last executing test programs: 5m3.913683749s ago: executing program 2 (id=4385): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000007000000060000008c"], 0x50) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x108, &(0x7f0000000000)=ANY=[], 0x0) 5m3.660631762s ago: executing program 4 (id=4387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 5m3.430451468s ago: executing program 2 (id=4389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x78, 0x1, {0x6, '\x00', 0xd489, 0x8, 0x10000, 0x9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xdc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 5m3.208549398s ago: executing program 4 (id=4390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a3000"], 0xfc}}, 0x20044004) write$tun(r0, &(0x7f0000000a40)={@val={0xa, 0x809b}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x15, 0x4, 0x0, 0x2d, 0x5c, 0x68, 0x0, 0x6, 0x11, 0x0, @local, @local, {[@cipso={0x86, 0x36, 0xffffffffffffffff, [{0x0, 0xc, "14b1f8fe46cc771a813e"}, {0x6, 0x2}, {0x1, 0x9, "a0be2561254099"}, {0x0, 0xb, "a2c04395a799c8704c"}, {0x0, 0xe, "8c4eb572f4c2dc65b1a40d2e"}]}, @noop, @noop, @timestamp_prespec={0x44, 0x4, 0xa, 0x3, 0x9}, @noop]}}, {0x4e22, 0x4e22, 0x8}}}}}}, 0x76) 5m2.9940367s ago: executing program 2 (id=4392): r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES8=r1], 0x88}, 0x1, 0x0, 0x0, 0x20008001}, 0x40000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x11, r2, 0x4eb2d000) syz_open_procfs(0x0, &(0x7f0000000480)='cmdline\x00') r3 = userfaultfd(0x80000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x720, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000007470982cd5b811040c5432b634891050d1b90e2ebd44add2004c7f7318d3e45682f41f59457b8431577f118e33a35aafc10a38fd32d297e198c169598335e0", @ANYRES16=r0, @ANYRESHEX], 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000300)=0x7f, 0x4) sendmsg$key(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"/381], 0x180}}, 0x82) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0445624, &(0x7f0000000080)={0x980914}) timer_create(0x1, &(0x7f0000000280)={0x0, 0x3e, 0x4, @thr={&(0x7f0000000000)="515ef7", &(0x7f0000000140)="f30ea7865278824932d65cf3befb71867751fd9fcdfe6242114d80c8fc2b4ef1a0a9c88971690b276e117120d4395402689bfc7d97da996ffa1625df71c9891e3ff9080dfbb4cf0355d56a05b2f2b205f5f52e9bd620e60db9885fa379820e0477140f7f46a546757784c50d73217bc5043dbdf5effedf4c30bdb23d9bf476d7456b78919bcad1e75c962249fbc7d7c1d9af4525ffb39f01009a1b4fd462558a4b"}}, &(0x7f00000002c0)) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0x9, 0xa, 0x4, 0x2, 0xfc, {}, {0x3, 0x8, 0x8, 0x6a, 0x2, 0x4, "3b7a1286"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x400, 0x101, {0x1000000000004}, 0x8}, {0xffffffff, 0x39, {0x4}, 0xffb}]}, 0x7}) 5m2.592766222s ago: executing program 4 (id=4394): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x8, 0x5, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x7800, 0x9, 0x3}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) sendto$packet(r0, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140), 0x14) 5m2.448971948s ago: executing program 2 (id=4396): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006000)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0xd, r3, 0x1, 0x0, 0x6, @remote}, 0x40) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 5m2.172114335s ago: executing program 4 (id=4397): r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={0x1000, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2}, [@typed={0xc, 0x10c, 0x0, 0x0, @u64=0x9}, @typed={0x4, 0x131}, @generic="370d48c9e014c4eab253acdb44eec50c36c7e17b07295dd8eb3a1433826470c351fa6c59d27578e3992c6233c81337e96ea7c3aadd0dca65a5cb41df5f2230587dcde161e75e19c950120193a7e2c49d1d5e93711854d429fa5c8b0932401005b46af44b4ebc5b0782c5459789c3bf203bbb2b1cb5ce9d627c6d0c7990e6dcefc32ce42848f99250559f27dff14149117b32cb931c472b8ec0e9376be8c9d35c099b3292af4e74673284343a6e2d578f19a243062dd1a06f42294e0cd66df9215bb2fd1182026f5e6d5fa44bc5458fce0bc0ead03cba8540a9348d85c93e9eca27120c97b54b8900ab5b0ee4b308e430f527af7a03243db25c59f62505", @nested={0xed9, 0x96, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @u32=0x3}, @generic="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"]}]}, 0x1000}, 0x1, 0x0, 0x0, 0x8054}, 0x80) 5m2.171774415s ago: executing program 2 (id=4398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000340)={0x268, 0x1, 0x5, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [{{0x254, 0x1, {{0x0, 0x1}, 0xf7, 0x0, 0x3, 0x67, 0x2, 'syz1\x00', "1ce3e2469db1da2dcc13e453c16d2531c8180d6e52aff18d3786113a4cc87bd3", "9d8971bc6fa25cc5e652bcc9f0026345b5927e9283bb0554583c4ab8b8d9e434", [{0x9, 0x2, {0x0, 0x400}}, {0xff85, 0x6, {0x3, 0xe6}}, {0x3, 0xa, {0x3, 0x2}}, {0x0, 0xb98, {0x3, 0x80000001}}, {0x7607, 0x7, {0x3, 0x6}}, {0x7, 0x2, {0x0, 0x7}}, {0x101, 0xe3, {0x0, 0xd6d}}, {0xaf, 0x0, {0x0, 0x8}}, {0x2, 0x8001, {0x1, 0x10}}, {0x6, 0x0, {0x1, 0xb3}}, {0xc, 0x4, {0x3, 0x5}}, {0x1, 0x80, {0x1, 0x1}}, {0x7, 0x9, {0x1, 0x101}}, {0x8, 0x3, {0x3, 0x10000}}, {0x400, 0x8000, {0x1, 0x6}}, {0x5, 0x8, {0x2, 0x7}}, {0x4, 0x8000, {0x3, 0x1b}}, {0xf, 0xfff4, {0x3, 0xa}}, {0xfe00, 0x8, {0x1, 0x3ff}}, {0x4, 0xd0c6, {0x0, 0x80000001}}, {0x5, 0xcc, {0x0, 0x47ea}}, {0x4, 0x4, {0x1, 0x2}}, {0x1, 0x7, {0x0, 0xb}}, {0x5, 0x7, {0x1, 0x2}}, {0xe7d6, 0x2, {0x2, 0x7ff}}, {0x7, 0x2c29, {0x0, 0x9b5}}, {0x7, 0xb81, {0x3, 0x1}}, {0x2, 0x7, {0x2, 0x10}}, {0xe59, 0x7, {0x2, 0x7}}, {0x4, 0x80, {0x0, 0x7fffffff}}, {0x0, 0x6, {0x2, 0x10001}}, {0xad4e, 0x7fff, {0x2, 0x7}}, {0x8, 0xd, {0x2, 0x6}}, {0x3, 0xfe01, {0x2, 0xffff}}, {0xfc01, 0x5, {0x2, 0x1}}, {0x100, 0x4, {0x2}}, {0x400, 0x99ef, {0x0, 0x2}}, {0x5, 0x9, {0x0, 0x400}}, {0x4, 0x7, {0x2, 0x4}}, {0x81, 0xb, {0x3, 0xf}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 5m2.050724958s ago: executing program 4 (id=4399): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000007000000060000008c"], 0x50) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x108, &(0x7f0000000000)=ANY=[], 0x0) 5m1.687260193s ago: executing program 4 (id=4400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 5m0.517476444s ago: executing program 32 (id=4400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 5m0.41929095s ago: executing program 2 (id=4404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a3000"], 0xfc}}, 0x20044004) write$tun(r0, &(0x7f0000000a40)={@val={0xa, 0x809b}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x15, 0x4, 0x0, 0x2d, 0x5c, 0x68, 0x0, 0x6, 0x11, 0x0, @local, @local, {[@cipso={0x86, 0x36, 0xffffffffffffffff, [{0x0, 0xc, "14b1f8fe46cc771a813e"}, {0x6, 0x2}, {0x1, 0x9, "a0be2561254099"}, {0x0, 0xb, "a2c04395a799c8704c"}, {0x0, 0xe, "8c4eb572f4c2dc65b1a40d2e"}]}, @noop, @noop, @timestamp_prespec={0x44, 0x4, 0xa, 0x3, 0x9}, @noop]}}, {0x4e22, 0x4e22, 0x8}}}}}}, 0x76) 4m59.14484537s ago: executing program 33 (id=4404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a3000"], 0xfc}}, 0x20044004) write$tun(r0, &(0x7f0000000a40)={@val={0xa, 0x809b}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x15, 0x4, 0x0, 0x2d, 0x5c, 0x68, 0x0, 0x6, 0x11, 0x0, @local, @local, {[@cipso={0x86, 0x36, 0xffffffffffffffff, [{0x0, 0xc, "14b1f8fe46cc771a813e"}, {0x6, 0x2}, {0x1, 0x9, "a0be2561254099"}, {0x0, 0xb, "a2c04395a799c8704c"}, {0x0, 0xe, "8c4eb572f4c2dc65b1a40d2e"}]}, @noop, @noop, @timestamp_prespec={0x44, 0x4, 0xa, 0x3, 0x9}, @noop]}}, {0x4e22, 0x4e22, 0x8}}}}}}, 0x76) 31.971731283s ago: executing program 0 (id=5826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) 31.012705508s ago: executing program 0 (id=5833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000007000000060000008c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x108, &(0x7f0000000000)=ANY=[], 0x0) 30.181585568s ago: executing program 0 (id=5837): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000001000020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd05000700880000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 29.44836709s ago: executing program 0 (id=5840): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000077"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, 0x0, 0x0}, &(0x7f0000000740)={0x44, &(0x7f0000000300)={0x40, 0x14, 0x27, "d7b6a4e6a64c1f40c5ab38f76671e26c929baf6a53a85c0a3c137229b7058eb52237edc789b355"}, 0x0, &(0x7f0000000400)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000640)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000680)={0x20, 0x83, 0x2}, &(0x7f00000006c0)={0x20, 0x87, 0x2, 0x400}, 0x0}) 25.895097435s ago: executing program 0 (id=5861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000007000000060000008c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x108, &(0x7f0000000000)=ANY=[], 0x0) 6.334160814s ago: executing program 1 (id=5938): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 5.720205088s ago: executing program 1 (id=5942): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1, 0x30}, 0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) 5.073731056s ago: executing program 1 (id=5945): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x7, 0x0, 0x0, 0xc, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28) 4.579050286s ago: executing program 1 (id=5948): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x408cd, 0x0) 3.905032356s ago: executing program 6 (id=5952): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x9, 0x7, 0x6, 0x7fffffff, 0x7, 0x11, 0xe5, 0x3ff, 0xfffffffffffffc00, 0x80000001, 0x3, 0x8, 0x0, 0x5, 0x9, 0x84], 0xeeef0000, 0x28010}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x4000, 0x8, 0xb, 0x3, 0xd0, 0x42, 0x7, 0x0, 0x30, 0x19}, {0x10000, 0x2, 0x0, 0x2, 0x43, 0x7, 0x7f, 0x6, 0x5, 0x6, 0x3}, {0xdddd0000, 0x4000, 0x9, 0x5, 0x1, 0x7, 0x0, 0x9, 0x41, 0x8, 0x8, 0x81}, {0x6000, 0x10000, 0xa, 0x6, 0x3, 0x2, 0xfd, 0xf8, 0x9, 0x9, 0xe, 0xf1}, {0x4000, 0x30000, 0x10, 0x3, 0x5, 0x2, 0xab, 0x7f, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0x191bd000, 0xc, 0xa3, 0xb5, 0x8, 0x1, 0xa0, 0x80, 0x13, 0x5, 0xfc}, {0x6000, 0x1, 0x4, 0x5, 0x1, 0x2, 0x4, 0x3, 0x3, 0x7d, 0x2, 0x70}, {0x80a0000, 0xeeef0000, 0xc, 0x5, 0xf, 0x7, 0x4, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0xeeef0000, 0x29ad}, {0x3000, 0x7}, 0x80000031, 0x0, 0x6000, 0x2024, 0x400000006, 0x0, 0x3000, [0xa4, 0x1000, 0x400000000063, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.731992255s ago: executing program 3 (id=5954): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1, 0x30}, 0xc) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) 