xfffffffc}) 162.609265ms ago: executing program 3 (id=682): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) getgroups(0xa, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 112.607817ms ago: executing program 2 (id=683): r0 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 0s ago: executing program 1 (id=684): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x410081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="03070000ba00000000000000feefffff"], 0xc8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0xffffeffffffffbfd, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3e8) r4 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x8) r6 = openat$cgroup(r5, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) mq_notify(r7, &(0x7f0000000200)={0x0, 0x19, 0x4}) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x41c}, &(0x7f0000000100)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x7, 0x7, 0xa, 0x4000000000000e52, 0x800000000001, 0x5459, 0x1041, 0x200200000006, 0x8, 0x400000001, 0x4, 0x10000fffffffe, 0x3, 0x40000000006, 0x8000000000005, 0x800040069], 0x54000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r8, 0x5) r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r9, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00", 0x20}], 0x1) ioctl$SG_GET_PACK_ID(r9, 0x227c, &(0x7f0000000040)) r10 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r10, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) close(r8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. [ 66.633697][ T4174] cgroup: Unknown subsys name 'net' [ 66.779131][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.294621][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.787562][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 69.892564][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 69.944236][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 69.960373][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 70.046069][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 70.057244][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.064503][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.076285][ T4186] device bridge_slave_0 entered promiscuous mode [ 70.106232][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.117357][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.125436][ T4186] device bridge_slave_1 entered promiscuous mode [ 70.211709][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.218917][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.227634][ T4201] device bridge_slave_0 entered promiscuous mode [ 70.237966][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.270545][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.278343][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.287160][ T4201] device bridge_slave_1 entered promiscuous mode [ 70.296400][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.305862][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.313579][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.322767][ T4193] device bridge_slave_0 entered promiscuous mode [ 70.330246][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.337527][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.346756][ T4194] device bridge_slave_0 entered promiscuous mode [ 70.385265][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.393302][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.401426][ T4193] device bridge_slave_1 entered promiscuous mode [ 70.409613][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.416863][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.425429][ T4194] device bridge_slave_1 entered promiscuous mode [ 70.446408][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.455177][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.464144][ T4187] device bridge_slave_0 entered promiscuous mode [ 70.489541][ T4186] team0: Port device team_slave_0 added [ 70.497638][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.509634][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.520901][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.529152][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.537809][ T4187] device bridge_slave_1 entered promiscuous mode [ 70.565946][ T4186] team0: Port device team_slave_1 added [ 70.583119][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.595351][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.626673][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.645609][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.658491][ T4201] team0: Port device team_slave_0 added [ 70.674127][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.700057][ T4201] team0: Port device team_slave_1 added [ 70.706870][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.714434][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.741495][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.756441][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.768206][ T4193] team0: Port device team_slave_0 added [ 70.790726][ T4194] team0: Port device team_slave_0 added [ 70.812187][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.819198][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.845856][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.858248][ T4193] team0: Port device team_slave_1 added [ 70.873161][ T4194] team0: Port device team_slave_1 added [ 70.879587][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.887553][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.914482][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.940154][ T4187] team0: Port device team_slave_0 added [ 70.968726][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.979557][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.006617][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.025233][ T4187] team0: Port device team_slave_1 added [ 71.040053][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.048101][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.076249][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.115158][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.122476][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.149559][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.161813][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.168974][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.196514][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.214036][ T4186] device hsr_slave_0 entered promiscuous mode [ 71.220929][ T4186] device hsr_slave_1 entered promiscuous mode [ 71.241586][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.248848][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.284617][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.299115][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.306936][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.334244][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.362448][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.370017][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.397468][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.440244][ T4201] device hsr_slave_0 entered promiscuous mode [ 71.448557][ T4201] device hsr_slave_1 entered promiscuous mode [ 71.456851][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.466313][ T4201] Cannot create hsr debugfs directory [ 71.518373][ T4193] device hsr_slave_0 entered promiscuous mode [ 71.525460][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 71.532511][ T1325] Bluetooth: hci1: command 0x0409 tx timeout [ 71.533447][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 71.543848][ T4193] device hsr_slave_1 entered promiscuous mode [ 71.547183][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 71.557481][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 71.564140][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.572037][ T4193] Cannot create hsr debugfs directory [ 71.612489][ T4194] device hsr_slave_0 entered promiscuous mode [ 71.619961][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.627029][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.634747][ T4194] device hsr_slave_1 entered promiscuous mode [ 71.641678][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.650167][ T4194] Cannot create hsr debugfs directory [ 71.664472][ T4187] device hsr_slave_0 entered promiscuous mode [ 71.671576][ T4187] device hsr_slave_1 entered promiscuous mode [ 71.679471][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.687492][ T4187] Cannot create hsr debugfs directory [ 72.033428][ T4201] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.047556][ T4201] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.057687][ T4201] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.073476][ T4201] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.124938][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.145531][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.170998][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.195380][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.225717][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.257019][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.288096][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.297838][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.313542][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.334159][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.362611][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.386219][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.427313][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.476571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.488146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.529639][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.547360][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.558343][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.569265][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.579168][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.610888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.621061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.631004][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.638490][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.657054][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.673234][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.685006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.694725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.705013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.714676][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.721852][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.750682][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.774634][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.795453][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.805297][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.816456][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.827057][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.836407][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.845242][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.854855][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.864641][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.874145][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.887357][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.897809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.906561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.921284][ T4201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.949673][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.957431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.968931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.978387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.988152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.998067][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.005387][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.015833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.025272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.035334][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.042477][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.055383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.064643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.084090][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.098176][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.143275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.153602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.164256][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.171374][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.185035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.198771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.208569][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.215870][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.226326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.235547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.247081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.256325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.265008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.299814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.311398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.327765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.339981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.357153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.370516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.388717][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.424165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.433461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.443242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.455858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.466615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.476191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.485202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.494932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.505182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.517662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.533687][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.546132][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.558457][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.570796][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.590533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.599435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.609575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.613840][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 73.622345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.633023][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.636634][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 73.640229][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.654920][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 73.661153][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 73.661714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.668668][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 73.685136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.695378][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.702543][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.710540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.739076][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.776037][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.793065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.802833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.823230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.830844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.852476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.864379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.873936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.883722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.892898][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.899984][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.911312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.923608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.934789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.953286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.972570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.993409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.008314][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.015481][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.078389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.088889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.098325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.109658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.119697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.130767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.143798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.153871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.163266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.173117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.184729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.206138][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.217775][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.232738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.240334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.254231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.266919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.276079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.286670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.301538][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.325851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.338591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.399044][ T4201] device veth0_vlan entered promiscuous mode [ 74.407500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.423870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.439196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.450444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.460971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.469824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.480337][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.513446][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.528111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.537171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.546869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.557818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.612834][ T4201] device veth1_vlan entered promiscuous mode [ 74.631242][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.641570][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.656986][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.666634][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.682698][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.697688][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.747112][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.757232][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.783316][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.805812][ T4187] device veth0_vlan entered promiscuous mode [ 74.826686][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.838736][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.851611][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.862457][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.893254][ T4187] device veth1_vlan entered promiscuous mode [ 74.912642][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.920949][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.935609][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.947938][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.959617][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.979293][ T4186] device veth0_vlan entered promiscuous mode [ 75.002695][ T4201] device veth0_macvtap entered promiscuous mode [ 75.034088][ T4201] device veth1_macvtap entered promiscuous mode [ 75.044763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.055212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.065431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.079100][ T4186] device veth1_vlan entered promiscuous mode [ 75.096340][ T4187] device veth0_macvtap entered promiscuous mode [ 75.112726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.120994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.140938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.166574][ T4187] device veth1_macvtap entered promiscuous mode [ 75.186581][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.209354][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.228690][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.237567][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.246672][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.256798][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.266781][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.276279][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.307276][ T4201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.318789][ T4201] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.329208][ T4201] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.338402][ T4201] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.365813][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.377570][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.389378][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.412575][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.424042][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.433141][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.443111][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.495676][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.508812][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.521132][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.536197][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.545718][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.555272][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.565631][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.583085][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.594246][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.604089][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.613612][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.648410][ T4193] device veth0_vlan entered promiscuous mode [ 75.665088][ T4186] device veth0_macvtap entered promiscuous mode [ 75.674295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.682887][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 75.691692][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 75.699683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.708581][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 75.715922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.724098][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 75.730251][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 75.737778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.748744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.757571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.770390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.804903][ T4186] device veth1_macvtap entered promiscuous mode [ 75.821079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.831170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.840265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.850501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.859367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.870497][ T4193] device veth1_vlan entered promiscuous mode [ 75.889061][ T4194] device veth0_vlan entered promiscuous mode [ 75.903492][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.911647][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.943814][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.955370][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.977537][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.994888][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.006957][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.018302][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.029794][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.045727][ T4194] device veth1_vlan entered promiscuous mode [ 76.083222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.093427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.114051][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.116156][ T1267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.126578][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.144250][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.147113][ T1267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.155673][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.179631][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.208883][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.217977][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.227508][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.241233][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.251337][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.261315][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.270409][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.284463][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.293668][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.328797][ T4194] device veth0_macvtap entered promiscuous mode [ 76.364623][ T4193] device veth0_macvtap entered promiscuous mode [ 76.383637][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.391524][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.399334][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.413447][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.424505][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.434526][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.445817][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.471879][ T4193] device veth1_macvtap entered promiscuous mode [ 76.515145][ T4194] device veth1_macvtap entered promiscuous mode [ 76.576577][ T1267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.602519][ T1267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.603785][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.628192][ T4214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.636119][ T4214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.648295][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.659565][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.673562][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.683650][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.695065][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.713418][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.730372][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.747101][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.758107][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.774803][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.785589][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.798766][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.832554][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.843442][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.860101][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.874291][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.884534][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.893758][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.902462][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.910572][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.920691][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.931594][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.940622][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.961592][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.976343][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.987830][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.003468][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.016411][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.029952][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.055613][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.067023][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.079321][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.090270][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.101218][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.111631][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.125102][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.136889][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.147780][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.159625][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.187313][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.212676][ T4267] netlink: 'syz.0.1': attribute type 12 has an invalid length. [ 77.230985][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.263920][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.286913][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.296045][ T4276] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.307498][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.330016][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.344795][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.354555][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.366750][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.382667][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.393541][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.403066][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.411954][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.502443][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.510323][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.565297][ T4270] syz.0.1 (4270) used greatest stack depth: 21088 bytes left [ 77.583599][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.753455][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.761379][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.769799][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 77.781086][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 77.795255][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 77.809074][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 77.827084][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 77.836125][ T1267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.850985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.867809][ T1267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.882011][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.903237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.947844][ T1267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.960711][ T4286] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.7'. [ 77.972292][ T1267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.993606][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.001044][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.031440][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.093266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.252178][ T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.276552][ T21] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.442694][ T21] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 78.465464][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.489438][ T21] usb 2-1: Product: syz [ 78.504164][ T21] usb 2-1: Manufacturer: syz [ 78.508946][ T21] usb 2-1: SerialNumber: syz [ 78.562529][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.581866][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.842029][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 78.847315][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 78.942340][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.015506][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.025891][ T13] usb 3-1: config 0 has no interfaces? [ 79.035757][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.061456][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 79.081877][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 79.097058][ T4234] usb 2-1: USB disconnect, device number 2 [ 79.101950][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.191953][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 79.195131][ T13] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 79.212226][ T7] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 79.232117][ T7] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 79.243886][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.264083][ T13] usb 3-1: Product: syz [ 79.269244][ T13] usb 3-1: Manufacturer: syz [ 79.274749][ T7] usb 5-1: Manufacturer: syz [ 79.289038][ T13] usb 3-1: SerialNumber: syz [ 79.307446][ T7] usb 5-1: config 0 descriptor?? [ 79.315504][ T21] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 79.326795][ T13] usb 3-1: config 0 descriptor?? [ 79.331321][ T21] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 79.351616][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 79.378005][ T21] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 79.388282][ T4302] ODEBUG: Out of memory. ODEBUG disabled [ 79.391671][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 79.406163][ T21] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.431188][ T21] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 79.445623][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.716567][ T21] usb 1-1: GET_CAPABILITIES returned 0 [ 79.725920][ T4302] syz.3.10 (4302): drop_caches: 2 [ 79.731910][ T21] usbtmc 1-1:16.0: can't read capabilities [ 79.801888][ T7] rc_core: IR keymap rc-hauppauge not found [ 79.809005][ T7] Registered IR keymap rc-empty [ 79.815688][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 79.882302][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 79.934455][ T7] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 79.964460][ T7] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 80.005276][ T4282] usb 1-1: USB disconnect, device number 2 [ 80.042178][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 80.071960][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 80.111947][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 80.130541][ T4292] kvm [4291]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 80.153358][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 80.161467][ T4292] kvm [4291]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 80.191906][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 80.215210][ T4292] APIC base relocation is unsupported by KVM [ 80.243714][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 80.311898][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 80.351984][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 80.396507][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 80.414739][ T4315] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 80.432104][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 80.490438][ T7] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 80.530526][ T7] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 80.582500][ T7] usb 5-1: USB disconnect, device number 2 [ 80.667257][ T4321] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14'. [ 80.760285][ T4331] netlink: 'syz.4.19': attribute type 1 has an invalid length. [ 81.244680][ T4342] ip_tables: iptables: counters copy to user failed while replacing table [ 81.359413][ T1108] usb 3-1: USB disconnect, device number 2 [ 81.638523][ T4349] netlink: 116 bytes leftover after parsing attributes in process `syz.4.22'. [ 81.695146][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.755607][ T4356] netlink: 'syz.4.22': attribute type 12 has an invalid length. [ 81.915928][ T4230] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.201950][ T4230] usb 3-1: Using ep0 maxpacket: 32 [ 82.332476][ T4230] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 82.365388][ T4230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.439472][ T4369] process 'syz.0.29' launched './file0' with NULL argv: empty string added [ 82.592030][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.600065][ T4230] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 82.625738][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.667263][ T4230] usb 3-1: Product: syz [ 82.682572][ T4230] usb 3-1: Manufacturer: syz [ 82.687251][ T4230] usb 3-1: SerialNumber: syz [ 82.782566][ T4230] usb 3-1: config 0 descriptor?? [ 82.834413][ T4230] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 82.852018][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 83.012075][ T13] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 83.032048][ T13] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 83.092558][ T13] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 83.105363][ T13] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 83.117422][ T13] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 83.133103][ T13] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.156341][ T4377] netlink: 'syz.4.33': attribute type 1 has an invalid length. [ 83.166952][ T13] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.190177][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.286107][ T4382] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 83.542074][ T13] usb 4-1: GET_CAPABILITIES returned 0 [ 83.547788][ T13] usbtmc 4-1:16.0: can't read capabilities [ 83.629581][ T4394] netlink: 116 bytes leftover after parsing attributes in process `syz.1.38'. [ 83.694829][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.724915][ T4396] netlink: 'syz.1.38': attribute type 12 has an invalid length. [ 83.788557][ T13] usb 4-1: USB disconnect, device number 2 [ 84.444169][ T4420] device syzkaller0 entered promiscuous mode [ 84.591004][ T4423] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 84.895353][ T4435] netlink: 'syz.1.48': attribute type 1 has an invalid length. [ 85.123031][ T4230] gspca_sunplus: reg_r err -110 [ 85.128274][ T4230] sunplus: probe of 3-1:0.0 failed with error -110 [ 85.181344][ T4441] binder: 4437:4441 ioctl c0306201 0 returned -14 [ 85.555069][ T4449] binder: 4437:4449 ioctl c0306201 0 returned -14 [ 85.669175][ T4451] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.381987][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.694118][ T4463] device syzkaller0 entered promiscuous mode [ 86.912160][ T21] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 86.928480][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.958662][ T21] usb 4-1: Product: syz [ 86.989724][ T21] usb 4-1: Manufacturer: syz [ 87.071285][ T21] usb 4-1: SerialNumber: syz [ 87.120750][ T4468] netlink: 'syz.4.62': attribute type 1 has an invalid length. [ 87.208038][ T21] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 87.882048][ T21] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 87.973077][ T4188] usb 3-1: USB disconnect, device number 3 [ 88.288802][ T4455] udc-core: couldn't find an available UDC or it's busy [ 88.319369][ T4455] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.417657][ T1108] usb 4-1: USB disconnect, device number 3 [ 88.901786][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 88.921789][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 88.931781][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 88.941786][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 88.971799][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 88.981823][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 89.001809][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 89.011794][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 89.033838][ T21] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 89.041320][ T21] ath9k_htc: Failed to initialize the device [ 89.082655][ T1108] usb 4-1: ath9k_htc: USB layer deinitialized [ 90.091482][ T4504] syz.1.74 (4504): drop_caches: 2 [ 90.888228][ T4522] batman_adv: batadv0: Adding interface: veth0 [ 90.909269][ T4522] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.978556][ T4522] batman_adv: batadv0: Interface activated: veth0 [ 91.029624][ T4528] batman_adv: batadv0: Interface deactivated: veth0 [ 91.066651][ T4528] batman_adv: batadv0: Removing interface: veth0 [ 91.096441][ T4528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.116590][ T4528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.137720][ T4528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.156513][ T4528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.318607][ T4533] loop3: detected capacity change from 0 to 7 [ 91.330795][ T4180] Dev loop3: unable to read RDB block 7 [ 91.345057][ T4180] loop3: unable to read partition table [ 91.354373][ T4180] loop3: partition table beyond EOD, truncated [ 91.366545][ T4533] Dev loop3: unable to read RDB block 7 [ 91.387956][ T4533] loop3: unable to read partition table [ 91.399244][ T4533] loop3: partition table beyond EOD, truncated [ 91.438043][ T4533] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 91.476656][ T4536] ip_tables: iptables: counters copy to user failed while replacing table [ 91.788755][ T4543] netlink: 48 bytes leftover after parsing attributes in process `syz.0.90'. [ 91.809211][ T4543] Zero length message leads to an empty skb [ 91.867236][ T4545] netlink: 'syz.0.91': attribute type 1 has an invalid length. [ 91.921881][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.086619][ T1347] cfg80211: failed to load regulatory.db [ 92.184013][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 92.312210][ T13] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 92.330374][ T13] usb 2-1: config 0 has no interface number 0 [ 92.342982][ T13] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.372736][ T13] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.397626][ T13] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 92.411356][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.435432][ T13] usb 2-1: config 0 descriptor?? [ 92.553084][ T4568] netlink: 'syz.0.96': attribute type 1 has an invalid length. [ 92.812012][ T4573] ip_tables: iptables: counters copy to user failed while replacing table [ 93.181687][ T4580] udc-core: couldn't find an available UDC or it's busy [ 93.195932][ T4580] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 93.238626][ T4580] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.318708][ T4578] kvm: pic: non byte write [ 93.950174][ T4505] Set syz0 is full, maxelem 65536 reached [ 93.992104][ T13] usbhid 2-1:0.2: can't add hid device: -71 [ 93.998268][ T13] usbhid: probe of 2-1:0.2 failed with error -71 [ 94.018703][ T13] usb 2-1: USB disconnect, device number 3 [ 94.195998][ T4592] loop4: detected capacity change from 0 to 7 [ 94.220391][ T4592] Dev loop4: unable to read RDB block 7 [ 94.247522][ T4592] loop4: AHDI p1 p2 p3 p4 [ 94.257473][ T4592] loop4: partition table partially beyond EOD, truncated [ 94.278626][ T4592] loop4: p1 start 1601398130 is beyond EOD, truncated [ 94.307864][ T4592] loop4: p2 start 1702059890 is beyond EOD, truncated [ 94.351356][ T4592] loop4: p3 size 150995200 extends beyond EOD, truncated [ 94.574219][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 94.809419][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 95.546855][ T4624] batman_adv: batadv0: Adding interface: veth0 [ 95.561796][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 95.591121][ T4624] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.698983][ T4624] batman_adv: batadv0: Interface activated: veth0 [ 95.725345][ T4625] batman_adv: batadv0: Interface deactivated: veth0 [ 95.733827][ T4625] batman_adv: batadv0: Removing interface: veth0 [ 95.762664][ T4625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.789937][ T4625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.799075][ T4625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.824336][ T4625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.280833][ T4635] loop3: detected capacity change from 0 to 7 [ 96.329957][ T4635] Dev loop3: unable to read RDB block 7 [ 96.345586][ T4637] device syzkaller0 entered promiscuous mode [ 96.365447][ T4635] loop3: unable to read partition table [ 96.407324][ T4635] loop3: partition table beyond EOD, truncated [ 96.437190][ T4635] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 96.791983][ T1347] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.078636][ T1347] usb 3-1: Using ep0 maxpacket: 16 [ 97.140278][ T4586] Set syz0 is full, maxelem 65536 reached [ 97.212400][ T1347] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 97.234243][ T1347] usb 3-1: config 0 has no interface number 0 [ 97.250824][ T1347] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.274087][ T1347] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.295558][ T1347] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 97.308476][ T1347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.326064][ T1347] usb 3-1: config 0 descriptor?? [ 97.653849][ T21] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 97.745428][ T4676] netlink: 'syz.3.132': attribute type 1 has an invalid length. [ 97.930712][ T4681] device syzkaller0 entered promiscuous mode [ 98.012072][ T21] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 98.034518][ T4642] udc-core: couldn't find an available UDC or it's busy [ 98.061328][ T4642] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 98.070152][ T21] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 98.141933][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.149684][ T4642] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.352744][ T21] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 98.381084][ T21] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 98.414586][ T21] usb 1-1: Product: syz [ 98.428179][ T21] usb 1-1: Manufacturer: syz [ 98.436752][ T4692] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 98.453488][ T21] usb 1-1: SerialNumber: syz [ 98.480916][ T21] usb 1-1: config 0 descriptor?? [ 98.498237][ T4692] netlink: 'syz.4.138': attribute type 1 has an invalid length. [ 98.550696][ T21] usb 1-1: selecting invalid altsetting 0 [ 98.714083][ T4692] device bond1 entered promiscuous mode [ 98.760122][ T4692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.812781][ T1347] usbhid 3-1:0.2: can't add hid device: -71 [ 98.828114][ T4693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.138'. [ 98.839447][ T1347] usbhid: probe of 3-1:0.2 failed with error -71 [ 98.924500][ T1347] usb 3-1: USB disconnect, device number 4 [ 98.940117][ T4699] loop3: detected capacity change from 0 to 7 [ 99.013362][ T4699] Dev loop3: unable to read RDB block 7 [ 99.055023][ T4699] loop3: unable to read partition table [ 99.071695][ T4699] loop3: partition table beyond EOD, truncated [ 99.108042][ T4699] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 99.432935][ T4715] loop9: detected capacity change from 0 to 7 [ 99.458672][ T4180] Dev loop9: unable to read RDB block 7 [ 99.467691][ T4180] loop9: unable to read partition table [ 99.486678][ T4180] loop9: partition table beyond EOD, truncated [ 99.509365][ T4715] Dev loop9: unable to read RDB block 7 [ 99.530962][ T4715] loop9: unable to read partition table [ 99.551255][ T4715] loop9: partition table beyond EOD, truncated [ 99.561888][ T4715] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 99.592805][ T3559] Dev loop9: unable to read RDB block 7 [ 99.607422][ T3559] loop9: unable to read partition table [ 99.626042][ T3559] loop9: partition table beyond EOD, truncated [ 99.898834][ T4721] device syzkaller0 entered promiscuous mode [ 100.427090][ T4664] usb 1-1: selecting invalid altsetting 0 [ 100.434875][ T4664] usb 1-1: 0:0: usb_set_interface failed (-22) [ 100.441364][ T4664] usb 1-1: selecting invalid altsetting 0 [ 100.451588][ T4664] usb 1-1: 0:0: usb_set_interface failed (-22) [ 100.466758][ T4188] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.475322][ T4664] usb 1-1: selecting invalid altsetting 0 [ 100.495895][ T4664] usb 1-1: 0:0: usb_set_interface failed (-22) [ 100.512113][ T1108] usb 1-1: USB disconnect, device number 3 [ 100.617962][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'. [ 100.722510][ T4188] usb 3-1: Using ep0 maxpacket: 32 [ 100.881989][ T4188] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.972184][ T4188] usb 3-1: config 14 has an invalid interface number: 226 but max is 0 [ 100.984207][ T4188] usb 3-1: config 14 has no interface number 0 [ 100.995157][ T4188] usb 3-1: config 14 interface 226 has no altsetting 0 [ 101.035430][ T4282] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 101.044744][ T4188] usb 3-1: language id specifier not provided by device, defaulting to English [ 101.084535][ T4747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.155'. [ 101.152443][ T26] audit: type=1326 audit(1786262545.265:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz.4.157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e85ee0d9 code=0x7ffc0000 [ 101.176691][ T4188] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice=16.9b [ 101.176729][ T4188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.176756][ T4188] usb 3-1: Product: syz [ 101.205423][ T4749] netlink: 'syz.3.156': attribute type 1 has an invalid length. [ 101.240471][ T4188] usb 3-1: Manufacturer: 檮㙣꣒⪅暓衋汦﭅￸㈙峄˴柝吢㗳鋇䴡垦Ⅲ傀ᤌ良㐮釥炓᪎䱜乄홏쳸㥎ؾ隃ָ器헔萺폋톤窶庸䮻 [ 101.242118][ T26] audit: type=1326 audit(1786262545.275:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz.4.157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e85ee0d9 code=0x7ffc0000 [ 101.316159][ T4188] usb 3-1: SerialNumber: syz [ 101.331938][ T26] audit: type=1326 audit(1786262545.335:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz.4.157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e85ee0d9 code=0x7ffc0000 [ 101.378130][ T26] audit: type=1326 audit(1786262545.335:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz.4.157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e85ee0d9 code=0x7ffc0000 [ 101.404914][ T26] audit: type=1326 audit(1786262545.335:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz.4.157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e85ee0d9 code=0x7ffc0000 [ 101.429007][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.440813][ T26] audit: type=1326 audit(1786262545.335:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz.4.157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e85ee0d9 code=0x7ffc0000 [ 101.464863][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.485790][ T26] audit: type=1326 audit(1786262545.335:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz.4.157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e85ee0d9 code=0x7ffc0000 [ 101.509751][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.512679][ T4282] usb 2-1: config 0 has no interfaces? [ 101.520120][ T26] audit: type=1326 audit(1786262545.335:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz.4.157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e85ee0d9 code=0x7ffc0000 [ 101.545772][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.554263][ T26] audit: type=1326 audit(1786262545.335:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz.4.157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f87e85ee0d9 code=0x7ffc0000 [ 101.578133][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.606417][ T26] audit: type=1326 audit(1786262545.345:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz.4.157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e85ee0d9 code=0x7ffc0000 [ 101.630473][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.642138][ T4282] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 101.659072][ T4282] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 101.689808][ T4282] usb 2-1: Manufacturer: syz [ 101.704978][ T4282] usb 2-1: config 0 descriptor?? [ 101.842568][ T4188] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 101.866495][ T4188] usb 3-1: USB disconnect, device number 5 [ 102.208143][ T4763] device syzkaller0 entered promiscuous mode [ 102.245869][ T4230] usb 2-1: USB disconnect, device number 4 [ 102.651839][ T1108] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 102.859370][ T4776] syz.0.166 (4776): drop_caches: 2 [ 102.891823][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 103.015353][ T4785] netlink: 'syz.3.170': attribute type 1 has an invalid length. [ 103.084899][ T4787] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.131862][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.182130][ T1108] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 103.195015][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.221507][ T1108] usb 3-1: Product: syz [ 103.235144][ T1108] usb 3-1: Manufacturer: syz [ 103.241224][ T4793] device syzkaller0 entered promiscuous mode [ 103.250361][ T1108] usb 3-1: SerialNumber: syz [ 103.264082][ T1108] usb 3-1: config 0 descriptor?? [ 103.334230][ T1108] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 103.391805][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 103.512253][ T21] usb 2-1: config index 0 descriptor too short (expected 3659, got 75) [ 103.524845][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.702081][ T21] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 103.711591][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.724956][ T21] usb 2-1: Product: syz [ 103.729369][ T21] usb 2-1: Manufacturer: syz [ 103.735691][ T21] usb 2-1: SerialNumber: syz [ 103.747516][ T21] usb 2-1: config 0 descriptor?? [ 103.762118][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.794799][ T21] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 104.194579][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.220340][ T4230] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 104.229897][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.260155][ T4230] usb 1-1: config 0 descriptor?? [ 104.421976][ T1108] gspca_ov534_9: reg_w failed -71 [ 104.731960][ T4795] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 104.811879][ T1108] gspca_ov534_9: Unknown sensor 0000 [ 104.811948][ T1108] ov534_9: probe of 3-1:0.0 failed with error -22 [ 104.847696][ T1108] usb 3-1: USB disconnect, device number 6 [ 105.233169][ T4789] Set syz1 is full, maxelem 65536 reached [ 105.419388][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c9bf400: rx timeout, send abort [ 105.440118][ T4816] syz.4.182 (4816): drop_caches: 2 [ 105.519010][ T4821] device syzkaller0 entered promiscuous mode [ 105.531783][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 105.920160][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c9bfc00: rx timeout, send abort [ 105.932158][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c9bf400: abort rx timeout. Force session deactivation [ 106.061881][ T21] gspca_sunplus: reg_r err -110 [ 106.067814][ T21] sunplus: probe of 2-1:0.0 failed with error -110 [ 106.412434][ T4840] loop3: detected capacity change from 0 to 7 [ 