last executing test programs: 23.250765573s ago: executing program 4 (id=360): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) pread64(r0, 0x0, 0x0, 0x10000) 22.20209189s ago: executing program 4 (id=372): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="74010000200001002cbd7000fbdbdf2533000000ff01000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x174}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = gettid() r6 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x400000) ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="78aa2a1bea674e9b8e2bfc9752", @ANYRES64=0x0], 0x20) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000240)={0x4, 0x37, 0x783, 0xfff, 0x2, "b850e43615b1b70500000000000400", 0x800, 0x1}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x10000, 0x10000, 0x2, 0xffffffffffffffff, 0x8}) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) 21.423420379s ago: executing program 3 (id=380): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sched\x00') write$eventfd(r0, 0x0, 0x0) io_uring_setup(0x43e8, 0x0) setresuid(0x0, 0xee01, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100100010000000b15aaaebdb8172295971eaa101df3bbdfb36f0424ac1a34590a1755cf796a64713623b421003e731615a9c825af3da20bd9633e68795aba8f76818d0dcdb1a62d7d2fa417dceaa76dcf295d6a5ee2a5bf2bd213003c537903509d19abf4bbdc343fea8345eb67a54cfcb2fb829cd0ab3b35753e3e522dd744e0d76187cefce41ab017178094eae9cca3f5bb24fc4faa00845e42cbb737d32e339a02411a13b6a27fd32f57c3120e0df9429f749d3905bfd00"/200], 0x8, 0x0) listen(0xffffffffffffffff, 0x0) 19.220425465s ago: executing program 3 (id=391): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a0000000000000000000000006401010000000000000000000000002c003000006d0c066ead"], 0x38}}, 0x40408c0) 19.01198224s ago: executing program 3 (id=395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000800102010060000000000000109022400010000000309040000090300030009210a000301"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = memfd_create(&(0x7f0000000840)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xe5,\x82\x03\x00\x19\x8d\xff\xff\xff\xff\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xe7!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7c\x06\x00\x00\x00\x00\x00\x00\x001\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfc^\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11X\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xfc\xbc\xeb[^\xc7\xc0v/\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0a\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xed\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x9f\x0f\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r3, 0x0, 0xb, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) syz_mount_image$fuse(0x0, 0x0, 0x10a00a, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz2/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000059e000/0x400000)=nil) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz2/memory.limit_in_bytes\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='4096', 0x4) 18.874251454s ago: executing program 4 (id=396): bind$alg(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000100)=0x80000fff, 0x3) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'ovf\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x7bfe6000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) pread64(r1, 0x0, 0x0, 0x10000) 1.655811408s ago: executing program 4 (id=400): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000300)={0x40, 0xf, 0x4, "0df18785"}, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, &(0x7f0000000200)="51e3aebf", 0x4) 1.655271888s ago: executing program 2 (id=402): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_getsetattr(r3, &(0x7f0000000140), &(0x7f0000000180)) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, r0, 0x26878000) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='xprtsec\x00', &(0x7f0000000200)='mtls\x00', 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)={0x1a4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @beacon=[@NL80211_ATTR_IE={0x185, 0x2a, [@perr={0x84, 0x1c, {0x6, 0x2, [{{}, @device_b, 0x6b07, @void, 0x25}, {{}, @device_a, 0x40, @void, 0xb}]}}, @supported_rates={0x1, 0x2, [{0x16}, {0x48}]}, @measure_req={0x26, 0xbf, {0xf, 0xf, 0xa9, "98efac3bc06212143a79e805829e0163d9c93a62cfdb1c8fe992578102f4883c3ae6df757a1205362b5ce589be30c07211ec3a68792c21310e7c8b3305d04ddaa169cce3a2db437e2b760c4dcb63cec222ba27bbada2049ce7d6b694e867ce0711237c536b1b25d360cd72179931bc344557a056f95cb1df538e01b5ac6c72bf6743f722c884dd833056ace9bf5d45b21800ed77482d53c1cd275ba69258f03b340e162c0965b9494ea9dcbc626f868373ad65968ce643713b534fde"}}, @mesh_chsw={0x76, 0x6, {0xa, 0x1, 0x8, 0x9}}, @random_vendor={0xdd, 0x8c, "823eee3d8dddf0011562b8f7ccd8accf2f158da510b06863ffde7af4c0227d337eede0e9439e5ed18032e20c8397a5b6d90327db49cb065a0a64f5025e18c86dbf2830f6c4c5288022da74b063df1658eb95a8ed930e5c32f3f0958da4426379bbd25eb0dab530acb43bc52324fe2ff39ebd132c84aad8218c74edc7d3e8a905572abeb71a24004dc39190b5"}, @mesh_chsw={0x76, 0x6, {0xe, 0x7, 0x3a, 0x3}}]}]]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40080d0}, 0x4000880) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000280)=0x8000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$kcm(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b00)="5146fe", 0x3}], 0x1}, 0x4000804) close(r6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x11, 0x4, 0x21, @dev={0xfe, 0x80, '\x00', 0x2f}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10, 0x7800, 0x281c7986, 0x6}}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000600)={r7, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1c}}, 0xc) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.654811798s ago: executing program 1 (id=403): open(&(0x7f0000000000)='.\x00', 0x200000, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) syz_usb_control_io$hid(r0, 0x0, 0x0) unshare(0x22020600) unshare(0x42010c00) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r2, 0x807060504030201, {0x2, 0x0, 0x1}, 0x30}, 0x18) 1.653807008s ago: executing program 3 (id=404): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x14, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x40c0) writev(r0, &(0x7f0000000040), 0x8) 1.652806368s ago: executing program 3 (id=405): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.651773178s ago: executing program 2 (id=407): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x1, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x39, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c5, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0x3, 0x926, 0xa, 0x1, 0x2, 0x407c, 0xea4, 0x0, 0x4, 0x4000022, 0x8000, 0x40009, 0x400, 0x401, 0xa, 0x1, 0x1, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x4, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x2000001, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fb, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x100005, 0xf, 0x4, 0x5, 0x20000007, 0x0, 0x81ef, 0x5, 0x8, 0x83, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0xffffffff, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x8, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff8, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x5, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xcad, 0x7, 0xb, 0x5, 0x3, 0xa, 0x3, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfff9, 0x4, 0x20002, 0x5, 0xe8a0556, 0x9, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x8, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0xa00007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0xfffffffffffffd01) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@known='system.sockprotoname\x00') sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.639790258s ago: executing program 1 (id=410): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x18, 0x4, 0xfffff00c}, {0x40, 0x0, 0x3, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a80)="2a73ed35", 0x4}], 0x1}}], 0x1, 0x0) 1.628304209s ago: executing program 2 (id=411): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x646, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x3, 0x6, 0x3, 0x5, 0x2800, 0x2800, 0x2, 0x100, 0xa, 0x27, {0x8, 0xffffffff}, 0xd0, 0x9}}) 1.603995719s ago: executing program 3 (id=412): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) write$char_usb(r1, &(0x7f0000000340)="d77b7ad080a719f3df118df20439d82740e8ba9b0f049cb23312b4400f590f543f7ee26a2c0811e203399cc91beaefe06d5fd50fbd76d089694a3b0531857b0c5e881c04a44b5bac820319b8802f2e9a11ab0e399aa8817377a57e27da81b663e85eb75ac45ebc152b144cb507490df203dab8111a65501590412d75ea1433cf6ea3883b8c48255b5327b067e4048132bd8678bf7716e846a6e28984c7ecac8c23e05e6bb6bbd3ededdbb47a7d60b204c8f581e16dc6e8a497cca86eed612d006f67186bf5efc63deb0818b832b46bfcd4b6bdf3b9d7e77ea9415f41394fb29f20a4f311b058d70d43e00725161a441411", 0xf1) 1.59497203s ago: executing program 4 (id=413): bind$alg(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000100)=0x80000fff, 0x3) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'ovf\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x7bfe6000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pread64(r1, 0x0, 0x0, 0x10000) 1.472316043s ago: executing program 2 (id=414): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000001780)=[@wrmsr={0x65, 0x20, {0x31a, 0x40}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x452, 0x9, 0x1}}, @in_dx={0x69, 0x20, {0xfb5e, 0x5}}], 0x70}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000000)={0x968, 0x5, 0x1}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f00000001c0)=@attr_other={0x0, 0x6, 0x7fff, &(0x7f00000000c0)}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c4e1fe7fab98000000f4f3f26465660f2065666426f30f1ef8838b0700000000b8010000000f01c13ed89b003800000f213666b803000f00d80f1c12", 0x3c}], 0x1, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.405834765s ago: executing program 1 (id=415): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r7 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000001c0)={0x9, 0x10, [0x2, 0x1, 0x0, 0xa6e], &(0x7f0000000180)=[0x0, 0x0]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8100) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r9, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0) 1.240046029s ago: executing program 0 (id=416): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={0x0, 0xb, 0x1, [0x2]}, 0xa) 995.967485ms ago: executing program 0 (id=417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x54815}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 995.032215ms ago: executing program 2 (id=418): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x14, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x40c0) writev(r0, &(0x7f0000000040), 0x8) 841.632638ms ago: executing program 2 (id=419): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="74010000200001002cbd7000fbdbdf2533000000ff0100"/33, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x174}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = gettid() syz_open_dev$vcsa(&(0x7f0000000140), 0x7, 0x400000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="78aa2a1bea674e9b8e2bfc9752", @ANYRES64=0x0], 0x20) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000240)={0x4, 0x37, 0x783, 0xfff, 0x2, "b850e43615b1b70500000000000400", 0x800, 0x1}) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) 720.066652ms ago: executing program 0 (id=420): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x1, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x39, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c5, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0x3, 0x926, 0xa, 0x1, 0x2, 0x407c, 0xea4, 0x0, 0x4, 0x4000022, 0x8000, 0x40009, 0x400, 0x401, 0xa, 0x1, 0x1, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x4, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x2000001, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fb, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x100005, 0xf, 0x4, 0x5, 0x20000007, 0x0, 0x81ef, 0x5, 0x8, 0x83, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0xffffffff, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x8, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff8, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x5, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xcad, 0x7, 0xb, 0x5, 0x3, 0xa, 0x3, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfff9, 0x4, 0x20002, 0x5, 0xe8a0556, 0x9, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x8, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0xa00007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0xfffffffffffffd01) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) fremovexattr(0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 640.273324ms ago: executing program 4 (id=421): ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) syz_open_dev$video4linux(&(0x7f0000000080), 0x8, 0x40000) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_usb_connect$uac2(0x5, 0xd1, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100300000020670a11504000010203010902bf000301094005080b00020100201309040000000101200009240103000830000609240804050200010007240b0602bee90b240902ff070e8cb3f5e90c24030206070801040d00f809"], &(0x7f00000004c0)={0x5c, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x70) r2 = socket(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) socket$igmp(0x2, 0x3, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) 514.933307ms ago: executing program 0 (id=422): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) close_range(r0, 0xffffffffffffffff, 0x0) 419.382349ms ago: executing program 1 (id=423): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x3, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x9, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x14000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x7f, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x64, 0x0, 0x0, 0x1004, 0xfffffffd, 0x0, 0x921, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x2, 0x4, 0x5, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x2, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write(r0, &(0x7f0000000180)="a750", 0x2) 256.664953ms ago: executing program 0 (id=424): r0 = socket$kcm(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x18, 0x68, 0x401}, 0x18}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x48, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x2}, {0x2}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8}]}]}, 0x48}}, 0x0) close(r0) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) 128.369987ms ago: executing program 1 (id=425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) 59.364688ms ago: executing program 0 (id=426): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) io_uring_setup(0x4149, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000140)={@empty, @empty, 0x0, "1c6804d4a58b85e13e66ab6fafd10df8ab973be71cc99e43030305633956c3c4", 0xfffffc00, 0x9, 0xfffff536, 0xde5}, 0x3c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 0s ago: executing program 1 (id=427): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.129' (ED25519) to the list of known hosts. [ 61.691930][ T4172] cgroup: Unknown subsys name 'net' [ 61.818257][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.267617][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.120395][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 