3.360678324s ago: executing program 5 (id=5955): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r1, @ANYBLOB="010003000000fddbdf2501000000080002000200000024000480050003000200000005000300010000000500030002000000050003000600000008000100ff"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.258899033s ago: executing program 1 (id=5956): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x8a0cc0, 0x0, 0x1, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f00000000c0)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 3.214199914s ago: executing program 3 (id=5957): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x7, 0x0, 0x0, 0xc, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28) 2.931485779s ago: executing program 6 (id=5958): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x30000}, 0x3e8) 2.798550001s ago: executing program 3 (id=5959): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800461e002c0064000001069078ac1414bbac1414bb8303"], 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [], {0x14}}, 0x28}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.784406938s ago: executing program 5 (id=5960): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000280)=@xdp={0x2c, 0xa888, 0x0, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="2719020059002fb96d9ce35eb119", 0xe}], 0x1}, 0x778b1a20232401d6) 2.50341399s ago: executing program 1 (id=5961): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)={0x0, 0xe, 0x2, '\t;'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.391160126s ago: executing program 6 (id=5962): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) 2.041772806s ago: executing program 6 (id=5963): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x94c1c000) syz_io_uring_setup(0x7d9, &(0x7f0000002140)={0x0, 0xe820, 0x3010, 0x1, 0xa2}, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4000009d, 0x0, 0x3}]}) read$FUSE(r2, &(0x7f0000000000)={0x2020}, 0x96) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2140, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000440)={0x1, 0x80000001, 0x200000000005000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "ecad80", 0x30, 0x3a, 0xff, @rand_addr=' \x01\x00', @local, {[], @time_exceed={0x3, 0x1, 0x0, 0xfb, '\x00', {0x0, 0x6, "7ba287", 0xfff9, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00'}}}}}}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x33fe0, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$inet(r0, 0x0, 0x44092) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_int(r9, 0x1, 0x12, &(0x7f0000000040)=0x4, 0x4) close(r1) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) 1.942091856s ago: executing program 5 (id=5964): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}]}}, 0x0, 0x3e}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 1.719657045s ago: executing program 3 (id=5965): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x844) 1.404903743s ago: executing program 5 (id=5966): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1, 0x30}, 0xc) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) 1.139808058s ago: executing program 3 (id=5967): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000022c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 693.4609ms ago: executing program 5 (id=5968): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0x7, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x30, 0x30, 0x2e, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) 627.521564ms ago: executing program 6 (id=5969): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r1, @ANYBLOB="010003000000fddbdf2501000000080002000200000024000480050003000200000005000300010000000500030002000000050003000600000008000100ff"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 268.266359ms ago: executing program 5 (id=5970): io_setup(0x2, &(0x7f0000000000)=0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x8, 0x1) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x40d, r1, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1, r2}]) 157.822893ms ago: executing program 3 (id=5971): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x30000}, 0x3e8) 123.818232ms ago: executing program 0 (id=5865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x400000b6, 0x0, 0x63}]}) 0s ago: executing program 6 (id=5972): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6362, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffffffffff36, 0x0, 0x10, 0x209, 0x7, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)="bad330fbc9b554000400004fcdf6", 0xe, 0x2000c005, &(0x7f00000001c0)={0x11, 0x1, r2, 0x1, 0xd8, 0x6, @local}, 0x14) kernel console output (not intermixed with test programs): ngth: 249 > 9 [ 1196.823654][T18557] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1196.824677][T18696] team0 (unregistering): Port device team_slave_1 removed [ 1196.866394][T18557] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1196.949079][T18696] team0 (unregistering): Port device team_slave_0 removed [ 1197.470636][T18557] Bluetooth: hci0: command tx timeout [ 1197.934345][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4413'. [ 1198.080382][T18696] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.197782][T18696] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.399822][T18696] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.606427][T18696] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.732803][T19024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4415'. [ 1198.844953][T18996] chnl_net:caif_netlink_parms(): no params data found [ 1199.004034][T18557] Bluetooth: hci1: command tx timeout [ 1199.115590][T18979] chnl_net:caif_netlink_parms(): no params data found [ 1199.157481][T18696] bridge_slave_1: left allmulticast mode [ 1199.163491][T18696] bridge_slave_1: left promiscuous mode [ 1199.170695][T18696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.228671][T18696] bridge_slave_0: left allmulticast mode [ 1199.235412][T18696] bridge_slave_0: left promiscuous mode [ 1199.242345][T18696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.570526][T18557] Bluetooth: hci0: command tx timeout [ 1199.747595][T18696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.789456][T18696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.815408][T18696] bond0 (unregistering): Released all slaves [ 1200.743931][T18696] hsr_slave_0: left promiscuous mode [ 1200.773827][T18696] hsr_slave_1: left promiscuous mode [ 1200.782232][T18696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1200.789790][T18696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.852955][T18696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.860763][T18696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.925532][T18696] veth1_macvtap: left promiscuous mode [ 1200.931632][T18696] veth0_macvtap: left promiscuous mode [ 1200.937589][T18696] veth1_vlan: left promiscuous mode [ 1200.943520][T18696] veth0_vlan: left promiscuous mode [ 1201.081852][T18557] Bluetooth: hci1: command tx timeout [ 1201.325832][T18696] team0 (unregistering): Port device vlan2 removed [ 1201.642023][T18557] Bluetooth: hci0: command tx timeout [ 1201.909698][T18696] team0 (unregistering): Port device team_slave_1 removed [ 1202.078826][T18696] team0 (unregistering): Port device team_slave_0 removed [ 1202.946389][T18996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.957187][T18996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.965169][T18996] bridge_slave_0: entered allmulticast mode [ 1202.974501][T18996] bridge_slave_0: entered promiscuous mode [ 1203.144453][T18557] Bluetooth: hci1: command tx timeout [ 1203.175848][T18996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.184822][T18996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.192761][T18996] bridge_slave_1: entered allmulticast mode [ 1203.202139][T18996] bridge_slave_1: entered promiscuous mode [ 1203.327741][T18979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.335673][T18979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.343814][T18979] bridge_slave_0: entered allmulticast mode [ 1203.354270][T18979] bridge_slave_0: entered promiscuous mode [ 1203.427067][T18979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.434959][T18979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.443139][T18979] bridge_slave_1: entered allmulticast mode [ 1203.453300][T18979] bridge_slave_1: entered promiscuous mode [ 1203.485606][T18996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.512381][T18996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1203.704581][T18557] Bluetooth: hci0: command tx timeout [ 1203.804880][T18979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.825144][T18996] team0: Port device team_slave_0 added [ 1203.849830][T18979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1203.976265][T18996] team0: Port device team_slave_1 added [ 1203.993839][T18979] team0: Port device team_slave_0 added [ 1204.079368][T18979] team0: Port device team_slave_1 added [ 1204.482662][T18996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1204.489809][T18996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.523293][T18996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1204.657394][T18979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1204.665769][T18979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.692649][T18979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1204.706641][T18996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1204.714581][T18996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.740985][T18996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1205.023950][T18979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1205.032176][T18979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.059675][T18979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1205.237651][T18557] Bluetooth: hci1: command tx timeout [ 1205.393797][T18996] hsr_slave_0: entered promiscuous mode [ 1205.403518][T18996] hsr_slave_1: entered promiscuous mode [ 1205.417627][T18996] debugfs: 'hsr0' already exists in 'hsr' [ 1205.423675][T18996] Cannot create hsr debugfs directory [ 1205.781240][T18979] hsr_slave_0: entered promiscuous mode [ 1205.791230][T18979] hsr_slave_1: entered promiscuous mode [ 1205.800016][T18979] debugfs: 'hsr0' already exists in 'hsr' [ 1205.805921][T18979] Cannot create hsr debugfs directory [ 