106.428544][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c9bfc00: abort rx timeout. Force session deactivation [ 106.451796][ T4840] Dev loop3: unable to read RDB block 7 [ 106.478056][ T4840] loop3: unable to read partition table [ 106.514769][ T4840] loop3: partition table beyond EOD, truncated [ 106.541461][ T4840] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 106.652297][ T4230] usbhid 1-1:0.0: can't add hid device: -71 [ 106.664997][ T4230] usbhid: probe of 1-1:0.0 failed with error -71 [ 106.726995][ T4230] usb 1-1: USB disconnect, device number 4 [ 107.480102][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.544840][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.596027][ T4861] syz.4.196 (4861): drop_caches: 2 [ 107.928111][ T4866] fido_id[4866]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.071869][ T4230] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 108.507951][ T4230] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 108.547345][ T4230] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 108.561952][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.608573][ T4230] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.784323][ T4230] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 108.799601][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 108.824069][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 108.850544][ T4230] usb 3-1: Product: syz [ 108.866218][ T4230] usb 3-1: Manufacturer: syz [ 108.870969][ T4230] usb 3-1: SerialNumber: syz [ 108.916387][ T4230] usb 3-1: config 0 descriptor?? [ 108.943515][ T13] usb 1-1: config 123 interface 0 has no altsetting 0 [ 108.986193][ C1] sd 0:0:1:0: tag#1253 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 108.996355][ C1] sd 0:0:1:0: tag#1253 CDB: Write(6) 0a 00 00 00 0b 00 00 00 00 00 00 00 [ 109.008595][ T4230] usb 3-1: selecting invalid altsetting 0 [ 109.102113][ T13] usb 1-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 109.134337][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.186613][ T13] usb 1-1: Product: syz [ 109.218821][ T13] usb 1-1: Manufacturer: syz [ 109.265487][ T13] usb 1-1: SerialNumber: syz [ 109.670713][ T4230] usb 2-1: USB disconnect, device number 5 [ 109.831268][ T4893] loop4: detected capacity change from 0 to 7 [ 109.855791][ T4176] Dev loop4: unable to read RDB block 7 [ 109.855846][ T4176] loop4: unable to read partition table [ 109.855933][ T4176] loop4: partition table beyond EOD, truncated [ 109.867980][ T4893] Dev loop4: unable to read RDB block 7 [ 109.868013][ T4893] loop4: unable to read partition table [ 109.868095][ T4893] loop4: partition table beyond EOD, truncated [ 109.868109][ T4893] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 110.223388][ T13] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 110.305553][ T13] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 110.359225][ T13] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 110.404020][ T13] usb 1-1: media controller created [ 110.487894][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.646802][ T13] set interface failed [ 110.647206][ T13] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 110.682771][ T13] error writing reg: 0xff, val: 0x00 [ 110.914735][ T4862] usb 3-1: selecting invalid altsetting 0 [ 110.952775][ T13] dvb_usb_mxl111sf: probe of 1-1:123.0 failed with error -22 [ 110.961511][ T4862] usb 3-1: 0:0: usb_set_interface failed (-22) [ 111.010657][ T4862] usb 3-1: selecting invalid altsetting 0 [ 111.019932][ T13] usb 1-1: USB disconnect, device number 5 [ 111.033576][ T4862] usb 3-1: 0:0: usb_set_interface failed (-22) [ 111.086597][ T4862] usb 3-1: selecting invalid altsetting 0 [ 111.114669][ T4862] usb 3-1: 0:0: usb_set_interface failed (-22) [ 111.150778][ T4282] usb 3-1: USB disconnect, device number 7 [ 112.131566][ T4842] Set syz1 is full, maxelem 65536 reached [ 112.174579][ T4913] syz.1.212 (4913): drop_caches: 2 [ 112.210928][ T4919] program syz.3.214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.312068][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 112.365878][ T4922] device syzkaller0 entered promiscuous mode [ 112.595287][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 112.617696][ T4931] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.832456][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 112.955710][ T21] usb 5-1: config 14 has an invalid interface number: 226 but max is 0 [ 112.971940][ T21] usb 5-1: config 14 has no interface number 0 [ 112.991846][ T21] usb 5-1: config 14 interface 226 has no altsetting 0 [ 113.075447][ T21] usb 5-1: language id specifier not provided by device, defaulting to English [ 113.107765][ T4946] syz.3.227 (4946): drop_caches: 2 [ 113.217197][ T21] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice=16.9b [ 113.236692][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.258862][ T21] usb 5-1: Product: syz [ 113.274143][ T21] usb 5-1: Manufacturer: 檮㙣꣒⪅暓衋汦﭅￸㈙峄˴柝吢㗳鋇䴡垦Ⅲ傀ᤌ良㐮釥炓᪎䱜乄홏쳸㥎ؾ隃ָ器헔萺폋톤窶庸䮻 [ 113.353313][ T21] usb 5-1: SerialNumber: syz [ 115.095937][ T21] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 115.142798][ T21] usb 5-1: USB disconnect, device number 3 [ 115.164418][ T4981] syz.4.240 (4981): drop_caches: 2 [ 115.557530][ T4991] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 115.858573][ T5001] device syzkaller1 entered promiscuous mode [ 115.889175][ T5001] syz.0.249 uses obsolete (PF_INET,SOCK_PACKET) [ 116.408463][ T5011] syz.4.253 (5011): drop_caches: 2 [ 116.693553][ T5017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'. [ 116.825872][ T5022] netlink: 'syz.0.258': attribute type 1 has an invalid length. [ 117.413808][ T4944] Set syz1 is full, maxelem 65536 reached [ 117.646820][ T5035] device syzkaller1 entered promiscuous mode [ 117.831368][ T5039] syz.4.266 (5039): drop_caches: 2 [ 118.006140][ T5045] netlink: 'syz.4.269': attribute type 1 has an invalid length. [ 118.796478][ T5071] syz.4.279 (5071): drop_caches: 2 [ 118.871891][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.190772][ T5076] netlink: 'syz.4.282': attribute type 1 has an invalid length. [ 119.278771][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 119.299577][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 119.319602][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.384744][ T23] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 119.763602][ T13] usb 1-1: USB disconnect, device number 6 [ 119.780609][ T2426] usb 1-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 119.851892][ T2426] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 119.945137][ T5104] syz.0.292 (5104): drop_caches: 2 [ 120.127914][ T5108] netlink: 'syz.0.294': attribute type 1 has an invalid length. [ 120.331335][ T5111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.295'. [ 121.042235][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 121.124689][ T5128] netlink: 96 bytes leftover after parsing attributes in process `syz.1.303'. [ 121.170789][ T5130] syz.0.304 (5130): drop_caches: 2 [ 121.291797][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 121.412039][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.457822][ T23] usb 4-1: config 0 has no interfaces? [ 121.463601][ T23] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.473520][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.493942][ T23] usb 4-1: config 0 descriptor?? [ 121.531159][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.576637][ T21] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.588899][ T5140] netlink: 'syz.0.307': attribute type 1 has an invalid length. [ 121.746460][ T21] usb 4-1: USB disconnect, device number 4 [ 123.172079][ T5169] syz.1.317 (5169): drop_caches: 2 [ 124.023315][ T5185] Unknown metaid 0 dlen 28 [ 125.031560][ T5205] syz.4.328 (5205): drop_caches: 2 [ 125.120962][ T21] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 125.141658][ T21] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 125.625239][ T5216] netlink: 96 bytes leftover after parsing attributes in process `syz.4.331'. [ 126.420638][ T5244] syz.4.340 (5244): drop_caches: 2 [ 127.690145][ T5267] device syzkaller0 entered promiscuous mode [ 128.110913][ T1347] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 128.130879][ T1347] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.146067][ T5283] syz.0.352 (5283): drop_caches: 2 [ 129.311888][ T4282] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.402900][ T5317] syz.1.365 (5317): drop_caches: 2 [ 129.581824][ T4282] usb 4-1: Using ep0 maxpacket: 32 [ 129.695664][ T5329] device bond_slave_0 entered promiscuous mode [ 129.702291][ T5329] device bond_slave_1 entered promiscuous mode [ 129.725991][ T4282] usb 4-1: config index 0 descriptor too short (expected 3659, got 75) [ 129.737625][ T5329] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 129.772786][ T4282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.795249][ T5329] team0: Port device macvlan2 added [ 129.945400][ T5335] netlink: 'syz.4.374': attribute type 1 has an invalid length. [ 130.002966][ T4282] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 130.021803][ T4282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.044754][ T4282] usb 4-1: Product: syz [ 130.048988][ T4282] usb 4-1: Manufacturer: syz [ 130.068609][ T4282] usb 4-1: SerialNumber: syz [ 130.084561][ T4282] usb 4-1: config 0 descriptor?? [ 130.134662][ T4282] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 130.261648][ T1347] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.281003][ T1347] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 130.458007][ T5353] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 130.469944][ T5353] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 130.786658][ T5360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.381'. [ 130.798923][ T5360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.381'. [ 130.808623][ T5360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.381'. [ 130.821842][ T23] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 131.140420][ T5376] netlink: 'syz.4.388': attribute type 1 has an invalid length. [ 131.181928][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 131.189743][ T23] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 131.199186][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.210843][ T23] usb 2-1: config 0 descriptor?? [ 131.295260][ T7] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 131.691994][ T7] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.702351][ T7] usb 3-1: config 0 has no interface number 0 [ 131.751973][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 131.758013][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 131.768452][ T23] usb 2-1: USB disconnect, device number 6 [ 131.891961][ T7] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 131.902716][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.911363][ T7] usb 3-1: Product: syz [ 131.916715][ T7] usb 3-1: Manufacturer: syz [ 131.929639][ T7] usb 3-1: SerialNumber: syz [ 131.942982][ T7] usb 3-1: config 0 descriptor?? [ 131.984222][ T7] usb 3-1: selecting