65.165187][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 65.210926][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.240183][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 65.301293][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 65.327639][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.334957][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.343606][ T4187] device bridge_slave_0 entered promiscuous mode [ 65.356667][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.363842][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.372337][ T4187] device bridge_slave_1 entered promiscuous mode [ 65.436127][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.443472][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.452013][ T4189] device bridge_slave_0 entered promiscuous mode [ 65.479110][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.489023][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.496351][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.504609][ T4189] device bridge_slave_1 entered promiscuous mode [ 65.537521][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.546922][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.554303][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.562529][ T4186] device bridge_slave_0 entered promiscuous mode [ 65.576316][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.583599][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.591928][ T4194] device bridge_slave_0 entered promiscuous mode [ 65.617497][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.624866][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.633496][ T4186] device bridge_slave_1 entered promiscuous mode [ 65.642465][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.652454][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.659545][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.667608][ T4194] device bridge_slave_1 entered promiscuous mode [ 65.708826][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.720639][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.732486][ T4187] team0: Port device team_slave_0 added [ 65.746307][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.753662][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.761951][ T4185] device bridge_slave_0 entered promiscuous mode [ 65.775923][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.783340][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.791553][ T4185] device bridge_slave_1 entered promiscuous mode [ 65.799983][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.823525][ T4187] team0: Port device team_slave_1 added [ 65.831442][ T4189] team0: Port device team_slave_0 added [ 65.839159][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.876944][ T4189] team0: Port device team_slave_1 added [ 65.885464][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.896462][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.908005][ T4194] team0: Port device team_slave_0 added [ 65.927875][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.935573][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.961878][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.982321][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.999686][ T4194] team0: Port device team_slave_1 added [ 66.012439][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.019438][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.045715][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.076650][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.084531][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.110771][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.128719][ T4186] team0: Port device team_slave_0 added [ 66.138354][ T4185] team0: Port device team_slave_0 added [ 66.160028][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.167358][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.193852][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.211956][ T4186] team0: Port device team_slave_1 added [ 66.218252][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.225446][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.255009][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.269806][ T4185] team0: Port device team_slave_1 added [ 66.294637][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.301819][ T4187] device hsr_slave_1 entered promiscuous mode [ 66.315174][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.322379][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.348869][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.392058][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.399056][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.425388][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.445605][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.452902][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.478989][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.491343][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.498306][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.524502][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.536460][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.543854][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.570416][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.595868][ T4189] device hsr_slave_0 entered promiscuous mode [ 66.602840][ T4189] device hsr_slave_1 entered promiscuous mode [ 66.609849][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.617733][ T4189] Cannot create hsr debugfs directory [ 66.663369][ T4194] device hsr_slave_0 entered promiscuous mode [ 66.670527][ T4194] device hsr_slave_1 entered promiscuous mode [ 66.677487][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.685530][ T4194] Cannot create hsr debugfs directory [ 66.737268][ T4185] device hsr_slave_0 entered promiscuous mode [ 66.744360][ T4185] device hsr_slave_1 entered promiscuous mode [ 66.750920][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.758707][ T4185] Cannot create hsr debugfs directory [ 66.773643][ T4186] device hsr_slave_0 entered promiscuous mode [ 66.780657][ T4186] device hsr_slave_1 entered promiscuous mode [ 66.788106][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.795861][ T4186] Cannot create hsr debugfs directory [ 66.812164][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 66.824712][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 66.881308][ T4174] Bluetooth: hci3: command 0x0409 tx timeout [ 66.892153][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 66.898280][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 67.120425][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.131513][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.153077][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.167126][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.233190][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.247892][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.269576][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.302957][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.314243][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.339316][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.368069][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.375309][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.387163][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.412829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.424041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.450191][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.478386][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.487602][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.499002][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.513163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.524035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.533271][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.540535][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.549270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.571919][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.600308][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.610536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.619879][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.627029][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.636556][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.677394][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.692863][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.703679][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.714720][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.724471][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.734376][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.744462][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.753578][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.763157][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.772251][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.780484][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.789075][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.799985][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.815953][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.825663][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.836913][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.867832][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.886859][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.899198][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.931697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.940567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.957106][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.964286][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.976393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.985555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.994140][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.001246][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.010033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.032675][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.057460][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.066872][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.084389][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.100035][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.109097][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.123751][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.136370][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.145170][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.156953][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.180125][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.192143][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.206562][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.216711][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.225371][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.234656][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.252398][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.284288][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.296699][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.318002][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.330424][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.339250][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.352120][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.360544][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.367651][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.378434][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.428594][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.438515][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.454159][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.461312][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.473384][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.485606][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.493671][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.508054][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.517569][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.534111][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.553809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.585181][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.594182][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.603560][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.610668][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.619983][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.628799][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.638082][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.645246][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.653653][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.661244][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.668682][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.677523][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.687151][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.704884][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.715063][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.732367][ T4187] device veth0_vlan entered promiscuous mode [ 68.739225][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.748594][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.759228][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.768179][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.777267][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.786384][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.795877][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.806651][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.815632][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.825286][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.834299][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.845427][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.854349][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.862526][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.877915][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.888830][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.899669][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 68.906310][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 68.934946][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.951188][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.959868][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.975477][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 68.982179][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 68.987024][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.991764][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 69.011878][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.020457][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.035121][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.044683][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.052713][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.060503][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.073805][ T4187] device veth1_vlan entered promiscuous mode [ 69.099271][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.117206][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.141521][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.149680][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.162942][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.172423][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.179522][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.189286][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.198772][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.207868][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.214998][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.224017][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.233485][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.242523][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.250888][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.260023][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.269368][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.280678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.320149][ T4194] device veth0_vlan entered promiscuous mode [ 69.345249][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.355874][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.367386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.377757][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.386799][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.394388][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.420350][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.440917][ T4187] device veth0_macvtap entered promiscuous mode [ 69.461167][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.469149][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.478433][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.487182][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.496194][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.505331][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.513896][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.522658][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.531148][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.539448][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.548954][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.563644][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.580117][ T4194] device veth1_vlan entered promiscuous mode [ 69.591221][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.599926][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.642073][ T4187] device veth1_macvtap entered promiscuous mode [ 69.679391][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.689106][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.706183][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.718689][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.760197][ T4194] device veth0_macvtap entered promiscuous mode [ 69.770574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.779157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.787441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.796587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.805232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.813956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.823023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.830870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.839268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.853314][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.873968][ T4186] device veth0_vlan entered promiscuous mode [ 69.887706][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.896998][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.911687][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.929385][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.939519][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.948435][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.957513][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.973344][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.984672][ T4194] device veth1_macvtap entered promiscuous mode [ 69.994088][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.004363][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.014825][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.038681][ T4186] device veth1_vlan entered promiscuous mode [ 70.052055][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.060084][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.068570][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.095630][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.109401][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.120636][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.133697][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.142252][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.151397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.160238][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.171308][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.180117][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.233838][ T4186] device veth0_macvtap entered promiscuous mode [ 70.244887][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.258857][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.270523][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.281978][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.296533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.305437][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.315754][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.328516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.339480][ T4186] device veth1_macvtap entered promiscuous mode [ 70.366664][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.375997][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.385993][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.395122][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.421206][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.429735][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.440848][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.450063][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.459787][ T4185] device veth0_vlan entered promiscuous mode [ 70.510993][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.523799][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.536248][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.547775][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.559308][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.594805][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.608927][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.624268][ T4185] device veth1_vlan entered promiscuous mode [ 70.636427][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.649546][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.657719][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.665755][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.679779][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.691585][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.705542][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.741222][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.749390][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.762895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.770968][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.780850][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.805492][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.818989][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.828122][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.837077][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.888902][ T4185] device veth0_macvtap entered promiscuous mode [ 70.898630][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.909341][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.915703][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.928759][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.951035][ T4185] device veth1_macvtap entered promiscuous mode [ 70.959099][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.969557][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.972231][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 70.979718][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.992449][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.997336][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 71.004983][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.013805][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.042431][ T4258] Bluetooth: hci3: command 0x040f tx timeout [ 71.054175][ T4258] Bluetooth: hci0: command 0x040f tx timeout [ 71.060293][ T4258] Bluetooth: hci4: command 0x040f tx timeout [ 71.103514][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.120761][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.133621][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.150024][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.160014][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.176178][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.189345][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.199994][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.215476][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.221975][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.222322][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.240756][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.251817][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.262018][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.273058][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.286201][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.303562][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.313861][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.326720][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.339186][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.348064][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.359286][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.368494][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.398110][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.408111][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.438681][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.448838][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.455740][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.468809][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.479615][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.485876][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.539254][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.608298][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.620434][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.635462][ T4189] device veth0_vlan entered promiscuous mode [ 71.645821][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.655765][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.687286][ T4189] device veth1_vlan entered promiscuous mode [ 71.708097][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.719062][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.746329][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.770954][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.869754][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.913751][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.961948][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.013749][ T4189] device veth0_macvtap entered promiscuous mode [ 72.022865][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.030717][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.062320][ T4283] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.099467][ T4189] device veth1_macvtap entered promiscuous mode [ 72.127125][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.141949][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.173162][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.223400][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.250656][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.270577][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.285514][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.296144][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.310942][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.321696][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.332456][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.342878][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.359672][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.376982][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.410428][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.421223][ T3517] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.432605][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.448154][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.464270][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.475694][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.490021][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.504422][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.514481][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.525168][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.535066][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.545832][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.559723][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.588428][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.606566][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.617963][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.632926][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.668805][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.683402][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.803716][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.812027][ T3517] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.833182][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.840344][ T3517] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.863244][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.869503][ T3517] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 72.885948][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.893883][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.905775][ T3517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.914284][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.042655][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 73.049499][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 73.090097][ T4305] tipc: Started in network mode [ 73.096625][ T4305] tipc: Node identity 1add68afe666, cluster identity 4711 [ 73.118079][ T4305] tipc: Enabled bearer , priority 0 [ 73.125776][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 73.142617][ T4229] Bluetooth: hci0: command 0x0419 tx timeout [ 