1206.844146][T18996] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1206.920218][T18996] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1206.975180][T18996] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1207.075474][T18996] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1207.346660][T18979] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1207.426261][T19181] syzkaller0: entered promiscuous mode [ 1207.432662][T19181] syzkaller0: entered allmulticast mode [ 1207.461378][T18979] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1207.526294][T18979] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1207.561600][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.568536][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1207.628884][T18979] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1208.516375][T18996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.662005][T18996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.783303][T18701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.790815][T18701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.913513][T18701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.921139][T18701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.982133][T18979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1209.223004][T18979] 8021q: adding VLAN 0 to HW filter on device team0 [ 1209.344054][T14609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.351736][T14609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1209.470106][T14609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.477571][T14609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1209.707947][T18979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1210.230221][T19218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4456'. [ 1210.794161][T19232] syzkaller0: entered promiscuous mode [ 1210.800066][T19232] syzkaller0: entered allmulticast mode [ 1211.012906][T18996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1211.461619][T18979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1211.664262][T19252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4462'. [ 1213.002929][T18996] veth0_vlan: entered promiscuous mode [ 1213.046262][T18996] veth1_vlan: entered promiscuous mode [ 1213.441149][T18996] veth0_macvtap: entered promiscuous mode [ 1213.580968][T18996] veth1_macvtap: entered promiscuous mode [ 1213.622557][T18979] veth0_vlan: entered promiscuous mode [ 1213.643082][T19283] syzkaller0: entered promiscuous mode [ 1213.648752][T19283] syzkaller0: entered allmulticast mode [ 1213.792190][T18979] veth1_vlan: entered promiscuous mode [ 1213.857685][T18996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1213.946175][T18996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1214.077812][T18688] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.152305][T18694] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.184150][T18979] veth0_macvtap: entered promiscuous mode [ 1214.217877][T18694] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.291356][T18694] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.352126][T18979] veth1_macvtap: entered promiscuous mode [ 1214.372230][T19293] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.4472'. [ 1214.528490][T18979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1214.606419][T18979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1214.724876][T18694] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.812081][T18692] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.883646][T18692] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.964416][T18692] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.297325][T19329] syzkaller0: entered promiscuous mode [ 1216.306819][T19329] syzkaller0: entered allmulticast mode [ 1217.195478][T19344] orangefs_devreq_write_iter: total:2: must be at least:8240: [ 1217.893893][T19361] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4486'. [ 1219.417806][T19394] orangefs_devreq_write_iter: total:2: must be at least:8240: [ 1220.172385][T19409] syzkaller0: entered promiscuous mode [ 1220.178075][T19409] syzkaller0: entered allmulticast mode [ 1220.486433][T14609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.494645][T14609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.712599][T14609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.720854][T14609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.131282][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.139322][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.450824][T10556] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1221.465417][T18694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.473787][T18694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.626919][T19434] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1221.685637][T10556] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1221.734142][ T24] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1221.757871][T10556] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1221.767884][T10556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.776393][T10556] usb 4-1: Product: syz [ 1221.781097][T10556] usb 4-1: Manufacturer: syz [ 1221.785958][T10556] usb 4-1: SerialNumber: syz [ 1221.811190][T10556] usb 4-1: config 0 descriptor?? [ 1221.996792][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1222.006622][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.015284][ T24] usb 7-1: Product: syz [ 1222.019728][ T24] usb 7-1: Manufacturer: syz [ 1222.024821][ T24] usb 7-1: SerialNumber: syz [ 1222.152306][ T24] usb 7-1: config 0 descriptor?? [ 1222.396895][ T24] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1222.887763][T19450] orangefs_devreq_write_iter: total:2: must be at least:8240: [ 1223.618333][T19460] netlink: 'syz.0.4508': attribute type 10 has an invalid length. [ 1223.670503][T19460] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1224.806235][T13767] usb 4-1: USB disconnect, device number 39 [ 1224.838907][ T24] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1224.925526][ T24] usb 7-1: USB disconnect, device number 2 [ 1226.369324][T19509] syzkaller0: entered promiscuous mode [ 1226.375481][T19509] syzkaller0: entered allmulticast mode [ 1226.816938][T19517] team0: Port device vlan2 added [ 1226.888458][T19517] netlink: 'syz.6.4521': attribute type 10 has an invalid length. [ 1226.939581][T19517] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1228.048175][ T11] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1228.065898][ T11] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1228.070650][ T5852] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1228.091032][ T5852] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1228.221713][ T11] usb 2-1: USB disconnect, device number 51 [ 1228.825756][ T5852] usb 5-1: USB disconnect, device number 61 [ 1229.306488][T19558] kvm: pic: non byte read [ 1229.371295][T19558] kvm: pic: level sensitive irq not supported [ 1229.371879][T19558] kvm: pic: non byte read [ 1229.428081][T19560] syzkaller0: entered promiscuous mode [ 1229.436929][T19560] syzkaller0: entered allmulticast mode [ 1229.488521][T19558] kvm: pic: level sensitive irq not supported [ 1229.488890][T19558] kvm: pic: non byte read [ 1229.622695][T19558] kvm: pic: level sensitive irq not supported [ 1229.622966][T19558] kvm: pic: non byte read [ 1229.699616][T19558] kvm: pic: level sensitive irq not supported [ 1229.701988][T19558] kvm: pic: non byte read [ 1229.792966][T19558] kvm: pic: level sensitive irq not supported [ 1229.793337][T19558] kvm: pic: non byte read [ 1229.856815][T19558] kvm: pic: level sensitive irq not supported [ 1229.857092][T19558] kvm: pic: non byte read [ 1229.914674][T19558] kvm: pic: level sensitive irq not supported [ 1229.915038][T19558] kvm: pic: non byte read [ 1229.959481][T19558] kvm: pic: level sensitive irq not supported [ 1229.960095][T19558] kvm: pic: non byte read [ 1231.470452][T19580] team0: Port device vlan2 added [ 1231.721792][T19585] loop0: detected capacity change from 0 to 16 [ 1231.829584][T19585] erofs (device loop0): mounted with root inode @ nid 36. [ 1231.889813][T19580] netlink: 'syz.5.4537': attribute type 10 has an invalid length. [ 1231.941973][T19580] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1232.252921][T19588] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4540'. [ 1233.373416][ T24] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1233.637526][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1233.647875][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.657380][ T24] usb 4-1: Product: syz [ 1233.662011][ T24] usb 4-1: Manufacturer: syz [ 1233.666800][ T24] usb 4-1: SerialNumber: syz [ 1233.830922][ T24] usb 4-1: config 0 descriptor?? [ 1234.097956][ T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1234.242877][T19616] syzkaller0: entered promiscuous mode [ 1234.248683][T19616] syzkaller0: entered allmulticast mode [ 1236.020791][ T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1236.102653][ T24] usb 4-1: USB disconnect, device number 40 [ 1236.425138][T19647] netlink: 'syz.6.4556': attribute type 10 has an invalid length. [ 1237.436776][T19668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4561'. [ 1238.627226][T19691] loop3: detected capacity change from 0 to 128 [ 1240.343149][T19714] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4575'. [ 1240.512108][ T5855] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1240.819597][ T5855] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1240.830373][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.838588][ T5855] usb 4-1: Product: syz [ 1240.843977][ T5855] usb 4-1: Manufacturer: syz [ 1240.848850][ T5855] usb 4-1: SerialNumber: syz [ 1240.983388][ T5855] usb 4-1: config 0 descriptor?? [ 1241.244740][ T5855] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1241.828822][T19732] syzkaller0: entered promiscuous mode [ 1241.835336][T19732] syzkaller0: entered allmulticast mode [ 1243.606368][ T5855] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1243.639566][T19762] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4591'. [ 1243.680661][ T5855] usb 4-1: USB disconnect, device number 41 [ 1243.691735][ T6297] udevd[6297]: setting mode of /dev/bus/usb/004/041 to 020664 failed: No such file or directory [ 1243.762129][ T6297] udevd[6297]: setting owner of /dev/bus/usb/004/041 to uid=0, gid=0 failed: No such file or directory [ 1244.123208][ T5855] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1244.369158][ T5855] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1244.380027][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.388231][ T5855] usb 6-1: Product: syz [ 1244.393156][ T5855] usb 6-1: Manufacturer: syz [ 1244.397952][ T5855] usb 6-1: SerialNumber: syz [ 1244.451445][ T5855] usb 6-1: config 0 descriptor?? [ 1244.702883][ T5855] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1244.737806][T19778] syzkaller0: entered promiscuous mode [ 1244.744258][T19778] syzkaller0: entered allmulticast mode [ 1244.820843][T19780] loop0: detected capacity change from 0 to 128 [ 1244.964307][T19780] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1245.281474][T19784] syz.0.4598: attempt to access beyond end of device [ 1245.281474][T19784] loop0: rw=3, sector=137, nr_sectors = 7 limit=128 [ 1245.295233][T19784] syz.0.4598: attempt to access beyond end of device [ 1245.295233][T19784] loop0: rw=2051, sector=144, nr_sectors = 1 limit=128 [ 1246.096950][T18701] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1246.147160][T18701] kworker/u8:26: attempt to access beyond end of device [ 1246.147160][T18701] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 1246.162091][T18701] kworker/u8:26: attempt to access beyond end of device [ 1246.162091][T18701] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 1246.176181][T18701] kworker/u8:26: attempt to access beyond end of device [ 1246.176181][T18701] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 1246.190446][T18701] kworker/u8:26: attempt to access beyond end of device [ 1246.190446][T18701] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 1246.204393][T18701] kworker/u8:26: attempt to access beyond end of device [ 1246.204393][T18701] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 1246.220852][T18701] kworker/u8:26: attempt to access beyond end of device [ 1246.220852][T18701] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 1246.235758][T18701] kworker/u8:26: attempt to access beyond end of device [ 1246.235758][T18701] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 1246.249820][T18701] kworker/u8:26: attempt to access beyond end of device [ 1246.249820][T18701] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 1246.292416][ T5855] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1246.398782][ T5855] usb 6-1: USB disconnect, device number 2 [ 1246.718274][T19803] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4605'. [ 1247.137317][T19809] netlink: 'syz.0.4604': attribute type 8 has an invalid length. [ 1247.146258][T19809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4604'. [ 1248.771991][ T5852] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1249.010493][ T5852] usb 7-1: Using ep0 maxpacket: 16 [ 1249.056571][ T5852] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1249.065695][ T5852] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.076298][ T5852] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1249.214481][ T5852] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1249.225582][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.234321][ T5852] usb 7-1: Product: syz [ 1249.238688][ T5852] usb 7-1: Manufacturer: syz [ 1249.243595][ T5852] usb 7-1: SerialNumber: syz [ 1249.280019][T19846] loop3: detected capacity change from 0 to 256 [ 1249.315713][ T5855] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1249.512212][T19851] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4621'. [ 1249.631920][ T5855] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1249.641729][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.650260][ T5855] usb 6-1: Product: syz [ 1249.654599][ T5855] usb 6-1: Manufacturer: syz [ 1249.659373][ T5855] usb 6-1: SerialNumber: syz [ 1249.785805][ T5855] usb 6-1: config 0 descriptor?? [ 1249.827979][ T5852] usb 7-1: 0:2 : does not exist [ 1250.079417][ T5855] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1250.567702][T19861] loop1: detected capacity change from 0 to 256 [ 1250.716768][T19861] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1251.491394][ T5852] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 1251.596176][ T5855] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1251.649117][ T5855] usb 6-1: USB disconnect, device number 3 [ 1251.691423][ T5852] usb 7-1: USB disconnect, device number 3 [ 1251.872369][ T6297] udevd[6297]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1253.143166][T19892] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4634'. [ 1253.909397][T19909] bridge_slave_0: default FDB implementation only supports local addresses [ 1254.650289][ T5855] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1254.751551][ T5852] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1254.863719][ T5855] usb 2-1: Using ep0 maxpacket: 16 [ 1254.902381][ T5855] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1254.911846][ T5855] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.924620][ T5855] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1255.009157][ T5852] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1255.018756][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.029071][ T5855] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1255.029213][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.039366][ T5852] usb 7-1: Product: syz [ 1255.039474][ T5852] usb 7-1: Manufacturer: syz [ 1255.047610][ T5855] usb 2-1: Product: syz [ 1255.052755][ T5852] usb 7-1: SerialNumber: syz [ 1255.056650][ T5855] usb 2-1: Manufacturer: syz [ 1255.070881][ T5855] usb 2-1: SerialNumber: syz [ 1255.178525][ T5852] usb 7-1: config 0 descriptor?? [ 1255.671090][ T5855] usb 2-1: 0:2 : does not exist [ 1255.806970][ T5852] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1256.439395][T19941] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4649'. [ 1257.234373][T19950] loop0: detected capacity change from 0 to 16 [ 1257.261824][ T5855] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 1257.276307][ T5852] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1257.312228][T19950] erofs (device loop0): mounted with root inode @ nid 36. [ 1257.323705][ T5852] usb 7-1: USB disconnect, device number 4 [ 1257.474430][ T5855] usb 2-1: USB disconnect, device number 52 [ 1257.500139][T13767] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1257.730516][T13767] usb 4-1: Using ep0 maxpacket: 32 [ 1257.753657][T13767] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1257.762618][T13767] usb 4-1: config 0 has no interface number 0 [ 1257.768923][T13767] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1257.885319][T13767] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1257.896002][T13767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.904641][T13767] usb 4-1: Product: syz [ 1257.909000][T13767] usb 4-1: Manufacturer: syz [ 1257.913921][T13767] usb 4-1: SerialNumber: syz [ 1257.925970][T13767] usb 4-1: config 0 descriptor?? [ 1257.934494][T19951] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1258.209393][T15528] udevd[15528]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1258.288431][T19951] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1258.622936][T13767] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1258.634523][T13767] asix 4-1:0.188: probe with driver asix failed with error -61 [ 1259.421590][T19977] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 1259.840415][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e65fe00: rx timeout, send abort [ 1259.849182][ T5852] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1260.030629][ T5852] usb 2-1: device descriptor read/64, error -71 [ 1260.285910][ T5852] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1260.340970][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e65ee00: rx timeout, send abort [ 1260.352343][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e65fe00: abort rx timeout. Force session deactivation [ 1260.396640][T10556] usb 4-1: USB disconnect, device number 42 [ 1260.450150][ T5852] usb 2-1: device descriptor read/64, error -71 [ 1260.567732][ T5852] usb usb2-port1: attempt power cycle [ 1260.849581][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e65ee00: abort rx timeout. Force session deactivation [ 1260.902758][T13767] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1260.946662][T10556] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1260.961103][ T5852] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1261.024475][ T5852] usb 2-1: device descriptor read/8, error -71 [ 1261.144744][T13767] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1261.151027][T10556] usb 6-1: Using ep0 maxpacket: 16 [ 1261.154419][T13767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.167494][T13767] usb 4-1: Product: syz [ 1261.172687][T13767] usb 4-1: Manufacturer: syz [ 1261.177460][T13767] usb 4-1: SerialNumber: syz [ 1261.198347][T13767] usb 4-1: config 0 descriptor?? [ 1261.212114][T10556] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1261.221472][T10556] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.232272][T10556] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1261.310252][ T5852] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1261.321472][T10556] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1261.331126][T10556] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.339335][T10556] usb 6-1: Product: syz [ 1261.343926][T10556] usb 6-1: Manufacturer: syz [ 1261.348707][T10556] usb 6-1: SerialNumber: syz [ 1261.372429][ T5852] usb 2-1: device descriptor read/8, error -71 [ 1261.430284][T13767] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1261.493948][ T5852] usb usb2-port1: unable to enumerate USB device [ 1261.846731][T20018] syzkaller1: entered promiscuous mode [ 1261.853830][T20018] syzkaller1: entered allmulticast mode [ 1261.973444][T10556] usb 6-1: 0:2 : does not exist [ 1262.974888][T13767] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1263.082855][T13767] usb 4-1: USB disconnect, device number 43 [ 1263.621776][T10556] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 1263.836931][T10556] usb 6-1: USB disconnect, device number 4 [ 1263.857589][T20044] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 1264.032657][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1264.395287][T20054] vcan0: tx drop: invalid sa for name 0x0040000000000000 [ 1266.022321][T20089] 9pnet_fd: Insufficient