invalid altsetting 1 [ 131.995638][ T7] dvb_ttusb_budget: ttusb_init_controller: error [ 132.010628][ T7] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 132.107812][ T5407] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 132.123602][ T7] DVB: Unable to find symbol stv0299_attach() [ 132.145572][ T5407] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 132.262045][ T7] DVB: Unable to find symbol tda8083_attach() [ 132.269704][ T7] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 132.320093][ T7] usb 3-1: USB disconnect, device number 8 [ 132.392496][ T4282] gspca_sunplus: reg_r err -110 [ 132.397625][ T4282] sunplus: probe of 4-1:0.0 failed with error -110 [ 132.849993][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 132.898612][ T5414] netlink: 44 bytes leftover after parsing attributes in process `syz.2.401'. [ 133.044293][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.051967][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.351856][ T4234] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 133.591998][ T4234] usb 3-1: Using ep0 maxpacket: 8 [ 133.711959][ T4234] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 133.735813][ T4234] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.788766][ T4234] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.829023][ T4234] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.866578][ T4234] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.930846][ T4234] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.940587][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.068422][ T5437] capability: warning: `syz.4.410' uses deprecated v2 capabilities in a way that may be insecure [ 134.113811][ T4282] usb 4-1: USB disconnect, device number 5 [ 134.162261][ T5439] device bond_slave_0 entered promiscuous mode [ 134.169537][ T5439] device bond_slave_1 entered promiscuous mode [ 134.190108][ T5439] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.200910][ T5439] team0: Port device macvlan2 added [ 134.212095][ T4234] usb 3-1: GET_CAPABILITIES returned 0 [ 134.213248][ T5441] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by " "[5441] [ 134.217743][ T4234] usbtmc 3-1:16.0: can't read capabilities [ 134.490125][ T4282] usb 3-1: USB disconnect, device number 9 [ 134.873588][ T5466] netlink: 'syz.4.419': attribute type 1 has an invalid length. [ 135.326350][ T5492] device bond_slave_0 entered promiscuous mode [ 135.333478][ T5492] device bond_slave_1 entered promiscuous mode [ 135.372610][ T5492] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.396488][ T5492] team0: Port device macvlan2 added [ 135.686970][ T5504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 135.787554][ T5506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.436'. [ 135.869564][ T5510] device bridge1 entered promiscuous mode [ 136.388469][ T5528] device syzkaller0 entered promiscuous mode [ 136.707242][ T5539] device bond_slave_0 entered promiscuous mode [ 136.713927][ T5539] device bond_slave_1 entered promiscuous mode [ 136.745303][ T5539] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.760598][ T5539] team0: Port device macvlan2 added [ 137.291483][ T5562] device syzkaller0 entered promiscuous mode [ 137.471482][ T5567] netlink: 68 bytes leftover after parsing attributes in process `syz.0.460'. [ 137.973099][ T5590] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5596] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5590] [ 138.126767][ T5601] netlink: 256 bytes leftover after parsing attributes in process `syz.2.469'. [ 138.304203][ T5608] device syzkaller0 entered promiscuous mode [ 138.326602][ T5601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 138.356030][ T5601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'. [ 138.721973][ T4234] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.971813][ T4234] usb 5-1: Using ep0 maxpacket: 32 [ 139.095226][ T4234] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 139.123477][ T4234] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.291907][ T4234] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 139.302204][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.310353][ T4234] usb 5-1: Product: syz [ 139.315274][ T4234] usb 5-1: Manufacturer: syz [ 139.320067][ T4234] usb 5-1: SerialNumber: syz [ 139.327921][ T4234] usb 5-1: config 0 descriptor?? [ 139.374161][ T4234] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 139.518532][ T5659] netlink: 72 bytes leftover after parsing attributes in process `syz.1.482'. [ 140.071845][ T1347] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 140.099375][ T5663] device syzkaller0 entered promiscuous mode [ 140.311847][ T1347] usb 3-1: Using ep0 maxpacket: 32 [ 140.432182][ T1347] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 140.458088][ T1347] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.632405][ T1347] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 140.651324][ T1347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.688592][ T1347] usb 3-1: Product: syz [ 140.694462][ T1347] usb 3-1: Manufacturer: syz [ 140.699145][ T1347] usb 3-1: SerialNumber: syz [ 140.725456][ T1347] usb 3-1: config 0 descriptor?? [ 140.763987][ T1347] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 140.869357][ T5688] device syzkaller0 entered promiscuous mode [ 141.274597][ T5694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'. [ 141.336895][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'. [ 141.641965][ T4234] gspca_sunplus: reg_r err -110 [ 141.647481][ T4234] sunplus: probe of 5-1:0.0 failed with error -110 [ 141.853206][ T5710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.501'. [ 143.041926][ T1347] gspca_sunplus: reg_r err -110 [ 143.046941][ T1347] sunplus: probe of 3-1:0.0 failed with error -110 [ 143.487513][ T26] kauditd_printk_skb: 67 callbacks suppressed [ 143.487530][ T26] audit: type=1800 audit(1786262587.605:79): pid=5724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.506" name="bus" dev="ramfs" ino=41544 res=0 errno=0 [ 143.701477][ T1108] usb 5-1: USB disconnect, device number 4 [ 143.877462][ T5735] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 144.331839][ T4230] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 144.593907][ T4230] usb 4-1: Using ep0 maxpacket: 8 [ 144.638917][ T1108] usb 3-1: USB disconnect, device number 10 [ 144.699970][ T5757] device syzkaller0 entered promiscuous mode [ 144.711991][ T4230] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 144.720647][ T4230] usb 4-1: config 0 has no interface number 0 [ 144.740777][ T4230] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 144.756964][ T4230] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 144.778128][ T4230] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.813261][ T4230] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 144.830272][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.862175][ T4230] usb 4-1: config 0 descriptor?? [ 144.904825][ T4230] ldusb 4-1:0.55: Interrupt in endpoint not found [ 145.111102][ T4230] usb 4-1: USB disconnect, device number 6 [ 145.244634][ T4188] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 145.492051][ T4188] usb 3-1: Using ep0 maxpacket: 32 [ 145.552423][ T1108] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.612078][ T4188] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 145.624971][ T4188] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.802076][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 145.822156][ T4188] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 145.835522][ T4188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.845549][ T4188] usb 3-1: Product: syz [ 145.849781][ T4188] usb 3-1: Manufacturer: syz [ 145.854840][ T4188] usb 3-1: SerialNumber: syz [ 145.869929][ T4188] usb 3-1: config 0 descriptor?? [ 145.914100][ T4188] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 145.922100][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.942271][ T1108] usb 2-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.966930][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.982178][ T1108] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice= 0.00 [ 146.002325][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.020669][ T1108] usb 2-1: config 0 descriptor?? [ 146.054159][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 146.066515][ T1108] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 146.273098][ T4230] usb 2-1: USB disconnect, device number 8 [ 146.311889][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 146.432043][ T23] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 146.440485][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.570545][ T5795] device syzkaller0 entered promiscuous mode [ 146.612037][ T23] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 146.621300][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.632218][ T23] usb 5-1: Product: syz [ 146.636443][ T23] usb 5-1: Manufacturer: syz [ 146.641228][ T23] usb 5-1: SerialNumber: syz [ 146.650158][ T23] usb 5-1: config 0 descriptor?? [ 146.694372][ T23] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 148.181892][ T4188] gspca_sunplus: reg_r err -110 [ 148.187336][ T4188] sunplus: probe of 3-1:0.0 failed with error -110 [ 148.670600][ T5858] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 148.972522][ T23] gspca_sunplus: reg_r err -110 [ 148.979917][ T23] sunplus: probe of 5-1:0.0 failed with error -110 [ 149.839874][ T23] usb 3-1: USB disconnect, device number 11 [ 150.076495][ T5886] xt_hashlimit: size too large, truncated to 1048576 [ 150.385043][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 150.514098][ T4234] usb 5-1: USB disconnect, device number 5 [ 150.752138][ T23] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 150.783171][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.800914][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.815823][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 150.901946][ T23] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 150.924784][ T23] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 150.935965][ T23] usb 3-1: Manufacturer: syz [ 150.952738][ T23] usb 3-1: config 0 descriptor?? [ 151.428420][ T23] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 151.450347][ T23] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 151.491944][ T23] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 151.714469][ T4188] usb 3-1: USB disconnect, device number 12 [ 151.739781][ T5921] device bridge1 entered promiscuous mode [ 154.681993][ T4188] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 154.931836][ T4188] usb 5-1: Using ep0 maxpacket: 8 [ 155.051946][ T4188] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 155.061367][ T4188] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.071905][ T4188] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.082164][ T4188] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.092637][ T4188] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.105993][ T4188] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.115380][ T4188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.381937][ T4188] usb 5-1: GET_CAPABILITIES returned 0 [ 155.387602][ T4188] usbtmc 5-1:16.0: can't read capabilities [ 155.898176][ T6040] device bridge1 entered promiscuous mode [ 156.285806][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 156.350020][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 157.427495][ T4230] usb 5-1: USB disconnect, device number 6 [ 157.682335][ T1347] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 158.072061][ T1347] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.080160][ T1347] usb 3-1: config 0 has no interface number 0 [ 158.291952][ T1347] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 158.301075][ T1347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.342006][ T1347] usb 3-1: Product: syz [ 158.347015][ T1347] usb 3-1: Manufacturer: syz [ 158.351684][ T1347] usb 3-1: SerialNumber: syz [ 158.382349][ T1347] usb 3-1: config 0 descriptor?? [ 158.433963][ T1347] usb 3-1: selecting invalid altsetting 1 [ 158.439983][ T1347] dvb_ttusb_budget: ttusb_init_controller: error [ 158.455549][ T1347] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 158.615848][ T1347] DVB: Unable to find symbol stv0299_attach() [ 158.743361][ T1347] DVB: Unable to find symbol tda8083_attach() [ 158.749656][ T1347] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 158.794795][ T1347] usb 3-1: USB disconnect, device number 13 [ 160.381394][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 160.483419][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 161.771834][ T23] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 162.182065][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 162.222128][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 162.301919][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.317193][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.391934][ T4234] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 162.482193][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.491458][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.499988][ T23] usb 4-1: Product: syz [ 162.504523][ T23] usb 4-1: Manufacturer: syz [ 162.509292][ T23] usb 4-1: SerialNumber: syz [ 162.631883][ T4234] usb 5-1: Using ep0 maxpacket: 32 [ 162.653284][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 162.717076][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 162.752046][ T4234] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 162.785646][ T6201] udc-core: couldn't find an available UDC or it's busy [ 162.795220][ T4234] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.812268][ T6201] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 162.912172][ T23] usb 4-1: skipping empty audio interface (v1) [ 162.947136][ T23] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 162.968884][ T23] usb 4-1: USB disconnect, device number 7 [ 162.982367][ T4234] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 163.015900][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.027645][ T4234] usb 5-1: Product: syz [ 163.037111][ T4234] usb 5-1: Manufacturer: syz [ 163.048860][ T4234] usb 5-1: SerialNumber: syz [ 163.070651][ T4234] usb 5-1: config 0 descriptor?? [ 163.117846][ T4234] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 163.234368][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.732904][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 163.741184][ T6273] [ 163.743580][ T6273] ====================================================== [ 163.750633][ T6273] WARNING: possible circular locking dependency detected [ 163.757692][ T6273] syzkaller #0 Not tainted [ 163.762137][ T6273] ------------------------------------------------------ [ 163.769364][ T6273] syz.1.684/6273 is trying to acquire lock: [ 163.775295][ T6273] ffff888024dd2ad8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 163.787080][ T6273] [ 163.787080][ T6273] but task is already holding lock: [ 163.794774][ T6273] ffff888024dd0c60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 163.803903][ T6273] [ 163.803903][ T6273] which lock already depends on the new lock. [ 163.803903][ T6273] [ 163.814454][ T6273] [ 163.814454][ T6273] the existing dependency chain (in reverse order) is: [ 163.823588][ T6273] [ 163.823588][ T6273] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 163.831526][ T6273] lock_sock_nested+0x44/0x100 [ 163.836864][ T6273] smc_listen_out+0x105/0x3b0 [ 163.842106][ T6273] smc_listen_work+0x52a/0xd10 [ 163.847522][ T6273] process_one_work+0x867/0xff0 [ 163.852979][ T6273] worker_thread+0xad7/0x12a0 [ 163.858224][ T6273] kthread+0x42e/0x520 [ 163.862873][ T6273] ret_from_fork+0x1f/0x30 [ 163.867916][ T6273] [ 163.867916][ T6273] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 163.878221][ T6273] __lock_acquire+0x2c66/0x7b50 [ 163.883723][ T6273] lock_acquire+0x19e/0x400 [ 163.889190][ T6273] __flush_work+0x116/0x210 [ 163.894249][ T6273] __cancel_work_timer+0x3f4/0x560 [ 163.899905][ T6273] smc_clcsock_release+0x5c/0xe0 [ 163.905391][ T6273] __smc_release+0x644/0x7b0 [ 163.910528][ T6273] smc_close_non_accepted+0xd1/0x1f0 [ 163.916556][ T6273] smc_close_active+0xae2/0xea0 [ 163.922549][ T6273] __smc_release+0x9c/0x7b0 [ 163.927612][ T6273] smc_release+0x2c1/0x520 [ 163.932570][ T6273] sock_close+0xbf/0x210 [ 163.937476][ T6273] __fput+0x212/0x8c0 [ 163.942038][ T6273] task_work_run+0x125/0x1a0 [ 163.947277][ T6273] exit_to_user_mode_loop+0x10f/0x130 [ 163.953197][ T6273] exit_to_user_mode_prepare+0xee/0x180 [ 163.959294][ T6273] syscall_exit_to_user_mode+0x16/0x40 [ 163.965520][ T6273] do_syscall_64+0x58/0xa0 [ 163.970584][ T6273] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.977028][ T6273] [ 163.977028][ T6273] other info that might help us debug this: [ 163.977028][ T6273] [ 163.987359][ T6273] Possible unsafe locking scenario: [ 163.987359][ T6273] [ 163.994824][ T6273] CPU0 CPU1 [ 164.000545][ T6273] ---- ---- [ 164.005915][ T6273] lock(sk_lock-AF_SMC/1); [ 164.010451][ T6273] lock((work_completion)(&new_smc->smc_listen_work)); [ 164.019924][ T6273] lock(sk_lock-AF_SMC/1); [ 164.026977][ T6273] lock((work_completion)(&new_smc->smc_listen_work)); [ 164.033955][ T6273] [ 164.033955][ T6273] *** DEADLOCK *** [ 164.033955][ T6273] [ 164.042225][ T6273] 2 locks held by syz.1.684/6273: [ 164.047277][ T6273] #0: ffff888072b73e10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 164.057611][ T6273] #1: ffff888024dd0c60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 164.067053][ T6273] [ 164.067053][ T6273] stack backtrace: [ 164.072970][ T6273] CPU: 1 PID: 6273 Comm: syz.1.684 Not tainted syzkaller #0 [ 164.080284][ T6273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.090493][ T6273] Call Trace: [ 164.093799][ T6273] [ 164.096758][ T6273] dump_stack_lvl+0x188/0x250 [ 164.101477][ T6273] ? load_image+0x410/0x410 [ 164.106310][ T6273] ? show_regs_print_info+0x20/0x20 [ 164.111736][ T6273] ? print_circular_bug+0x12b/0x1a0 [ 164.117158][ T6273] check_noncircular+0x296/0x330 [ 164.122115][ T6273] ? look_up_lock_class+0x71/0x110 [ 164.127382][ T6273] ? add_chain_block+0x9b0/0x9b0 [ 164.132453][ T6273] ? lockdep_lock+0xf1/0x1f0 [ 164.137236][ T6273] ? lock_release+0xb5/0x8a0 [ 164.141884][ T6273] ? mark_lock+0x94/0x320 [ 164.146322][ T6273] ? _find_first_zero_bit+0xd1/0xf0 [ 164.152104][ T6273] __lock_acquire+0x2c66/0x7b50 [ 164.157083][ T6273] ? hlock_conflict+0x59/0x1f0 [ 164.162240][ T6273] ? __bfs+0x27a/0x560 [ 164.166332][ T6273] ? verify_lock_unused+0x140/0x140 [ 164.171554][ T6273] ? mark_lock+0x94/0x320 [ 164.175915][ T6273] ? __lock_acquire+0x13dc/0x7b50 [ 164.180970][ T6273] ? lockdep_unlock+0x143/0x2e0 [ 164.185873][ T6273] lock_acquire+0x19e/0x400 [ 164.190498][ T6273] ? __flush_work+0xfa/0x210 [ 164.195294][ T6273] ? read_lock_is_recursive+0x10/0x10 [ 164.200819][ T6273] __flush_work+0x116/0x210 [ 164.205379][ T6273] ? __flush_work+0xfa/0x210 [ 164.210015][ T6273] ? flush_work+0x20/0x20 [ 164.214453][ T6273] ? try_to_grab_pending+0xfb/0x820 [ 164.219676][ T6273] ? mark_lock+0x94/0x320 [ 164.224374][ T6273] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 164.230382][ T6273] ? lock_chain_count+0x20/0x20 [ 164.235471][ T6273] ? mark_lock+0x94/0x320 [ 164.239836][ T6273] ? __cancel_work_timer+0x36a/0x560 [ 164.245251][ T6273] __cancel_work_timer+0x3f4/0x560 [ 164.250417][ T6273] ? cancel_work_sync+0x20/0x20 [ 164.255332][ T6273] ? __local_bh_enable_ip+0x136/0x1c0 [ 164.260937][ T6273] ? lockdep_hardirqs_on+0x94/0x140 [ 164.266466][ T6273] ? __local_bh_enable_ip+0x136/0x1c0 [ 164.271885][ T6273] ? _local_bh_enable+0xa0/0xa0 [ 164.276759][ T6273] smc_clcsock_release+0x5c/0xe0 [ 164.281741][ T6273] __smc_release+0x644/0x7b0 [ 164.286353][ T6273] smc_close_non_accepted+0xd1/0x1f0 [ 164.291749][ T6273] smc_close_active+0xae2/0xea0 [ 164.296835][ T6273] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 164.302495][ T6273] __smc_release+0x9c/0x7b0 [ 164.307198][ T6273] smc_release+0x2c1/0x520 [ 164.311651][ T6273] sock_close+0xbf/0x210 [ 164.315921][ T6273] ? sock_mmap+0x90/0x90 [ 164.320727][ T6273] __fput+0x212/0x8c0 [ 164.324747][ T6273] task_work_run+0x125/0x1a0 [ 164.329359][ T6273] exit_to_user_mode_loop+0x10f/0x130 [ 164.334750][ T6273] exit_to_user_mode_prepare+0xee/0x180 [ 164.340418][ T6273] syscall_exit_to_user_mode+0x16/0x40 [ 164.345903][ T6273] do_syscall_64+0x58/0xa0 [ 164.350530][ T6273] ? clear_bhb_loop+0x30/0x80 [ 164.355520][ T6273] ? clear_bhb_loop+0x30/0x80 [ 164.360244][ T6273] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.366358][ T6273] RIP: 0033:0x7f1b8f1790d9 [ 164.370813][ T6273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.390529][ T6273] RSP: 002b:00007f1b8d3d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 164.398966][ T6273] RAX: 0000000000000000 RBX: 00007f1b8f400fa0 RCX: 00007f1b8f1790d9 [ 164.407509][ T6273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 164.415617][ T6273] RBP: 00007f1b8f210024 R08: 0000000000000000 R09: 0000000000000000 [ 164.423627][ T6273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.431931][ T6273] R13: 00007f1b8f401038 R14: 00007f1b8f400fa0 R15: 00007ffdf3022288 [ 164.440032][ T6273] [ 164.481989][ T4234] gspca_sunplus: reg_r err -110 [ 164.681846][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 164.802173][ T23] usb 4-1: config index 0 descriptor too short (expected 3659, got 75) [ 164.811173][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.972967][ T23] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 164.982980][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.991026][ T23] usb 4-1: Product: syz [ 164.995410][ T23] usb 4-1: Manufacturer: syz [ 165.000247][ T23] usb 4-1: SerialNumber: syz [ 165.006726][ T23] usb 4-1: config 0 descriptor?? [ 165.053976][ T23] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 165.981900][ T4234] sunplus: probe of 5-1:0.0 failed with error -110 [ 165.990085][ T4234] usb 5-1: USB disconnect, device number 7 [ 167.321823][ T23] gspca_sunplus: reg_r err -110 [ 167.326857][ T23] sunplus: probe of 4-1:0.0 failed with error -110 [ 168.481570][ T23] usb 4-1: USB disconnect, device number 8