73.153172][ T4229] Bluetooth: hci3: command 0x0419 tx timeout [ 73.160853][ T4305] device syzkaller0 entered promiscuous mode [ 73.208402][ T4305] tipc: Resetting bearer [ 73.222208][ T4307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 73.241141][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.249125][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.302400][ T4303] tipc: Resetting bearer [ 73.338382][ T4303] tipc: Disabling bearer [ 73.704661][ T4317] netlink: 296 bytes leftover after parsing attributes in process `syz.0.14'. [ 73.725156][ T4319] syz.4.15 uses obsolete (PF_INET,SOCK_PACKET) [ 73.739032][ T4310] kvm [4309]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 73.754937][ T4310] kvm [4309]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 73.765630][ T4317] ip_tables: iptables: counters copy to user failed while replacing table [ 73.777734][ T4317] ip_tables: iptables: counters copy to user failed while replacing table [ 73.817225][ T1108] usb 3-1: USB disconnect, device number 2 [ 73.929993][ T4328] netlink: 'syz.0.14': attribute type 4 has an invalid length. [ 73.990614][ T4328] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14'. [ 74.147179][ T4328] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 74.625105][ T4352] tipc: Enabled bearer , priority 0 [ 74.649073][ T4352] device syzkaller0 entered promiscuous mode [ 74.699431][ T4352] tipc: Resetting bearer [ 74.737797][ T4351] tipc: Resetting bearer [ 74.767381][ T4351] tipc: Disabling bearer [ 75.148655][ T4373] device syzkaller0 entered promiscuous mode [ 75.168201][ T26] audit: type=1800 audit(1788006476.223:2): pid=4372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.33" name="size" dev="configfs" ino=33980 res=0 errno=0 [ 75.208026][ T4373] Zero length message leads to an empty skb [ 75.266872][ T26] audit: type=1800 audit(1788006476.273:3): pid=4372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.33" name="power" dev="configfs" ino=33982 res=0 errno=0 [ 75.561909][ T4378] block device autoloading is deprecated and will be removed. [ 75.727450][ T4392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 75.740615][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.748020][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.834998][ T4394] tipc: Started in network mode [ 75.839939][ T4394] tipc: Node identity 6614a6e8b187, cluster identity 4711 [ 75.866482][ T4394] tipc: Enabled bearer , priority 0 [ 75.886220][ T4395] device syzkaller0 entered promiscuous mode [ 75.944060][ T4394] tipc: Resetting bearer [ 75.972703][ T4393] tipc: Resetting bearer [ 75.981718][ T4388] kvm [4384]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 75.995080][ T4388] kvm [4384]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 76.020860][ T4393] tipc: Disabling bearer [ 76.098382][ T4387] syz.2.36 (4387) used greatest stack depth: 20656 bytes left [ 76.299958][ T4410] bridge0: port 3(erspan0) entered blocking state [ 76.377949][ T4410] bridge0: port 3(erspan0) entered disabled state [ 76.473919][ T4410] device erspan0 entered promiscuous mode [ 76.500072][ T4410] bridge0: port 3(erspan0) entered blocking state [ 76.506905][ T4410] bridge0: port 3(erspan0) entered forwarding state [ 76.522708][ T4418] device syzkaller0 entered promiscuous mode [ 76.737530][ T4424] netlink: 296 bytes leftover after parsing attributes in process `syz.3.50'. [ 76.790709][ T4424] ip_tables: iptables: counters copy to user failed while replacing table [ 76.816237][ T4424] ip_tables: iptables: counters copy to user failed while replacing table [ 76.836766][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51'. [ 76.891867][ T4429] capability: warning: `syz.1.49' uses 32-bit capabilities (legacy support in use) [ 77.039672][ T4434] kernel profiling enabled (shift: 10) [ 77.176705][ T4437] tipc: Started in network mode [ 77.187795][ T4437] tipc: Node identity 92c9632da152, cluster identity 4711 [ 77.198343][ T4437] tipc: Enabled bearer , priority 0 [ 77.219426][ T4437] device syzkaller0 entered promiscuous mode [ 77.274128][ T4437] tipc: Resetting bearer [ 77.284563][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.329416][ T4436] tipc: Resetting bearer [ 77.376024][ T4440] loop9: detected capacity change from 0 to 7 [ 77.391661][ T4436] tipc: Disabling bearer [ 77.406875][ T4440] Dev loop9: unable to read RDB block 7 [ 77.416940][ T4440] loop9: unable to read partition table [ 77.427001][ T4440] loop9: partition table beyond EOD, truncated [ 77.435579][ T4440] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 77.562493][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 77.610285][ T4450] Core dump to core aborted: cannot preserve file permissions [ 77.713967][ T21] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 77.728474][ T21] usb 4-1: config 0 has no interface number 0 [ 77.845902][ T4456] device syzkaller0 entered promiscuous mode [ 77.934778][ T21] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 77.964088][ T4460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'. [ 77.973414][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.984568][ T21] usb 4-1: Product: syz [ 77.990240][ T21] usb 4-1: Manufacturer: syz [ 77.995414][ T21] usb 4-1: SerialNumber: syz [ 78.002255][ T21] usb 4-1: config 0 descriptor?? [ 78.028095][ T4460] bridge0: port 3(erspan0) entered disabled state [ 78.034767][ T4460] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.042133][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.063267][ T21] hub 4-1:0.132: bad descriptor, ignoring hub [ 78.070189][ T21] hub: probe of 4-1:0.132 failed with error -5 [ 78.087256][ T21] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input5 [ 78.264273][ T4424] netlink: 'syz.3.50': attribute type 4 has an invalid length. [ 78.314409][ T4424] netlink: 152 bytes leftover after parsing attributes in process `syz.3.50'. [ 78.343568][ T26] audit: type=1800 audit(1788006479.403:4): pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.64" name="size" dev="configfs" ino=33414 res=0 errno=0 [ 78.433303][ T4424] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 78.539358][ T26] audit: type=1800 audit(1788006479.433:5): pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.64" name="power" dev="configfs" ino=33415 res=0 errno=0 [ 78.776816][ T4480] bridge0: port 3(erspan0) entered blocking state [ 78.788896][ T4480] bridge0: port 3(erspan0) entered disabled state [ 78.806325][ T4480] device erspan0 entered promiscuous mode [ 78.939382][ T4487] device erspan0 left promiscuous mode [ 78.960778][ T4487] bridge0: port 3(erspan0) entered disabled state [ 79.350119][ T4489] tipc: Enabled bearer , priority 0 [ 79.414493][ T4490] device syzkaller0 entered promiscuous mode [ 79.515419][ T4489] tipc: Resetting bearer [ 79.598565][ T4488] tipc: Resetting bearer [ 79.655017][ T4488] tipc: Disabling bearer [ 79.674884][ T4502] device syzkaller0 entered promiscuous mode [ 79.941106][ T4174] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.181081][ T4174] usb 3-1: Using ep0 maxpacket: 32 [ 80.301268][ T4174] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.320830][ T4174] usb 3-1: config 0 has no interfaces? [ 80.479131][ T4523] tipc: Enabling of bearer rejected, failed to enable media [ 80.491678][ T4174] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 80.508803][ T4174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.527122][ T4174] usb 3-1: Product: syz [ 80.540655][ T4174] usb 3-1: Manufacturer: syz [ 80.558045][ T4174] usb 3-1: SerialNumber: syz [ 80.578762][ T4174] usb 3-1: config 0 descriptor?? [ 80.890676][ T4527] netlink: 'syz.1.85': attribute type 7 has an invalid length. [ 80.991066][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.241130][ T4231] usb 1-1: Using ep0 maxpacket: 16 [ 81.328758][ T4538] device syzkaller0 entered promiscuous mode [ 81.361334][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.374933][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.385462][ T4231] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 81.410450][ T4231] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 81.426449][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.444774][ T4231] usb 1-1: config 0 descriptor?? [ 81.703513][ T26] audit: type=1800 audit(1788006482.763:6): pid=4553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.96" name="size" dev="configfs" ino=33665 res=0 errno=0 [ 81.744497][ T26] audit: type=1800 audit(1788006482.763:7): pid=4553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.96" name="power" dev="configfs" ino=33666 res=0 errno=0 [ 81.928418][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 81.936654][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 81.944415][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 81.958113][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 81.965797][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 81.978099][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 81.986043][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 81.996826][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 82.017628][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 82.029892][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 82.070661][ T4231] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input6 [ 82.138491][ T4231] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 82.200113][ T4231] usb 1-1: USB disconnect, device number 2 [ 82.358187][ T4564] fido_id[4564]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 82.596886][ T23] usb 3-1: USB disconnect, device number 3 [ 82.666395][ T4575] device wireguard0 entered promiscuous mode [ 82.869157][ T4230] usb 4-1: USB disconnect, device number 2 [ 83.174802][ T26] audit: type=1800 audit(1788006484.233:8): pid=4595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.109" name="size" dev="configfs" ino=34563 res=0 errno=0 [ 83.177205][ C0] hrtimer: interrupt took 93312 ns [ 83.221054][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 83.270523][ T26] audit: type=1800 audit(1788006484.263:9): pid=4595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.109" name="power" dev="configfs" ino=34823 res=0 errno=0 [ 83.961273][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.226735][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 84.403126][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.440238][ T21] usb 5-1: config 0 has no interfaces? [ 84.662196][ T21] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 84.693334][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.747796][ T21] usb 5-1: Product: syz [ 84.773412][ T21] usb 5-1: Manufacturer: syz [ 84.778095][ T21] usb 5-1: SerialNumber: syz [ 84.819004][ T21] usb 5-1: config 0 descriptor?? [ 84.859836][ T26] audit: type=1800 audit(1788006485.913:10): pid=4634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.120" name="size" dev="configfs" ino=34658 res=0 errno=0 [ 85.011391][ T26] audit: type=1800 audit(1788006485.913:11): pid=4634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.120" name="power" dev="configfs" ino=34659 res=0 errno=0 [ 85.621105][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.871174][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 85.991381][ T1108] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.005611][ T1108] usb 2-1: config 0 has no interface number 0 [ 86.012672][ T1108] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.034207][ T1108] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 86.076768][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.108298][ T1108] usb 2-1: config 0 descriptor?? [ 86.180561][ T1108] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 86.383043][ T4228] usb 2-1: USB disconnect, device number 2 [ 86.454531][ T26] audit: type=1800 audit(1788006487.513:12): pid=4667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.132" name="size" dev="configfs" ino=34796 res=0 errno=0 [ 86.533733][ T26] audit: type=1800 audit(1788006487.533:13): pid=4667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.132" name="power" dev="configfs" ino=34797 res=0 errno=0 [ 86.568442][ T13] cfg80211: failed to load regulatory.db [ 86.751766][ T1108] usb 5-1: USB disconnect, device number 2 [ 87.498297][ T4689] process 'syz.1.140' launched './file1' with NULL argv: empty string added [ 88.062188][ T4702] netlink: 324 bytes leftover after parsing attributes in process `syz.0.145'. [ 88.556745][ T21] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 88.615408][ T4228] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.826185][ T26] audit: type=1800 audit(1788006489.883:14): pid=4718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.149" name="size" dev="configfs" ino=36078 res=0 errno=0 [ 88.921293][ T4228] usb 4-1: Using ep0 maxpacket: 32 [ 88.951592][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 64 [ 88.995662][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.001718][ T26] audit: type=1800 audit(1788006489.923:15): pid=4718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.149" name="power" dev="configfs" ino=36079 res=0 errno=0 [ 89.046767][ T21] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 89.063933][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.079059][ T4228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.097655][ T4228] usb 4-1: config 0 has no interfaces? [ 89.130685][ T21] usb 1-1: config 0 descriptor?? [ 89.321246][ T4228] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 89.359605][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.388243][ T4228] usb 4-1: Product: syz [ 89.410883][ T4228] usb 4-1: Manufacturer: syz [ 89.424254][ T4228] usb 4-1: SerialNumber: syz [ 89.463185][ T4228] usb 4-1: config 0 descriptor?? [ 89.621196][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.650061][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.707285][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.756953][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.768535][ T1232] rpcbind: server 127.0.0.1 not responding, timed out [ 89.785859][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.794612][ T4742] netlink: 296 bytes leftover after parsing attributes in process `syz.4.158'. [ 89.798894][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.819777][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.822556][ T4742] ip_tables: iptables: counters copy to user failed while replacing table [ 89.828182][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.843736][ T4742] ip_tables: iptables: counters copy to user failed while replacing table [ 89.855420][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.870148][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.881299][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.888877][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.901099][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.908533][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.916707][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.924513][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.932267][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.939694][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.953683][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.962111][ T4743] netlink: 'syz.4.158': attribute type 4 has an invalid length. [ 89.972716][ T4743] netlink: 