options for proto=fd [ 1267.111464][T20109] vcan0: tx drop: invalid sa for name 0x0040000000000000 [ 1268.099036][T20129] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4699'. [ 1268.871048][T20146] syzkaller0: entered promiscuous mode [ 1268.876863][T20146] syzkaller0: entered allmulticast mode [ 1269.001786][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1269.008523][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1271.019181][T20182] No control pipe specified [ 1273.475258][T20230] netlink: 'syz.1.4728': attribute type 10 has an invalid length. [ 1273.529191][T20230] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1274.563597][ T5855] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1274.757722][ T5855] usb 7-1: Using ep0 maxpacket: 8 [ 1274.816862][ T5855] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.828853][ T5855] usb 7-1: config 0 has no interfaces? [ 1274.952023][ T5855] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1274.961476][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.969784][ T5855] usb 7-1: Product: syz [ 1274.974504][ T5855] usb 7-1: Manufacturer: syz [ 1274.979295][ T5855] usb 7-1: SerialNumber: syz [ 1275.175803][ T5855] usb 7-1: config 0 descriptor?? [ 1275.849406][T20275] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4739'. [ 1277.653240][ T5855] usb 7-1: USB disconnect, device number 5 [ 1278.095557][T20320] loop6: detected capacity change from 0 to 128 [ 1278.176039][T20320] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1278.355317][T20320] bio_check_eod: 40 callbacks suppressed [ 1278.355393][T20320] syz.6.4750: attempt to access beyond end of device [ 1278.355393][T20320] loop6: rw=2051, sector=104, nr_sectors = 937 limit=128 [ 1278.783504][T20329] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4753'. [ 1280.383944][T13767] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1280.560548][T13767] usb 6-1: Using ep0 maxpacket: 8 [ 1280.594085][T13767] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.604791][T13767] usb 6-1: config 0 has no interfaces? [ 1280.681216][T13767] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1280.690822][T13767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.699104][T13767] usb 6-1: Product: syz [ 1280.703597][T13767] usb 6-1: Manufacturer: syz [ 1280.708535][T13767] usb 6-1: SerialNumber: syz [ 1280.746509][T13767] usb 6-1: config 0 descriptor?? [ 1281.194825][T20370] loop0: detected capacity change from 0 to 128 [ 1281.303631][T20370] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1281.412604][T20370] syz.0.4765: attempt to access beyond end of device [ 1281.412604][T20370] loop0: rw=2051, sector=104, nr_sectors = 937 limit=128 [ 1282.143328][T20388] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4770'. [ 1282.248013][T20393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4771'. [ 1283.385030][T13767] usb 6-1: USB disconnect, device number 5 [ 1283.806458][T20420] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.4779'. [ 1284.470925][T20435] loop6: detected capacity change from 0 to 256 [ 1284.615959][T20435] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1284.860132][ T30] audit: type=1800 audit(1765035208.705:148): pid=20435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4782" name="file1" dev="loop6" ino=1048646 res=0 errno=0 [ 1285.106092][T10556] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1285.348240][T10556] usb 1-1: Using ep0 maxpacket: 16 [ 1285.434053][T20455] netlink: 'syz.3.4785': attribute type 8 has an invalid length. [ 1285.445026][T20455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4785'. [ 1285.502580][T10556] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.513421][T10556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1285.524745][T10556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1285.534818][T10556] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1285.546588][T10556] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1285.691396][T18696] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1285.710446][T20455] netlink: 'syz.3.4785': attribute type 8 has an invalid length. [ 1285.718564][T20455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4785'. [ 1285.764686][T18696] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1285.807539][T18696] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1285.840287][T10556] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1285.852065][T10556] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1285.862552][T10556] usb 1-1: Manufacturer: syz [ 1285.891403][T18696] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1285.973082][T10556] usb 1-1: config 0 descriptor?? [ 1286.510223][T10556] rc_core: IR keymap rc-hauppauge not found [ 1286.516319][T10556] Registered IR keymap rc-empty [ 1286.522239][T10556] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1286.531287][ T5852] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1286.571201][T10556] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1286.623335][T10556] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1286.639190][T10556] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input81 [ 1286.690735][ T5852] usb 2-1: Using ep0 maxpacket: 8 [ 1286.697440][T10556] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1286.719202][ T5852] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.730573][ T5852] usb 2-1: config 0 has no interfaces? [ 1286.743893][T10556] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1286.781846][T10556] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1286.799515][ T5852] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1286.810497][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.819232][ T5852] usb 2-1: Product: syz [ 1286.824424][ T5852] usb 2-1: Manufacturer: syz [ 1286.829742][ T5852] usb 2-1: SerialNumber: syz [ 1286.841884][T10556] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1286.881127][T10556] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1286.908396][ T5852] usb 2-1: config 0 descriptor?? [ 1286.915666][T10556] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1286.970883][T10556] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1287.014765][T10556] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1287.044790][T10556] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1287.110696][T10556] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1287.144599][T10556] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1287.154569][T10556] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1287.212754][T10556] usb 1-1: USB disconnect, device number 49 [ 1287.457733][T20476] syzkaller0: entered promiscuous mode [ 1287.463596][T20476] syzkaller0: entered allmulticast mode [ 1287.490382][T13767] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1287.660386][T13767] usb 6-1: Using ep0 maxpacket: 32 [ 1287.687451][T13767] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.699000][T13767] usb 6-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1287.719603][T13767] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.818808][T13767] usb 6-1: config 0 descriptor?? [ 1287.862805][T13767] dvb-usb: found a 'TeVii S662' in warm state. [ 1287.869246][T13767] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1287.875929][T13767] dvb-usb: bulk message failed: -22 (2/0) [ 1287.893885][T13767] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1287.994960][T13767] dvbdev: DVB: registering new adapter (TeVii S662) [ 1288.003090][T13767] usb 6-1: media controller created [ 1288.008558][T13767] dvb-usb: bulk message failed: -22 (6/0) [ 1288.014953][T13767] dw2102: i2c transfer failed. [ 1288.020057][T13767] dvb-usb: bulk message failed: -22 (6/0) [ 1288.026071][T13767] dw2102: i2c transfer failed. [ 1288.031142][T13767] dvb-usb: bulk message failed: -22 (6/0) [ 1288.037021][T13767] dw2102: i2c transfer failed. [ 1288.042162][T13767] dvb-usb: bulk message failed: -22 (6/0) [ 1288.048092][T13767] dw2102: i2c transfer failed. [ 1288.053717][T13767] dvb-usb: bulk message failed: -22 (6/0) [ 1288.059601][T13767] dw2102: i2c transfer failed. [ 1288.064658][T13767] dvb-usb: bulk message failed: -22 (6/0) [ 1288.070635][T13767] dw2102: i2c transfer failed. [ 1288.075532][T13767] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1288.259076][T13767] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1288.533538][T13767] dvb-usb: bulk message failed: -22 (3/0) [ 1288.539618][T13767] dw2102: command 0x0e transfer failed. [ 1288.545688][T13767] dvb-usb: bulk message failed: -22 (3/0) [ 1288.551930][T13767] dw2102: command 0x0e transfer failed. [ 1288.860439][T13767] dvb-usb: bulk message failed: -22 (3/0) [ 1288.866628][T13767] dw2102: command 0x0e transfer failed. [ 1288.872834][T13767] dvb-usb: bulk message failed: -22 (3/0) [ 1288.878729][T13767] dw2102: command 0x0e transfer failed. [ 1288.884867][T13767] dvb-usb: bulk message failed: -22 (1/0) [ 1288.897885][T13767] dw2102: command 0x51 transfer failed. [ 1288.906244][T13767] dvb-usb: bulk message failed: -22 (5/0) [ 1288.912357][T13767] dw2102: i2c probe for address 0x68 failed. [ 1288.919376][T13767] dvb-usb: bulk message failed: -22 (5/0) [ 1288.925843][T13767] dw2102: i2c probe for address 0x69 failed. [ 1288.932065][T13767] dvb-usb: bulk message failed: -22 (5/0) [ 1288.937984][T13767] dw2102: i2c probe for address 0x6a failed. [ 1288.944497][T13767] dw2102: probing for demodulator failed. Is the external power switched on? [ 1288.955639][T13767] dvb-usb: no frontend was attached by 'TeVii S662' [ 1289.411647][T13767] rc_core: IR keymap rc-tt-1500 not found [ 1289.417583][T13767] Registered IR keymap rc-empty [ 1289.425682][T13767] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1289.537971][T13767] input: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input82 [ 1289.578066][T20508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4799'. [ 1289.587450][T20508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4799'. [ 1289.622166][T13767] dvb-usb: schedule remote query interval to 250 msecs. [ 1289.629306][T13767] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1289.636841][T13767] dvb-usb: TeVii S662 successfully initialized and connected. [ 1289.679489][T20508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4799'. [ 1289.689072][T20508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4799'. [ 1289.762271][ T5855] usb 2-1: USB disconnect, device number 57 [ 1289.808315][T13767] usb 6-1: USB disconnect, device number 6 [ 1290.171715][T13767] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1290.840829][ T5852] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1290.841916][T20522] syzkaller0: entered promiscuous mode [ 1290.854398][T20522] syzkaller0: entered allmulticast mode [ 1290.955684][T20529] loop0: detected capacity change from 0 to 256 [ 1290.972806][T13767] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1291.022071][ T5852] usb 2-1: Using ep0 maxpacket: 32 [ 1291.072876][ T5852] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1291.081538][ T5852] usb 2-1: config 0 has no interface number 0 [ 1291.087816][ T5852] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1291.156526][ T5852] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1291.167034][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.172254][T13767] usb 6-1: Using ep0 maxpacket: 16 [ 1291.177787][ T5852] usb 2-1: Product: syz [ 1291.185511][ T5852] usb 2-1: Manufacturer: syz [ 1291.190793][ T5852] usb 2-1: SerialNumber: syz [ 1291.260835][T13767] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.271898][T13767] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1291.276695][ T5852] usb 2-1: config 0 descriptor?? [ 1291.284329][T13767] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1291.299306][T13767] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1291.309338][T13767] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1291.335935][T20524] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1291.460777][T13767] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1291.470416][T13767] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1291.479221][T13767] usb 6-1: Manufacturer: syz [ 1291.551379][T13767] usb 6-1: config 0 descriptor?? [ 1291.600398][T20524] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1291.823869][ T5852] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1291.835377][ T5852] asix 2-1:0.188: probe with driver asix failed with error -61 [ 1292.004086][T13767] rc_core: IR keymap rc-hauppauge not found [ 1292.010435][T13767] Registered IR keymap rc-empty [ 1292.015835][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1292.120385][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1292.142965][T13767] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1292.159087][T13767] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input83 [ 1292.483978][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1292.586875][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1292.610679][ T5855] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1292.631592][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1292.669169][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1292.699425][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1292.730650][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1292.751400][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1292.772943][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1292.800252][ T5855] usb 4-1: Using ep0 maxpacket: 8 [ 1292.812131][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1292.827703][ T5855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.842465][ T5855] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1292.880513][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1292.907022][T13767] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1292.917970][T13767] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1292.947394][ T5855] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1292.956996][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.965398][ T5855] usb 4-1: Product: syz [ 1292.969744][ T5855] usb 4-1: Manufacturer: syz [ 1292.974823][ T5855] usb 4-1: SerialNumber: syz [ 1293.018494][T13767] usb 6-1: USB disconnect, device number 7 [ 1293.044307][ T5855] usb 4-1: config 0 descriptor?? [ 1293.086710][T20547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4814'. [ 1293.096440][T20547] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4814'. [ 1293.208896][ T61] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.237405][ T61] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.269006][T20547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4814'. [ 1293.270032][ T61] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.278903][T20547] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4814'. [ 1293.304128][ T61] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.815046][ T5855] usb 2-1: USB disconnect, device number 58 [ 1294.219622][T20565] loop6: detected capacity change from 0 to 256 [ 1294.560987][T20567] syzkaller0: entered promiscuous mode [ 1294.566661][T20567] syzkaller0: entered allmulticast mode [ 1295.736028][T10556] usb 4-1: USB disconnect, device number 44 [ 1296.116664][T20592] loop3: detected capacity change from 0 to 256 [ 1296.177678][T20592] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1296.298547][ T30] audit: type=1800 audit(1765035220.145:149): pid=20592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4827" name="file1" dev="loop3" ino=1048647 res=0 errno=0 [ 1296.500577][ T5855] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1296.703060][ T5855] usb 2-1: Using ep0 maxpacket: 32 [ 1296.737763][ T5855] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1296.746778][ T5855] usb 2-1: config 0 has no interface number 0 [ 1296.753353][ T5855] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1296.819364][ T5855] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1296.828795][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.837285][ T5855] usb 2-1: Product: syz [ 1296.841714][ T5855] usb 2-1: Manufacturer: syz [ 1296.846598][ T5855] usb 2-1: SerialNumber: syz [ 1296.946996][T20605] loop5: detected capacity change from 0 to 256 [ 1296.973151][ T5855] usb 2-1: config 0 descriptor?? [ 1296.982558][T20596] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1297.273328][T20596] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1297.527734][ T5855] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1297.539340][ T5855] asix 2-1:0.188: probe with driver asix failed with error -61 [ 1297.877299][T20612] syzkaller0: entered promiscuous mode [ 1297.883381][T20612] syzkaller0: entered allmulticast mode [ 1299.427500][ T5852] usb 2-1: USB disconnect, device number 59 [ 1299.530224][T10556] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1299.742328][T10556] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1299.753145][T10556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.810327][T10556] usb 1-1: config 0 descriptor?? [ 1300.671827][T10556] pegasus 1-1:0.0: probe with driver pegasus failed with error -121 [ 1301.335031][T20668] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.4854'. [ 1301.620395][T13767] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1301.780711][T13767] usb 4-1: Using ep0 maxpacket: 32 [ 1301.810541][T13767] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1301.819360][T13767] usb 4-1: config 0 has no interface number 0 [ 1301.826585][T13767] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1301.886342][T13767] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1301.895789][T13767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.904254][T13767] usb 4-1: Product: syz [ 1301.908788][T13767] usb 4-1: Manufacturer: syz [ 1301.914371][T13767] usb 4-1: SerialNumber: syz [ 1301.950631][T13767] usb 4-1: config 0 descriptor?? [ 1301.987624][T20672] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1302.252647][T20672] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1302.386177][ T5855] usb 1-1: USB disconnect, device number 50 [ 1302.480649][T13767] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1302.492082][T13767] asix 4-1:0.188: probe with driver asix failed with error -61 [ 1304.456463][T10556] usb 4-1: USB disconnect, device number 45 [ 1304.981910][T10556] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1305.160401][T10556] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1305.170029][T10556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.224263][T10556] usb 4-1: config 0 descriptor?? [ 1306.131867][T10556] pegasus 4-1:0.0: probe with driver pegasus failed with error -121 [ 1306.959165][T20763] syzkaller0: entered promiscuous mode [ 1306.965266][T20763] syzkaller0: entered allmulticast mode [ 1307.603947][T20769] syzkaller0: entered promiscuous mode [ 1307.609622][T20769] syzkaller0: entered allmulticast mode [ 1307.791113][T10556] usb 4-1: USB disconnect, device number 46 [ 1308.001320][T13767] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1308.171039][T13767] usb 6-1: Using ep0 maxpacket: 16 [ 1308.183578][T13767] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.194391][T13767] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1308.205758][T13767] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1308.215789][T13767] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1308.225888][T13767] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1308.240362][T10556] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1308.316843][T13767] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1308.326420][T13767] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1308.334831][T13767] usb 6-1: Manufacturer: syz [ 1308.347735][T13767] usb 6-1: config 0 descriptor?? [ 1308.406258][T10556] usb 4-1: Using ep0 maxpacket: 32 [ 1308.427900][T10556] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1308.436677][T10556] usb 4-1: config 0 has no interface number 0 [ 1308.443165][T10556] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1308.460765][T20785] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4890'. [ 1308.547468][T10556] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1308.557199][T10556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.566277][T10556] usb 4-1: Product: syz [ 1308.570832][T10556] usb 4-1: Manufacturer: syz [ 1308.575607][T10556] usb 4-1: SerialNumber: syz [ 1308.662299][T10556] usb 4-1: config 0 descriptor?? [ 1308.672359][T20781] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1308.913535][T20781] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1309.090389][T13767] rc_core: IR keymap rc-hauppauge not found [ 1309.097940][T13767] Registered IR keymap rc-empty [ 