152 bytes leftover after parsing attributes in process `syz.4.158'. [ 89.973656][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 89.995693][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 90.005188][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 90.018425][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 90.027543][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 90.038871][ T4743] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 90.059316][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 90.069334][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 90.083033][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 90.100732][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 90.110951][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 90.124698][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 90.134580][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 90.145259][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 90.157783][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 90.176294][ T21] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 90.185965][ T21] hid-generic 0003:0457:07DA.0002: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 90.226079][ T21] usb 1-1: USB disconnect, device number 3 [ 90.359402][ T4746] fido_id[4746]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 90.541236][ T4258] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.724010][ T26] audit: type=1800 audit(1788006491.783:16): pid=4754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.162" name="size" dev="configfs" ino=34988 res=0 errno=0 [ 90.791291][ T4258] usb 2-1: Using ep0 maxpacket: 32 [ 90.803035][ T26] audit: type=1800 audit(1788006491.803:17): pid=4754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.162" name="power" dev="configfs" ino=34989 res=0 errno=0 [ 90.865729][ T4761] tipc: Enabled bearer , priority 0 [ 90.873325][ T4761] device syzkaller0 entered promiscuous mode [ 90.897512][ T4761] tipc: Resetting bearer [ 90.921213][ T4258] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.933008][ T4258] usb 2-1: config 0 has no interfaces? [ 90.943491][ T4760] tipc: Resetting bearer [ 90.969755][ T4760] tipc: Disabling bearer [ 91.092013][ T4258] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 91.111949][ T4258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.120624][ T4258] usb 2-1: Product: syz [ 91.133924][ T4258] usb 2-1: Manufacturer: syz [ 91.139819][ T4258] usb 2-1: SerialNumber: syz [ 91.198672][ T4258] usb 2-1: config 0 descriptor?? [ 91.318193][ T4258] usb 4-1: USB disconnect, device number 3 [ 91.635895][ T4780] device lo entered promiscuous mode [ 91.681786][ T4252] rpcbind: server 127.0.0.1 not responding, timed out [ 91.711933][ T4780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.969817][ T4787] netlink: 296 bytes leftover after parsing attributes in process `syz.3.173'. [ 92.016521][ T4790] ip_tables: iptables: counters copy to user failed while replacing table [ 92.066593][ T4787] ip_tables: iptables: counters copy to user failed while replacing table [ 92.160236][ T4790] netlink: 'syz.3.173': attribute type 4 has an invalid length. [ 92.181314][ T4790] netlink: 152 bytes leftover after parsing attributes in process `syz.3.173'. [ 92.192731][ T4790] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 92.443885][ T3517] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.470663][ T4799] loop9: detected capacity change from 0 to 7 [ 92.493899][ T4799] Dev loop9: unable to read RDB block 7 [ 92.500289][ T4799] loop9: unable to read partition table [ 92.513614][ T4799] loop9: partition table beyond EOD, truncated [ 92.520947][ T4799] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 92.561566][ T4230] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.665268][ T4801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.179'. [ 92.851197][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 92.972675][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.998669][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.039434][ T4230] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 93.091727][ T4230] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 93.151178][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.207044][ T4230] usb 3-1: config 0 descriptor?? [ 93.226220][ T4231] usb 2-1: USB disconnect, device number 3 [ 93.520734][ T4821] tipc: Enabled bearer , priority 0 [ 93.542388][ T4821] device syzkaller0 entered promiscuous mode [ 93.570008][ T4821] tipc: Resetting bearer [ 93.596343][ T4820] tipc: Resetting bearer [ 93.624827][ T4820] tipc: Disabling bearer [ 93.706378][ T4230] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 93.715065][ T4174] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.734401][ T4230] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 93.753864][ T4230] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 93.782046][ T4230] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 93.801310][ T4230] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 93.810068][ T4230] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 93.836665][ T4230] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 93.846695][ T4230] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 93.880547][ T4230] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 93.889606][ T4230] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 93.919681][ T4829] device syzkaller0 entered promiscuous mode [ 93.946544][ T4230] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input7 [ 93.969117][ T4230] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 94.001662][ T4230] usb 3-1: USB disconnect, device number 4 [ 94.011746][ T4174] usb 1-1: Using ep0 maxpacket: 16 [ 94.176147][ T4833] fido_id[4833]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 94.201139][ T4258] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.211639][ T4174] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.351269][ T4174] usb 1-1: config 4 has an invalid interface number: 127 but max is 0 [ 94.360821][ T4174] usb 1-1: config 4 has no interface number 0 [ 94.386238][ T4840] netlink: 296 bytes leftover after parsing attributes in process `syz.1.196'. [ 94.399777][ T4840] ip_tables: iptables: counters copy to user failed while replacing table [ 94.421361][ T4174] usb 1-1: config 4 interface 127 has no altsetting 0 [ 94.430173][ T4840] ip_tables: iptables: counters copy to user failed while replacing table [ 94.465501][ T4258] usb 4-1: Using ep0 maxpacket: 32 [ 94.572767][ T4844] netlink: 'syz.1.196': attribute type 4 has an invalid length. [ 94.589470][ T4844] netlink: 152 bytes leftover after parsing attributes in process `syz.1.196'. [ 94.599247][ T4258] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.613121][ T4174] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 94.628760][ T4258] usb 4-1: config 0 has no interfaces? [ 94.635342][ T4174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.671066][ T4174] usb 1-1: Product: syz [ 94.701271][ T4174] usb 1-1: Manufacturer: syz [ 94.706818][ T4174] usb 1-1: SerialNumber: syz [ 94.719204][ T4844] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 94.821362][ T4258] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 94.830728][ T1108] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.841676][ T4258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.860013][ T4258] usb 4-1: Product: syz [ 94.871183][ T4258] usb 4-1: Manufacturer: syz [ 94.886218][ T4258] usb 4-1: SerialNumber: syz [ 94.914020][ T4258] usb 4-1: config 0 descriptor?? [ 95.266198][ T4861] tipc: Started in network mode [ 95.273223][ T4861] tipc: Node identity 1ea348d6bcb3, cluster identity 4711 [ 95.289877][ T4861] tipc: Enabled bearer , priority 0 [ 95.313834][ T4861] device syzkaller0 entered promiscuous mode [ 95.383333][ T4861] tipc: Resetting bearer [ 95.417147][ T4860] tipc: Resetting bearer [ 95.482169][ T4860] tipc: Disabling bearer [ 95.510031][ T4868] device syzkaller0 entered promiscuous mode [ 95.739930][ T4873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 95.783276][ T4873] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.792850][ T4873] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.876049][ T4174] usbhid 1-1:4.127: couldn't find an input interrupt endpoint [ 95.911642][ T4174] usb 1-1: USB disconnect, device number 4 [ 96.321188][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.561251][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 96.651269][ T4229] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.658995][ T4258] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 96.722261][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 96.811357][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.829043][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.914369][ T4229] usb 5-1: Using ep0 maxpacket: 16 [ 96.941349][ T1108] usb 4-1: USB disconnect, device number 5 [ 96.991388][ T23] usb 2-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 97.012390][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.020463][ T23] usb 2-1: Product: syz [ 97.042397][ T4229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.053537][ T4258] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.070247][ T4258] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.080165][ T4229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.096542][ T23] usb 2-1: Manufacturer: syz [ 97.101910][ T23] usb 2-1: SerialNumber: syz [ 97.107342][ T4229] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.150778][ T4229] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 97.175968][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.227118][ T4229] usb 5-1: config 0 descriptor?? [ 97.265591][ T4258] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 97.286221][ T4258] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 97.309275][ T4258] usb 1-1: Product: syz [ 97.316773][ T4258] usb 1-1: Manufacturer: syz [ 97.325332][ T4258] usb 1-1: SerialNumber: syz [ 97.346399][ T4893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'. [ 97.367545][ T4258] usb 1-1: config 0 descriptor?? [ 97.641525][ T23] usb 2-1: 0:1 : does not exist [ 97.648826][ T23] usb 2-1: unit 1 not found! [ 97.734039][ T4229] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 97.771788][ T4229] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 97.800696][ T23] usb 2-1: USB disconnect, device number 5 [ 97.820166][ T4229] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 97.832884][ T4901] tipc: Enabled bearer , priority 0 [ 97.852846][ T4229] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 97.871874][ T4901] device syzkaller0 entered promiscuous mode [ 97.902098][ T4229] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 97.926018][ T4229] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 97.956865][ T4229] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 97.978384][ T4229] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 97.988137][ T4901] tipc: Resetting bearer [ 98.006445][ T4229] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 98.029033][ T4229] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 98.056791][ T4229] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input8 [ 98.101499][ T4229] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 98.178067][ T4229] usb 5-1: USB disconnect, device number 3 [ 98.208170][ T4900] tipc: Resetting bearer [ 98.262082][ T4900] tipc: Disabling bearer [ 98.345583][ T4903] fido_id[4903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 98.351506][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 98.553983][ T4174] usb 1-1: USB disconnect, device number 5 [ 98.631178][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 98.755255][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.775182][ T1108] usb 3-1: config 0 has no interfaces? [ 98.941554][ T1108] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 98.976208][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.015798][ T1108] usb 3-1: Product: syz [ 99.020034][ T1108] usb 3-1: Manufacturer: syz [ 99.055711][ T1108] usb 3-1: SerialNumber: syz [ 99.092913][ T1108] usb 3-1: config 0 descriptor?? [ 99.333890][ T4928] netlink: 52 bytes leftover after parsing attributes in process `syz.1.224'. [ 100.157975][ T4941] device syzkaller0 entered promiscuous mode [ 100.263490][ T4229] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.511110][ T4229] usb 5-1: Using ep0 maxpacket: 32 [ 100.683614][ T4229] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.770107][ T4304] usb 3-1: USB disconnect, device number 5 [ 100.776401][ T4229] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.828707][ T4229] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.024301][ T4229] usb 5-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 101.055799][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.066292][ T4229] usb 5-1: Product: syz [ 101.070630][ T4229] usb 5-1: Manufacturer: syz [ 101.080932][ T4229] usb 5-1: SerialNumber: syz [ 101.582604][ T4229] usb 5-1: 0:1 : does not exist [ 101.587600][ T4229] usb 5-1: unit 1 not found! [ 101.681757][ T4229] usb 5-1: USB disconnect, device number 4 [ 101.727901][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.368704][ T4958] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.464215][ T13] syzkaller0: tun_net_xmit 76 [ 102.470571][ T13] syzkaller0: tun_net_xmit 48 [ 102.478377][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 102.501612][ T3517] syzkaller0: tun_net_xmit 76 [ 102.517850][ T4958] syzkaller0: tun_net_xmit 28 [ 102.581498][ T4229] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.654271][ T3517] syzkaller0: tun_net_xmit 76 [ 102.841565][ T4229] usb 2-1: Using ep0 maxpacket: 16 [ 102.874874][ T4964] tipc: Enabled bearer , priority 0 [ 102.932514][ T4964] device syzkaller0 entered promiscuous mode [ 102.961348][ T4229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.994877][ T4229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.051370][ T4229] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 103.068117][ T4967] tipc: Resetting bearer [ 103.087488][ T4982] netlink: 296 bytes leftover after parsing attributes in process `syz.2.242'. [ 103.106866][ T4229] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 103.124025][ T4982] ip_tables: iptables: counters copy to user failed while replacing table [ 103.157007][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.170919][ T4982] ip_tables: iptables: counters copy to user failed while replacing table [ 103.200962][ T4229] usb 2-1: config 0 descriptor?? [ 103.224959][ T4961] tipc: Resetting bearer [ 103.250441][ T4961] tipc: Disabling bearer [ 103.484970][ T3517] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 103.671197][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 103.694238][ T4229] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 103.709454][ T4229] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 103.717926][ T4229] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 103.732308][ T4229] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 103.739974][ T4229] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 103.751351][ T3517] usb 4-1: Using ep0 maxpacket: 32 [ 103.756109][ T4229] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 103.769844][ T4229] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 103.778886][ T4229] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 103.794738][ T4229] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 103.804593][ T4229] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 103.826566][ T4229] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input9 [ 103.857882][ T4229] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 103.951764][ T3517] usb 4-1: unable to get BOS descriptor or descriptor too short [ 103.961218][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 104.065478][ T4229] usb 2-1: USB disconnect, device number 6 [ 104.081982][ T3517] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.097362][ T3517] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.108553][ T13] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 104.119243][ T13] usb 3-1: config 0 has no interface number 0 [ 104.125843][ T4994] fido_id[4994]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 104.331454][ T3517] usb 4-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 104.352761][ T3517] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.362570][ T13] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 104.389097][ T3517] usb 4-1: Product: syz [ 104.396019][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.416922][ T3517] usb 4-1: Manufacturer: syz [ 104.423183][ T3517] usb 4-1: SerialNumber: syz [ 104.428752][ T13] usb 3-1: Product: syz [ 104.444213][ T13] usb 3-1: Manufacturer: syz [ 104.460969][ T13] usb 3-1: SerialNumber: syz [ 104.509203][ T13] usb 3-1: config 0 descriptor?? [ 104.584900][ T13] hub 3-1:0.132: bad descriptor, ignoring hub [ 104.602687][ T13] hub: probe of 3-1:0.132 failed with error -5 [ 104.654894][ T13] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input10 [ 104.817262][ T4982] netlink: 'syz.2.242': attribute type 4 has an invalid length. [ 104.906900][ T4982] netlink: 152 bytes leftover after parsing attributes in process `syz.2.242'. [ 105.007015][ T4982] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 105.093974][ T5006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 105.143377][ T1108] usb 3-1: USB disconnect, device number 6 [ 105.251715][ T3517] usb 4-1: 0:1 : does not exist [ 105.257966][ T3517] usb 4-1: unit 1 not found! [ 105.332191][ T3517] usb 4-1: USB disconnect, device number 6 [ 105.412106][ T4229] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 105.596380][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.671167][ T4229] usb 2-1: Using ep0 maxpacket: 16 [ 105.836668][ T4229] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.921546][ T4229] usb 2-1: config 4 has an invalid interface number: 127 but max is 0 [ 105.930122][ T4229] usb 2-1: config 4 has no interface number 0 [ 105.936412][ T5027] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.980637][ T4229] usb 2-1: config 4 interface 127 has no altsetting 0 [ 106.026736][ T4304] syzkaller0: tun_net_xmit 76 [ 106.041682][ T4304] syzkaller0: tun_net_xmit 48 [ 106.067056][ T4258] syzkaller0: tun_net_xmit 76 [ 106.141884][ T5027] syzkaller0: tun_net_xmit 28 [ 106.161330][ T4229] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 106.202111][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.221904][ T4229] usb 2-1: Product: syz [ 106.232951][ T4229] usb 2-1: Manufacturer: syz [ 106.246570][ T4229] usb 2-1: SerialNumber: syz [ 107.294438][ T5049] device syzkaller0 entered promiscuous mode [ 107.553425][ T4229] usbhid 2-1:4.127: couldn't find an input interrupt endpoint [ 107.561817][ T4229] usb 2-1: USB disconnect, device number 7 [ 107.734181][ T5043] netlink: 'syz.3.257': attribute type 4 has an invalid length. [ 108.059364][ T5058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.260'. [ 108.082688][ T5058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.260'. [ 108.121232][ T4229] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.481301][ T4258] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 108.491300][ T4229] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 108.521604][ T4229] usb 4-1: config 1 has no interface number 0 [ 108.541511][ T4229] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 108.603961][ T4229] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 108.651313][ T4229] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 108.741346][ T4258] usb 2-1: Using ep0 maxpacket: 32 [ 108.861317][ T4229] usb 4-1: New USB device found, idVendor=0582, idProduct=0156, bcdDevice= 0.40 [ 108.901380][ T4258] usb 2-1: unable to get BOS descriptor or descriptor too short [ 108.945591][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.994949][ T4229] usb 4-1: Product: syz [ 109.031397][ T4258] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.051915][ T4229] usb 4-1: Manufacturer: syz [ 109.056569][ T4229] usb 4-1: SerialNumber: syz [ 109.081284][ T4258] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.281576][ T4258] usb 2-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 109.361320][ T4258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.369401][ T4258] usb 2-1: Product: syz [ 109.398653][ T4258] usb 2-1: Manufacturer: syz [ 109.413327][ T4258] usb 2-1: SerialNumber: syz [ 109.448943][ T5047] udc-core: couldn't find an available UDC or it's busy [ 109.466385][ T5047] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 109.891401][ T4258] usb 2-1: 0:1 : does not exist [ 109.901392][ T4258] usb 2-1: unit 1 not found! [ 109.972309][ T4258] usb 2-1: USB disconnect, device number 8 [ 110.181165][ T1108] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.293654][ T5011] udevd[5011]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.431267][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 110.497884][ T5103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 110.547934][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.555448][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.601947][ T1108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 110.711274][ T1108] usb 5-1: config 4 has an invalid interface number: 127 but max is 0 [ 110.741366][ T1108] usb 5-1: config 4 has no interface number 0 [ 110.747520][ T1108] usb 5-1: config 4 interface 127 has no altsetting 0 [ 110.781393][ T4229] usb 4-1: 1:0 : does not exist [ 110.837845][ T5105] netlink: 296 bytes leftover after parsing attributes in process `syz.3.277'. [ 110.848294][ T4229] usb 4-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 110.893733][ T4229] usb 4-1: 1:3 : does not exist [ 110.898692][ T4229] usb 4-1: incorrect wMaxPacketSize 0x210 for BADD profile [ 110.917106][ T5105] ip_tables: iptables: counters copy to user failed while replacing table [ 110.928709][ T5107] tipc: Enabled bearer , priority 0 [ 110.944541][ T5105] ip_tables: iptables: counters copy to user failed while replacing table [ 110.961338][ T1108] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 111.062616][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.070720][ T1108] usb 5-1: Product: syz [ 111.123737][ T4229] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 111.131851][ T5107] tipc: Resetting bearer [ 111.148106][ T1108] usb 5-1: Manufacturer: syz [ 111.191121][ T1108] usb 5-1: SerialNumber: syz [ 111.196153][ T4229] usb 4-1: USB disconnect, device number 7 [ 111.247648][ T5106] tipc: Disabling bearer [ 111.275114][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.691167][ T4229] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 111.761417][ T4258] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 111.941157][ T4229] usb 4-1: Using ep0 maxpacket: 16 [ 112.011325][ T4258] usb 2-1: Using ep0 maxpacket: 32 [ 112.061355][ T4229] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 112.081315][ T4229] usb 4-1: config 0 has no interface number 0 [ 112.131519][ T4258] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.148423][ T4258] usb 2-1: config 0 has no interfaces? [ 112.271566][ T4229] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 112.296081][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.315176][ T4229] usb 4-1: Product: syz [ 112.321666][ T4258] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 112.334123][ T1108] usbhid 5-1:4.127: couldn't find an input interrupt endpoint [ 112.346095][ T4229] usb 4-1: Manufacturer: syz [ 112.350744][ T4229] usb 4-1: SerialNumber: syz [ 112.361663][ T4258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.380806][ T1108] usb 5-1: USB disconnect, device number 5 [ 112.405573][ T4258] usb 2-1: Product: syz [ 112.413548][ T4229] usb 4-1: config 0 descriptor?? [ 112.422369][ T4258] usb 2-1: Manufacturer: syz [ 112.429920][ T4258] usb 2-1: SerialNumber: syz [ 112.455054][ T4258] usb 2-1: config 0 descriptor?? [ 112.461936][ T4229] hub 4-1:0.132: bad descriptor, ignoring hub [ 112.479346][ T4229] hub: probe of 4-1:0.132 failed with error -5 [ 112.498592][ T4229] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input11 [ 112.665993][ T5105] netlink: 'syz.3.277': attribute type 4 has an invalid length. [ 112.692157][ T5105] netlink: 152 bytes leftover after parsing attributes in process `syz.3.277'. [ 112.715111][ T5105] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 113.069185][ T5136] netlink: 'syz.0.287': attribute type 4 has an invalid length. [ 113.084477][ T5138] kvm [5137]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x80 [ 113.099549][ T5138] kvm [5137]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 113.110457][ T5138] kvm [5137]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x80 [ 113.119966][ T5138] kvm [5137]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 113.130148][ T5138] kvm [5137]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x80 [ 113.139801][ T5138] kvm [5137]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 113.149797][ T5138] kvm [5137]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x80 [ 113.159307][ T5138] kvm [5137]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 113.169592][ T5138] kvm [5137]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x80 [ 113.211331][ T5138] kvm [5137]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 113.336571][ T5136] netlink: 'syz.0.287': attribute type 4 has an invalid length. [ 113.469837][ T5153] device syzkaller0 entered promiscuous mode [ 113.672339][ T4229] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.753887][ T3517] usb 4-1: USB disconnect, device number 8 [ 113.981208][ T3517] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 114.051245][ T4229] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 114.060684][ T4229] usb 1-1: config 1 has no interface number 0 [ 114.067814][ T4229] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 114.077404][ T4229] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 114.088821][ T4229] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 114.141254][ T4231] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 114.251293][ T4229] usb 1-1: New USB device found, idVendor=0582, idProduct=0156, bcdDevice= 0.40 [ 114.260620][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.269130][ T4229] usb 1-1: Product: syz [ 114.273929][ T4229] usb 1-1: Manufacturer: syz [ 114.278667][ T4229] usb 1-1: SerialNumber: syz [ 114.371522][ T3517] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.383689][ T3517] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.411322][ T4231] usb 3-1: Using ep0 maxpacket: 32 [ 114.457479][ T1108] usb 2-1: USB disconnect, device number 9 [ 114.571693][ T3517] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 114.582426][ T3517] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 114.588187][ T5146] udc-core: couldn't find an available UDC or it's busy [ 114.595918][ T3517] usb 4-1: Product: syz [ 114.603192][ T4231] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.610994][ T5146] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 114.620499][ T3517] usb 4-1: Manufacturer: syz [ 114.625905][ T3517] usb 4-1: SerialNumber: syz [ 114.635049][ T3517] usb 4-1: config 0 descriptor?? [ 114.721495][ T4231] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 114.741279][ T4231] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 114.751822][ T4231] usb 3-1: config 14 has no interface number 0 [ 114.759272][ T4231] usb 3-1: config 14 has no interface number 1 [ 114.766704][ T4231] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 114.779616][ T4231] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 114.792961][ T4231] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 114.806411][ T4231] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.833594][ T4231] usb 3-1: config 14 interface 57 has no altsetting 0 [ 114.842275][ T4231] usb 3-1: config 14 interface 228 has no altsetting 0 [ 114.868683][ T5164] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 114.891292][ T1108] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 115.021750][ T4231] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 115.041283][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.050720][ T4231] usb 3-1: Product: syz [ 115.057505][ T4231] usb 3-1: Manufacturer: syz [ 115.063369][ T4231] usb 3-1: SerialNumber: syz [ 115.141067][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 115.261392][ T1108] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 115.272657][ T1108] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 115.301756][ T1108] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 115.336882][ T1108] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 115.357857][ T1108] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 115.382453][ T1108] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.406100][ T1108] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.426397][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.445775][ T4227] usb 4-1: USB disconnect, device number 9 [ 115.503793][ T1108] usbtmc: probe of 2-1:16.0 failed with error -22 [ 115.585077][ T4231] legousbtower 3-1:14.57: interrupt endpoints not found [ 115.679462][ T5172] block device autoloading is deprecated and will be removed. [ 115.794442][ T4231] legousbtower 3-1:14.228: interrupt endpoints not found [ 115.891270][ T4229] usb 1-1: 1:0 : does not exist [ 115.896291][ T4229] usb 1-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 115.961774][ T4229] usb 1-1: 1:3 : does not exist [ 115.966740][ T4229] usb 1-1: incorrect wMaxPacketSize 0x210 for BADD profile [ 116.074389][ T4229] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 116.097657][ T5182] device syzkaller0 entered promiscuous mode [ 116.137354][ T4229] usb 1-1: USB disconnect, device number 6 [ 116.146322][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.360708][ T5185] device syzkaller0 entered promiscuous mode [ 117.046621][ T5208] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 117.118179][ T5208] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 117.143245][ T5218] netlink: 296 bytes leftover after parsing attributes in process `syz.4.311'. [ 117.166860][ T5218] ip_tables: iptables: counters copy to user failed while replacing table [ 117.189087][ T5218] ip_tables: iptables: counters copy to user failed while replacing table [ 117.307720][ T5223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 117.530678][ T4229] usb 2-1: USB disconnect, device number 10 [ 117.621188][ T1108] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.849876][ T5233] netlink: 'syz.1.314': attribute type 4 has an invalid length. [ 117.857906][ T4227] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 117.871448][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 117.938387][ T4304] usb 3-1: USB disconnect, device number 7 [ 117.991336][ T1108] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 118.008572][ T1108] usb 5-1: config 0 has no interface number 0 [ 118.101529][ T4227] usb 1-1: Using ep0 maxpacket: 8 [ 118.201425][ T1108] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 118.210620][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.219114][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 118.234602][ T1108] usb 5-1: Product: syz [ 118.239026][ T1108] usb 5-1: Manufacturer: syz [ 118.246423][ T4227] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 118.259007][ T1108] usb 5-1: SerialNumber: syz [ 118.266694][ T4227] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 118.295683][ T1108] usb 5-1: config 0 descriptor?? [ 118.305131][ T4227] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 118.316790][ T4227] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 118.335700][ T4227] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 118.348174][ T1108] hub 5-1:0.132: bad descriptor, ignoring hub [ 118.360178][ T4227] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.375808][ T1108] hub: probe of 5-1:0.132 failed with error -5 [ 118.402064][ T1108] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input12 [ 118.421169][ T4227] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.441329][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.461353][ T13] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 118.512745][ T4227] usbtmc: probe of 1-1:16.0 failed with error -22 [ 118.549449][ T5218] netlink: 'syz.4.311': attribute type 4 has an invalid length. [ 118.564771][ T5218] netlink: 152 bytes leftover after parsing attributes in process `syz.4.311'. [ 118.591321][ T23] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 118.610788][ T23] usb 2-1: config 1 has no interface number 0 [ 118.618481][ T5218] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 118.636547][ T23] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 118.636581][ T23] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 118.636617][ T23] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 118.726119][ T5241] device syzkaller0 entered promiscuous mode [ 118.791433][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0156, bcdDevice= 0.40 [ 118.800783][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.810199][ T23] usb 2-1: Product: syz [ 118.821993][ T4304] usb 5-1: USB disconnect, device number 6 [ 118.835607][ T23] usb 2-1: Manufacturer: syz [ 118.845252][ T23] usb 2-1: SerialNumber: syz [ 118.877135][ T5243] device syzkaller0 entered promiscuous mode [ 118.931584][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.944318][ T13] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 119.131503][ T13] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 119.142491][ T13] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 119.159610][ T5234] udc-core: couldn't find an available UDC or it's busy [ 119.171063][ T13] usb 3-1: Product: syz [ 119.176569][ T13] usb 3-1: Manufacturer: syz [ 119.177461][ T5234] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 119.183948][ T13] usb 3-1: SerialNumber: syz [ 119.218473][ T13] usb 3-1: config 0 descriptor?? [ 119.310493][ T26] audit: type=1326 audit(1788006520.363:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.3.320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ceca4159 code=0x7ffc0000 [ 119.358471][ T26] audit: type=1326 audit(1788006520.403:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.3.320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f46ceca4159 code=0x7ffc0000 [ 119.392122][ T26] audit: type=1326 audit(1788006520.413:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.3.320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ceca4159 code=0x7ffc0000 [ 119.457818][ T26] audit: type=1326 audit(1788006520.413:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.3.320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ceca4159 code=0x7ffc0000 [ 119.529550][ T26] audit: type=1326 audit(1788006520.413:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.3.320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46ceca4159 code=0x7ffc0000 [ 119.641358][ T26] audit: type=1326 audit(1788006520.413:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.3.320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ceca4159 code=0x7ffc0000 [ 119.822897][ T26] audit: type=1326 audit(1788006520.413:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.3.320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ceca4159 code=0x7ffc0000 [ 119.852208][ T26] audit: type=1326 audit(1788006520.423:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.3.320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f46ceca4159 code=0x7ffc0000 [ 119.925039][ T26] audit: type=1326 audit(1788006520.493:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.3.320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ceca4159 code=0x7ffc0000 [ 120.197322][ T26] audit: type=1326 audit(1788006520.493:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.3.320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ceca4159 code=0x7ffc0000 [ 120.240291][ T4227] usb 3-1: USB disconnect, device number 8 [ 120.611468][ T4227] usb 1-1: USB disconnect, device number 7 [ 120.831468][ T23] usb 2-1: 1:0 : does not exist [ 120.836963][ T23] usb 2-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 120.867906][ T5257] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 120.891308][ T23] usb 2-1: 1:3 : does not exist [ 120.919562][ T23] usb 2-1: incorrect wMaxPacketSize 0x210 for BADD profile [ 121.064668][ T23] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 121.139132][ T23] usb 2-1: USB disconnect, device number 11 [ 121.396598][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.432448][ T5264] netlink: 296 bytes leftover after parsing attributes in process `syz.1.326'. [ 121.464161][ T5264] ip_tables: iptables: counters copy to user failed while replacing table [ 121.564792][ T5264] ip_tables: iptables: counters copy to user failed while replacing table [ 122.045035][ T5282] device syzkaller0 entered promiscuous mode [ 122.092345][ T4231] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 122.102781][ T5285] netlink: 296 bytes leftover after parsing attributes in process `syz.2.332'. [ 122.138194][ T5285] ip_tables: iptables: counters copy to user failed while replacing table [ 122.163778][ T5285] ip_tables: iptables: counters copy to user failed while replacing table [ 122.279309][ T5289] device syzkaller0 entered promiscuous mode [ 122.381599][ T4231] usb 2-1: Using ep0 maxpacket: 16 [ 122.541272][ T4231] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 122.550321][ T4231] usb 2-1: config 0 has no interface number 0 [ 122.581136][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 122.681221][ T4304] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 122.731499][ T4231] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 122.742742][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.752750][ T4231] usb 2-1: Product: syz [ 122.757430][ T4231] usb 2-1: Manufacturer: syz [ 122.763201][ T4231] usb 2-1: SerialNumber: syz [ 122.772566][ T4231] usb 2-1: config 0 descriptor?? [ 122.821099][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 122.827552][ T4231] hub 2-1:0.132: bad descriptor, ignoring hub [ 122.836308][ T4231] hub: probe of 2-1:0.132 failed with error -5 [ 122.847710][ T4231] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input13 [ 122.921229][ T4304] usb 5-1: Using ep0 maxpacket: 8 [ 122.941193][ T23] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 122.949548][ T23] usb 3-1: config 0 has no interface number 0 [ 123.041771][ T4304] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 123.050525][ T4304] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 123.068612][ T4304] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 123.080039][ T4304] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 123.096685][ T4304] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 123.107144][ T4304] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.129586][ T4304] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.139376][ T23] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 123.156333][ T4304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.165167][ T5264] netlink: 'syz.1.326': attribute type 4 has an invalid length. [ 123.167523][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.176977][ T5264] netlink: 152 bytes leftover after parsing attributes in process `syz.1.326'. [ 123.192323][ T5264] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 123.196476][ T23] usb 3-1: Product: syz [ 123.212975][ T23] usb 3-1: Manufacturer: syz [ 123.217721][ T23] usb 3-1: SerialNumber: syz [ 123.226023][ T23] usb 3-1: config 0 descriptor?? [ 123.232513][ T4304] usbtmc: probe of 5-1:16.0 failed with error -22 [ 123.274124][ T23] hub 3-1:0.132: bad descriptor, ignoring hub [ 123.280280][ T23] hub: probe of 3-1:0.132 failed with error -5 [ 123.326529][ T23] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input14 [ 123.476770][ T5285] netlink: 'syz.2.332': attribute type 4 has an invalid length. [ 123.485854][ T5285] netlink: 152 bytes leftover after parsing attributes in process `syz.2.332'. [ 123.496922][ T5285] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 123.511468][ T4304] usb 5-1: USB disconnect, device number 7 [ 124.458578][ T5294] netlink: 'syz.4.335': attribute type 4 has an invalid length. [ 124.475177][ T5294] netlink: 'syz.4.335': attribute type 4 has an invalid length. [ 124.661127][ T4229] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 124.865402][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 124.891465][ T4304] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 124.941003][ T5327] netlink: 296 bytes leftover after parsing attributes in process `syz.0.347'. [ 124.960383][ T5327] ip_tables: iptables: counters copy to user failed while replacing table [ 124.981950][ T5327] ip_tables: iptables: counters copy to user failed while replacing table [ 125.061412][ T4229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.081361][ T4229] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 125.274802][ T4304] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 125.284102][ T4229] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 125.305232][ T4304] usb 5-1: config 1 has no interface number 0 [ 125.312131][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 125.326622][ T4304] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 125.336433][ T4229] usb 4-1: Product: syz [ 125.340786][ T4229] usb 4-1: Manufacturer: syz [ 125.351570][ T4304] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 125.366135][ T4229] usb 4-1: SerialNumber: syz [ 125.385199][ T4229] usb 4-1: config 0 descriptor?? [ 125.391193][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 125.406387][ T4304] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 125.543478][ T3517] usb 3-1: USB disconnect, device number 9 [ 125.571661][ T4304] usb 5-1: New USB device found, idVendor=0582, idProduct=0156, bcdDevice= 0.40 [ 125.621386][ T4304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.656932][ T4304] usb 5-1: Product: syz [ 125.666143][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 125.696335][ T4304] usb 5-1: Manufacturer: syz [ 125.723182][ T4304] usb 5-1: SerialNumber: syz [ 125.811243][ T23] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 125.822281][ T23] usb 1-1: config 0 has no interface number 0 [ 126.032787][ T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 126.050762][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.060193][ T5305] udc-core: couldn't find an available UDC or it's busy [ 126.067765][ T23] usb 1-1: Product: syz [ 126.072488][ T5305] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 126.080303][ T23] usb 1-1: Manufacturer: syz [ 126.085689][ T23] usb 1-1: SerialNumber: syz [ 126.099908][ T23] usb 1-1: config 0 descriptor?? [ 126.152707][ T23] hub 1-1:0.132: bad descriptor, ignoring hub [ 126.165232][ T23] hub: probe of 1-1:0.132 failed with error -5 [ 126.199918][ T23] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input15 [ 126.345990][ T23] usb 4-1: USB disconnect, device number 10 [ 126.531521][ T5327] netlink: 'syz.0.347': attribute type 4 has an invalid length. [ 126.556007][ T5327] netlink: 152 bytes leftover after parsing attributes in process `syz.0.347'. [ 126.576966][ T5327] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 126.764909][ T21] usb 1-1: USB disconnect, device number 8 [ 126.968983][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 127.144564][ T5358] netlink: 296 bytes leftover after parsing attributes in process `syz.1.358'. [ 127.185231][ T5358] ip_tables: iptables: counters copy to user failed while replacing table [ 127.216375][ T5358] ip_tables: iptables: counters copy to user failed while replacing table [ 127.225647][ T4304] usb 5-1: 1:0 : does not exist [ 127.234068][ T4304] usb 5-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 127.313844][ T4304] usb 5-1: 1:3 : does not exist [ 127.318866][ T4304] usb 5-1: incorrect wMaxPacketSize 0x210 for BADD profile [ 127.456932][ T4304] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 127.480507][ T4304] usb 5-1: USB disconnect, device number 9 [ 127.621495][ T3542] usb 2-1: reset high-speed USB device number 12 using dummy_hcd [ 127.728175][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.901887][ T5386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 128.274050][ T5358] netlink: 'syz.1.358': attribute type 4 has an invalid length. [ 128.311119][ T5358] netlink: 152 bytes leftover after parsing attributes in process `syz.1.358'. [ 128.356799][ T5358] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 128.453372][ T5398] netlink: 296 bytes leftover after parsing attributes in process `syz.4.372'. [ 128.495986][ T5398] ip_tables: iptables: counters copy to user failed while replacing table [ 128.538813][ T5398] ip_tables: iptables: counters copy to user failed while replacing table [ 128.571628][ T23] usb 2-1: USB disconnect, device number 12 [ 128.663630][ T4227] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 128.965315][ T4227] usb 1-1: Using ep0 maxpacket: 32 [ 128.981862][ T4230] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 129.101577][ T4227] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.130875][ T4227] usb 1-1: config 0 has no interfaces? [ 129.231434][ T4230] usb 5-1: Using ep0 maxpacket: 16 [ 129.299637][ T5402] program syz.2.375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.316972][ T4227] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 129.340852][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.359240][ T4227] usb 1-1: Product: syz [ 129.369376][ T4227] usb 1-1: Manufacturer: syz [ 129.372218][ T4230] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 129.384572][ T4227] usb 1-1: SerialNumber: syz [ 129.391671][ T4230] usb 5-1: config 0 has no interface number 0 [ 129.444320][ T4227] usb 1-1: config 0 descriptor?? [ 129.551950][ T4230] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 129.581272][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.590703][ T4230] usb 5-1: Product: syz [ 129.601364][ T4230] usb 5-1: Manufacturer: syz [ 129.606838][ T4230] usb 5-1: SerialNumber: syz [ 129.640257][ T4230] usb 5-1: config 0 descriptor?? [ 129.693180][ T4230] hub 5-1:0.132: bad descriptor, ignoring hub [ 129.700993][ T4230] hub: probe of 5-1:0.132 failed with error -5 [ 129.744070][ T4230] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input16 [ 129.979163][ T5398] netlink: 'syz.4.372': attribute type 4 has an invalid length. [ 129.999396][ T5398] netlink: 152 bytes leftover after parsing attributes in process `syz.4.372'. [ 130.045583][ T5398] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 131.423710][ T13] usb 1-1: USB disconnect, device number 9 [ 131.497529][ T5449] netlink: 296 bytes leftover after parsing attributes in process `syz.0.393'. [ 131.540374][ T5449] ip_tables: iptables: counters copy to user failed while replacing table [ 131.570523][ T5449] ip_tables: iptables: counters copy to user failed while replacing table [ 131.788118][ T1108] usb 5-1: USB disconnect, device number 10 [ 132.005004][ T13] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 132.061324][ T4227] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 132.161866][ T5467] netlink: 64 bytes leftover after parsing attributes in process `syz.1.397'. [ 132.261257][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 132.321238][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 132.381291][ T13] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 132.390926][ T13] usb 1-1: config 0 has no interface number 0 [ 132.451605][ T4227] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.473852][ T4227] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 132.494771][ T4227] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 132.506868][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.536273][ T4227] usb 4-1: config 0 descriptor?? [ 132.551718][ T13] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 132.572492][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.582207][ T13] usb 1-1: Product: syz [ 132.595432][ T4227] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 132.613552][ T13] usb 1-1: Manufacturer: syz [ 132.619028][ T13] usb 1-1: SerialNumber: syz [ 132.647499][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.655200][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.716575][ T13] usb 1-1: config 0 descriptor?? [ 132.783070][ T13] hub 1-1:0.132: bad descriptor, ignoring hub [ 132.796437][ T13] hub: probe of 1-1:0.132 failed with error -5 [ 132.832025][ T13] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input17 [ 132.976189][ T5449] netlink: 'syz.0.393': attribute type 4 has an invalid length. [ 133.025069][ T5449] netlink: 152 bytes leftover after parsing attributes in process `syz.0.393'. [ 133.039938][ T4227] usb 4-1: USB disconnect, device number 11 [ 133.103593][ T5449] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 133.401420][ T4230] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 133.522431][ T13] usb 1-1: USB disconnect, device number 10 [ 133.651254][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 133.811479][ T4230] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.820604][ T3517] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 133.913297][ T4230] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 133.933225][ T4230] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 133.961272][ T4230] usb 5-1: config 14 has no interface number 0 [ 133.981555][ T4230] usb 5-1: config 14 has no interface number 1 [ 133.989385][ T4230] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 134.002806][ T4230] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 134.017928][ T4230] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 134.061486][ T4230] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.081315][ T4230] usb 5-1: config 14 interface 57 has no altsetting 0 [ 134.089472][ T4230] usb 5-1: config 14 interface 228 has no altsetting 0 [ 134.097966][ T3517] usb 2-1: Using ep0 maxpacket: 32 [ 134.241682][ T3517] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.264198][ T3517] usb 2-1: config 0 has no interfaces? [ 134.291750][ T4230] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 134.318358][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.341857][ T4230] usb 5-1: Product: syz [ 134.346908][ T4230] usb 5-1: Manufacturer: syz [ 134.401982][ T4230] usb 5-1: SerialNumber: syz [ 134.421903][ T3517] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 134.439937][ T3517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.464113][ T3517] usb 2-1: Product: syz [ 134.469002][ T3517] usb 2-1: Manufacturer: syz [ 134.489840][ T3517] usb 2-1: SerialNumber: syz [ 134.508977][ T3517] usb 2-1: config 0 descriptor?? [ 134.924454][ T4230] legousbtower 5-1:14.57: interrupt endpoints not found [ 135.133291][ T4230] legousbtower 5-1:14.228: interrupt endpoints not found [ 136.529680][ T4174] usb 2-1: USB disconnect, device number 13 [ 137.283665][ T21] usb 5-1: USB disconnect, device number 11 [ 149.021529][ T5513] device syzkaller0 entered promiscuous mode [ 149.211272][ T4174] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 149.266820][ T5518] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 149.309962][ T5518] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 149.428995][ T4174] usb 4-1: device descriptor read/64, error -71 [ 149.618796][ T5531] tipc: Enabled bearer , priority 0 [ 149.663134][ T5529] tipc: Disabling bearer [ 149.711991][ T4174] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 149.740390][ T5537] netlink: 296 bytes leftover after parsing attributes in process `syz.2.419'. [ 149.751950][ T5537] ip_tables: iptables: counters copy to user failed while replacing table [ 149.765715][ T5537] ip_tables: iptables: counters copy to user failed while replacing table [ 149.931679][ T5540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 149.942219][ T4174] usb 4-1: device descriptor read/64, error -71 [ 150.083093][ T4174] usb usb4-port1: attempt power cycle [ 150.191922][ T4230] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 150.236726][ T5547] input: syz1 as /devices/virtual/input/input18 [ 150.243725][ T4304] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 150.483029][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 150.491388][ T4304] usb 5-1: Using ep0 maxpacket: 32 [ 150.569160][ T4174] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 150.624251][ T5556] [ 150.626768][ T5556] ============================= [ 150.632571][ T4230] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 150.647298][ T5556] WARNING: suspicious RCU usage [ 150.653056][ T4304] usb 5-1: unable to get BOS descriptor or descriptor too short [ 150.663259][ T4230] usb 3-1: config 0 has no interface number 0 [ 150.671756][ T5556] syzkaller #0 Not tainted [ 150.671774][ T5556] ----------------------------- [ 150.671783][ T5556] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 150.671800][ T5556] [ 150.671800][ T5556] other info that might help us debug this: [ 150.671800][ T5556] [ 150.671809][ T5556] [ 150.671809][ T5556] rcu_scheduler_active = 2, debug_locks = 1 [ 150.671825][ T5556] 1 lock held by syz.0.426/5556: [ 150.671840][ T5556] #0: ffffffff8d44cd08 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 150.671936][ T5556] [ 150.671936][ T5556] stack backtrace: [ 150.671955][ T5556] CPU: 1 PID: 5556 Comm: syz.0.426 Not tainted syzkaller #0 [ 150.671978][ T5556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.672001][ T5556] Call Trace: [ 150.672010][ T5556] [ 150.672020][ T5556] dump_stack_lvl+0x188/0x250 [ 150.672051][ T5556] ? load_image+0x410/0x410 [ 150.672079][ T5556] ? show_regs_print_info+0x20/0x20 [ 150.672120][ T5556] ? lockdep_rcu_suspicious+0x110/0x180 [ 150.672148][ T5556] ? local_bh_enable+0x20/0x20 [ 150.672175][ T5556] rhltable_lookup+0x787/0x7a0 [ 150.672213][ T5556] ? mark_lock+0x94/0x320 [ 150.672236][ T5556] ? mr_mfc_find_parent+0x190/0x190 [ 150.672265][ T5556] ? local_bh_enable+0x20/0x20 [ 150.672297][ T5556] ? lock_chain_count+0x20/0x20 [ 150.672329][ T5556] mr_mfc_find_any_parent+0xb7/0x1d0 [ 150.807002][ T5556] ? local_bh_enable+0x20/0x20 [ 150.811883][ T5556] ip_mr_forward+0x247/0xf60 [ 150.816542][ T5556] ipmr_mfc_add+0x2273/0x2bd0 [ 150.821305][ T5556] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 150.826297][ T5556] ? __lock_acquire+0x7b50/0x7b50 [ 150.831395][ T5556] ip_mroute_setsockopt+0xecd/0x1230 [ 150.836801][ T5556] ? ipmr_rule_default+0x70/0x70 [ 150.841814][ T5556] ? __might_sleep+0xf0/0xf0 [ 150.846455][ T5556] ip_setsockopt+0x568/0x31e0 [ 150.851202][ T5556] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 150.856624][ T5556] ? aa_sk_perm+0x7dc/0x910 [ 150.857808][ T5558] usb usb7: usbfs: process 5558 (syz.1.428) did not claim interface 0 before use [ 150.861194][ T5556] ? aa_af_perm+0x340/0x340 [ 150.874957][ T5556] ? __fget_files+0x402/0x470 [ 150.879685][ T5556] ? aa_sock_opt_perm+0x74/0x100 [ 150.884677][ T5556] ? sock_common_setsockopt+0x32/0xb0 [ 150.890110][ T5556] ? raw_setsockopt+0xc2/0x170 [ 150.894907][ T5556] ? sock_common_recvmsg+0x1c0/0x1c0 [ 150.900232][ T5556] __sys_setsockopt+0x2bf/0x3d0 [ 150.905147][ T5556] __x64_sys_setsockopt+0xb1/0xc0 [ 150.910210][ T5556] do_syscall_64+0x4c/0xa0 [ 150.914673][ T5556] ? clear_bhb_loop+0x30/0x80 [ 150.919467][ T5556] ? clear_bhb_loop+0x30/0x80 [ 150.924195][ T5556] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.930148][ T5556] RIP: 0033:0x7f022e616159 [ 150.934606][ T5556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.954258][ T5556] RSP: 002b:00007f022c86e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 150.962719][ T5556] RAX: ffffffffffffffda RBX: 00007f022e89dfa0 RCX: 00007f022e616159 [ 150.970840][ T5556] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 150.978935][ T5556] RBP: 00007f022e6ad024 R08: 000000000000003c R09: 0000000000000000 [ 150.986933][ T5556] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 150.994934][ T5556] R13: 00007f022e89e038 R14: 00007f022e89dfa0 R15: 00007ffd1ee845b8 [ 151.003647][ T5556] [ 151.013438][ T4174] usb 4-1: device descriptor read/8, error -71 [ 151.020070][ T5556] [ 151.022436][ T5556] ============================= [ 151.027307][ T5556] WARNING: suspicious RCU usage [ 151.032181][ T5556] syzkaller #0 Not tainted [ 151.036625][ T5556] ----------------------------- [ 151.041499][ T5556] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 151.050123][ T5556] [ 151.050123][ T5556] other info that might help us debug this: [ 151.050123][ T5556] [ 151.060401][ T5556] [ 151.060401][ T5556] rcu_scheduler_active = 2, debug_locks = 1 [ 151.068498][ T5556] 1 lock held by syz.0.426/5556: [ 151.073470][ T5556] #0: ffffffff8d44cd08 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 151.081964][ T4304] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.083388][ T5556] [ 151.083388][ T5556] stack backtrace: [ 151.083399][ T5556] CPU: 0 PID: 5556 Comm: syz.0.426 Not tainted syzkaller #0 [ 151.083421][ T5556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.083434][ T5556] Call Trace: [ 151.083443][ T5556] [ 151.083452][ T5556] dump_stack_lvl+0x188/0x250 [ 151.113283][ T4304] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.116802][ T5556] ? load_image+0x410/0x410 [ 151.116835][ T5556] ? show_regs_print_info+0x20/0x20 [ 151.146564][ T5556] ? lockdep_rcu_suspicious+0x110/0x180 [ 151.152180][ T5556] ? local_bh_enable+0x20/0x20 [ 151.156985][ T5556] rhltable_lookup+0x512/0x7a0 [ 151.161796][ T5556] ? local_bh_enable+0x20/0x20 [ 151.166628][ T5556] ? mr_mfc_find_parent+0x190/0x190 [ 151.171870][ T5556] ? local_bh_enable+0x20/0x20 [ 151.176679][ T5556] ? lock_chain_count+0x20/0x20 [ 151.181578][ T5556] mr_mfc_find_any_parent+0xb7/0x1d0 [ 151.186907][ T5556] ? local_bh_enable+0x20/0x20 [ 151.191707][ T5556] ip_mr_forward+0x247/0xf60 [ 151.196347][ T5556] ipmr_mfc_add+0x2273/0x2bd0 [ 151.201074][ T5556] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 151.206047][ T5556] ? __lock_acquire+0x7b50/0x7b50 [ 151.211125][ T5556] ip_mroute_setsockopt+0xecd/0x1230 [ 151.216472][ T5556] ? ipmr_rule_default+0x70/0x70 [ 151.221474][ T5556] ? __might_sleep+0xf0/0xf0 [ 151.226116][ T5556] ip_setsockopt+0x568/0x31e0 [ 151.230835][ T5556] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 151.236410][ T5556] ? aa_sk_perm+0x7dc/0x910 [ 151.240971][ T5556] ? aa_af_perm+0x340/0x340 [ 151.245508][ T5556] ? __fget_files+0x402/0x470 [ 151.250334][ T5556] ? aa_sock_opt_perm+0x74/0x100 [ 151.255313][ T5556] ? sock_common_setsockopt+0x32/0xb0 [ 151.260838][ T5556] ? raw_setsockopt+0xc2/0x170 [ 151.265643][ T5556] ? sock_common_recvmsg+0x1c0/0x1c0 [ 151.270985][ T5556] __sys_setsockopt+0x2bf/0x3d0 [ 151.275877][ T5556] __x64_sys_setsockopt+0xb1/0xc0 [ 151.280991][ T5556] do_syscall_64+0x4c/0xa0 [ 151.285440][ T5556] ? clear_bhb_loop+0x30/0x80 [ 151.290161][ T5556] ? clear_bhb_loop+0x30/0x80 [ 151.292065][ T4304] usb 5-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 151.294889][ T5556] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.294916][ T5556] RIP: 0033:0x7f022e616159 [ 151.314292][ T5556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.333940][ T5556] RSP: 002b:00007f022c86e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 151.336585][ T4304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.342432][ T5556] RAX: ffffffffffffffda RBX: 00007f022e89dfa0 RCX: 00007f022e616159 [ 151.342451][ T5556] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 151.342464][ T5556] RBP: 00007f022e6ad024 R08: 000000000000003c R09: 0000000000000000 [ 151.342478][ T5556] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 151.342491][ T5556] R13: 00007f022e89e038 R14: 00007f022e89dfa0 R15: 00007ffd1ee845b8 [ 151.342559][ T5556] [ 151.392403][ T4304] usb 5-1: Product: syz [ 151.401156][ T4304] usb 5-1: Manufacturer: syz [ 151.421115][ T4304] usb 5-1: SerialNumber: syz [ 151.722755][ T4174] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 151.777940][ T4230] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 151.789806][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.801411][ T4230] usb 3-1: Product: syz [ 151.807745][ T4230] usb 3-1: Manufacturer: syz [ 151.815917][ T4230] usb 3-1: SerialNumber: syz [ 151.823014][ T4174] usb 4-1: device descriptor read/8, error -71 [ 151.846983][ T4230] usb 3-1: config 0 descriptor?? [ 151.871346][ T4304] usb 5-1: 0:1 : does not exist [ 151.876453][ T4304] usb 5-1: unit 1 not found! [ 151.905251][ T4230] hub 3-1:0.132: bad descriptor, ignoring hub [ 151.914026][ T4230] hub: probe of 3-1:0.132 failed with error -5 [ 151.927955][ T4230] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input19 [ 151.946223][ T4174] usb usb4-port1: unable to enumerate USB device [ 151.968965][ T4304] usb 5-1: USB disconnect, device number 12 [ 152.107598][ T5537] netlink: 'syz.2.419': attribute type 4 has an invalid length. [ 152.125374][ T5537] netlink: 152 bytes leftover after parsing attributes in process `syz.2.419'. [ 152.137736][ T5537] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 156.617134][ T4174] usb 3-1: USB disconnect, device number 10