1309.104003][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1309.210587][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1309.248956][T13767] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1309.264594][T13767] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input84 [ 1309.415688][T10556] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1309.425737][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1309.427135][T10556] asix 4-1:0.188: probe with driver asix failed with error -32 [ 1309.516554][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1309.579086][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1309.636389][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1309.676600][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1309.707904][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1309.748792][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1309.774154][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1309.805941][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1309.830524][T13767] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1309.867597][T13767] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1309.877060][T13767] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1309.928901][T13767] usb 6-1: USB disconnect, device number 8 [ 1311.052843][T20814] syzkaller0: entered promiscuous mode [ 1311.058522][T20814] syzkaller0: entered allmulticast mode [ 1311.075970][ T5852] usb 4-1: USB disconnect, device number 47 [ 1311.661661][T13767] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1311.857529][T13767] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1311.869735][T13767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.904789][T13767] usb 4-1: config 0 descriptor?? [ 1312.396915][T20823] syzkaller0: entered promiscuous mode [ 1312.402729][T20823] syzkaller0: entered allmulticast mode [ 1312.846507][T13767] pegasus 4-1:0.0: probe with driver pegasus failed with error -121 [ 1313.124032][T20838] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4906'. [ 1313.310562][T13767] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1313.516562][T13767] usb 7-1: Using ep0 maxpacket: 32 [ 1313.574570][T13767] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1313.583153][T13767] usb 7-1: config 0 has no interface number 0 [ 1313.589652][T13767] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1313.733771][T13767] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1313.743229][T13767] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.751712][T13767] usb 7-1: Product: syz [ 1313.756054][T13767] usb 7-1: Manufacturer: syz [ 1313.761061][T13767] usb 7-1: SerialNumber: syz [ 1313.841570][T13767] usb 7-1: config 0 descriptor?? [ 1313.852839][T20839] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1313.980583][ T5855] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1314.156917][T20839] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1314.170705][ T5855] usb 1-1: Using ep0 maxpacket: 16 [ 1314.194804][ T5855] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1314.204237][ T5855] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.215609][ T5855] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1314.255710][ T5855] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1314.265382][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.273837][ T5855] usb 1-1: Product: syz [ 1314.278311][ T5855] usb 1-1: Manufacturer: syz [ 1314.283311][ T5855] usb 1-1: SerialNumber: syz [ 1314.447496][T13767] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1314.459336][T13767] asix 7-1:0.188: probe with driver asix failed with error -61 [ 1314.725354][T13767] usb 4-1: USB disconnect, device number 48 [ 1314.813505][ T5855] usb 1-1: 0:2 : does not exist [ 1316.180060][T13767] usb 7-1: USB disconnect, device number 6 [ 1316.193554][ T5855] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 1316.409456][ T5855] usb 1-1: USB disconnect, device number 51 [ 1316.647810][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1317.201135][T20897] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4922'. [ 1317.585159][T20901] syzkaller0: entered promiscuous mode [ 1317.594391][T20901] syzkaller0: entered allmulticast mode [ 1318.770614][ T5852] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1318.980583][ T5852] usb 2-1: Using ep0 maxpacket: 32 [ 1319.007620][ T5852] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1319.016357][ T5852] usb 2-1: config 0 has no interface number 0 [ 1319.022847][ T5852] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1319.177404][ T5852] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1319.187416][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.196111][ T5852] usb 2-1: Product: syz [ 1319.200572][ T5852] usb 2-1: Manufacturer: syz [ 1319.205362][ T5852] usb 2-1: SerialNumber: syz [ 1319.301176][ T5852] usb 2-1: config 0 descriptor?? [ 1319.309398][T20920] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1319.653436][T20934] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4936'. [ 1319.696508][T20920] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1319.950780][ T5852] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1319.962284][ T5852] asix 2-1:0.188: probe with driver asix failed with error -61 [ 1320.351563][T20945] netlink: 'syz.3.4940': attribute type 1 has an invalid length. [ 1321.321210][T20966] fuse: Bad value for 'fd' [ 1321.946319][ T5852] usb 2-1: USB disconnect, device number 60 [ 1322.125521][T10556] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1322.263613][T20944] Bluetooth: hci1: command 0x0406 tx timeout [ 1322.265025][T18557] Bluetooth: hci0: command 0x0406 tx timeout [ 1322.311084][T10556] usb 1-1: Using ep0 maxpacket: 32 [ 1322.336557][T10556] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1322.345432][T10556] usb 1-1: config 0 has no interface number 0 [ 1322.351962][T10556] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1322.372203][T10556] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1322.381942][T10556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.390645][T10556] usb 1-1: Product: syz [ 1322.394997][T10556] usb 1-1: Manufacturer: syz [ 1322.399780][T10556] usb 1-1: SerialNumber: syz [ 1322.513976][T10556] usb 1-1: config 0 descriptor?? [ 1322.524400][T20975] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1322.795161][T20975] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1323.229479][T10556] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1323.245726][T10556] asix 1-1:0.188: probe with driver asix failed with error -61 [ 1323.880136][T21003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4963'. [ 1323.894418][T10556] IPVS: starting estimator thread 0... [ 1323.990882][T21005] IPVS: using max 240 ests per chain, 12000 per kthread [ 1324.061758][T10556] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1324.250496][T10556] usb 7-1: Using ep0 maxpacket: 32 [ 1324.357283][T10556] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1324.366288][T10556] usb 7-1: config 0 has no interface number 0 [ 1324.372878][T10556] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1324.476811][T10556] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1324.486651][T10556] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.495113][T10556] usb 7-1: Product: syz [ 1324.499472][T10556] usb 7-1: Manufacturer: syz [ 1324.506204][T10556] usb 7-1: SerialNumber: syz [ 1324.538506][T10556] usb 7-1: config 0 descriptor?? [ 1324.558986][T21004] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1324.819135][T21004] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1325.104001][T20012] usb 1-1: USB disconnect, device number 52 [ 1325.327641][T21026] syzkaller0: entered promiscuous mode [ 1325.334293][T21026] syzkaller0: entered allmulticast mode [ 1325.334356][T10556] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1325.351369][T10556] asix 7-1:0.188: probe with driver asix failed with error -32 [ 1325.789256][T21032] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4973'. [ 1327.145592][ T5855] usb 7-1: USB disconnect, device number 7 [ 1327.430355][T10556] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1327.664367][T10556] usb 2-1: Using ep0 maxpacket: 32 [ 1327.712100][T10556] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1327.720790][T10556] usb 2-1: config 0 has no interface number 0 [ 1327.727255][T10556] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1327.838876][T10556] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1327.848360][T10556] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.856828][T10556] usb 2-1: Product: syz [ 1327.861362][T10556] usb 2-1: Manufacturer: syz [ 1327.866212][T10556] usb 2-1: SerialNumber: syz [ 1327.911043][T10556] usb 2-1: config 0 descriptor?? [ 1327.972347][T21061] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1328.091679][T21070] 9pnet_fd: Insufficient options for proto=fd [ 1328.224673][T21061] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1328.243772][T21076] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4987'. [ 1328.714493][T10556] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1328.725706][T10556] asix 2-1:0.188: probe with driver asix failed with error -61 [ 1329.330687][ T5855] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1329.530168][ T5855] usb 7-1: Using ep0 maxpacket: 32 [ 1329.573373][ T5855] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1329.582748][ T5855] usb 7-1: config 0 has no interface number 0 [ 1329.589144][ T5855] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1329.650070][ T5855] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1329.659466][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.667994][ T5855] usb 7-1: Product: syz [ 1329.675141][ T5855] usb 7-1: Manufacturer: syz [ 1329.680593][ T5855] usb 7-1: SerialNumber: syz [ 1329.719546][ T5855] usb 7-1: config 0 descriptor?? [ 1329.728525][T21088] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1330.101864][T21088] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1330.461396][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1330.468160][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1330.551037][T10556] usb 2-1: USB disconnect, device number 61 [ 1330.650752][ T5855] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1330.662478][ T5855] asix 7-1:0.188: probe with driver asix failed with error -32 [ 1331.260306][T21120] 9pnet_fd: Insufficient options for proto=fd [ 1331.360613][T10556] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1331.551244][T10556] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1331.560872][T10556] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.602776][T10556] usb 6-1: config 0 descriptor?? [ 1332.295000][ T5852] usb 7-1: USB disconnect, device number 8 [ 1332.532946][ T5855] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1332.841367][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 1332.867153][ T5855] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1332.875703][ T5855] usb 4-1: config 0 has no interface number 0 [ 1332.882268][ T5855] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1332.920562][T10556] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 1332.978287][ T5855] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1332.988074][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.996688][ T5855] usb 4-1: Product: syz [ 1333.001120][ T5855] usb 4-1: Manufacturer: syz [ 1333.005899][ T5855] usb 4-1: SerialNumber: syz [ 1333.140743][ T5855] usb 4-1: config 0 descriptor?? [ 1333.154491][T21150] overlayfs: missing 'lowerdir' [ 1333.164354][T21140] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1333.526112][T21140] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1333.993938][ T5855] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1334.005973][ T5855] asix 4-1:0.188: probe with driver asix failed with error -61 [ 1334.277641][T10556] usb 6-1: USB disconnect, device number 9 [ 1334.578563][T21175] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.5020'. [ 1334.604234][T21172] 9pnet_fd: Insufficient options for proto=fd [ 1334.971718][T10556] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1335.160749][T10556] usb 1-1: Using ep0 maxpacket: 32 [ 1335.184692][T10556] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1335.193789][T10556] usb 1-1: config 0 has no interface number 0 [ 1335.200426][T10556] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1335.299527][T21188] overlayfs: missing 'lowerdir' [ 1335.333439][T10556] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1335.343262][T10556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.351690][T10556] usb 1-1: Product: syz [ 1335.356039][T10556] usb 1-1: Manufacturer: syz [ 1335.360987][T10556] usb 1-1: SerialNumber: syz [ 1335.443916][ T5852] usb 4-1: USB disconnect, device number 49 [ 1335.534224][T10556] usb 1-1: config 0 descriptor?? [ 1335.559281][T21179] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1335.866483][T21179] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1336.355164][T10556] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1336.366747][T10556] asix 1-1:0.188: probe with driver asix failed with error -32 [ 1337.066757][T10556] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1337.262581][T10556] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1337.272358][T10556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.299729][T10556] usb 4-1: config 0 descriptor?? [ 1337.481430][T21225] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.5033'. [ 1337.536960][T21227] gretap1: entered promiscuous mode [ 1337.777922][T21228] 9pnet_fd: Insufficient options for proto=fd [ 1337.901805][ T5852] usb 1-1: USB disconnect, device number 53 [ 1338.568700][T10556] pegasus 4-1:0.0: probe with driver pegasus failed with error -32 [ 1338.622698][T21244] overlayfs: missing 'lowerdir' [ 1338.853368][T21247] syzkaller0: entered promiscuous mode [ 1338.859202][T21247] syzkaller0: entered allmulticast mode [ 1339.567547][T21265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5047'. [ 1339.599196][T21267] fuse: Bad value for 'fd' [ 1340.144467][T10556] usb 4-1: USB disconnect, device number 50 [ 1340.546158][T21280] overlayfs: missing 'lowerdir' [ 1340.867063][T21289] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5055'. [ 1342.480272][T10556] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1342.697096][T10556] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1342.706717][T10556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.772547][T10556] usb 4-1: config 0 descriptor?? [ 1342.830035][T21321] overlayfs: missing 'lowerdir' [ 1343.477936][T21333] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5071'. [ 1344.045361][T10556] pegasus 4-1:0.0: probe with driver pegasus failed with error -32 [ 1344.694675][T21355] fuse: Bad value for 'fd' [ 1345.280567][ T5855] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1345.488353][T10556] usb 4-1: USB disconnect, device number 51 [ 1345.501627][ T5855] usb 6-1: Using ep0 maxpacket: 32 [ 1345.562183][ T5855] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1345.571308][ T5855] usb 6-1: config 0 has no interface number 0 [ 1345.583020][ T5855] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1345.669402][ T5855] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1345.679171][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.688007][ T5855] usb 6-1: Product: syz [ 1345.692553][ T5855] usb 6-1: Manufacturer: syz [ 1345.697421][ T5855] usb 6-1: SerialNumber: syz [ 1345.857135][ T5855] usb 6-1: config 0 descriptor?? [ 1345.872129][T21361] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1346.157253][T21361] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1346.631792][ T5855] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1346.643952][ T5855] asix 6-1:0.188: probe with driver asix failed with error -32 [ 1346.655003][T21380] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5087'. [ 1348.219478][T10556] usb 6-1: USB disconnect, device number 10 [ 1348.959377][T21422] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5103'. [ 1350.758440][T21452] loop0: detected capacity change from 0 to 128 [ 1350.800773][T21452] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1351.369498][T21460] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5120'. [ 1351.867039][ T58] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1351.911747][ T58] kworker/u8:3: attempt to access beyond end of device [ 1351.911747][ T58] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 1351.926108][ T58] kworker/u8:3: attempt to access beyond end of device [ 1351.926108][ T58] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 1351.940388][ T58] kworker/u8:3: attempt to access beyond end of device [ 1351.940388][ T58] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 1351.955092][ T58] kworker/u8:3: attempt to access beyond end of device [ 1351.955092][ T58] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 1351.979421][ T58] kworker/u8:3: attempt to access beyond end of device [ 1351.979421][ T58] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 1351.993994][ T58] kworker/u8:3: attempt to access beyond end of device [ 1351.993994][ T58] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 1352.008142][ T58] kworker/u8:3: attempt to access beyond end of device [ 1352.008142][ T58] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 1352.022234][ T58] kworker/u8:3: attempt to access beyond end of device [ 1352.022234][ T58] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 1352.036072][ T58] kworker/u8:3: attempt to access beyond end of device [ 1352.036072][ T58] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 1352.050012][ T58] kworker/u8:3: attempt to access beyond end of device [ 1352.050012][ T58] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 1352.776715][T21477] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1352.784661][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1353.392264][T21485] syzkaller0: entered promiscuous mode [ 1353.398050][T21485] syzkaller0: entered allmulticast mode [ 1354.880857][T21513] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1355.206896][T21521] 9pnet_fd: Insufficient options for proto=fd [ 1355.557835][T21524] syzkaller0: entered promiscuous mode [ 1355.564026][T21524] syzkaller0: entered allmulticast mode [ 1357.285744][T21556] 9pnet_fd: Insufficient options for proto=fd [ 1357.558882][T21562] syzkaller0: entered promiscuous mode [ 1357.564859][T21562] syzkaller0: entered allmulticast mode [ 1358.552209][T10556] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1358.750439][T10556] usb 4-1: Using ep0 maxpacket: 16 [ 1358.784717][T10556] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.795589][T10556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1358.806891][T10556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1358.817452][T10556] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1358.827752][T10556] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1358.983702][T10556] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1358.993695][T10556] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1359.002202][T10556] usb 4-1: Manufacturer: syz [ 1359.011923][T21586] tipc: Enabled bearer , priority 0 [ 1359.061615][T21589] syzkaller0: entered promiscuous mode [ 1359.068282][T21589] syzkaller0: entered allmulticast mode [ 1359.099020][T10556] usb 4-1: config 0 descriptor?? [ 1359.146747][T21586] tipc: Resetting bearer [ 1359.241276][T21585] delete_channel: no stack [ 1359.251922][T21585] tipc: Resetting bearer [ 1359.289698][T21585] tipc: Disabling bearer [ 1359.681860][T10556] rc_core: IR keymap rc-hauppauge not found [ 1359.687937][T10556] Registered IR keymap rc-empty [ 1359.693712][T10556] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1359.780590][T10556] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1359.822352][T10556] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1359.838599][T10556] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input85 [ 1359.942891][T10556] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1359.951492][T21599] 9pnet_fd: Insufficient options for proto=fd [ 1360.020797][T10556] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.068641][T10556] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.110379][T10556] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.133812][T10556] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.151964][T21605] syzkaller0: entered promiscuous mode [ 1360.157728][T21605] syzkaller0: entered allmulticast mode [ 1360.168337][T10556] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.231891][T10556] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.261365][T10556] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.305625][T10556] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.338417][T10556] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.384648][T10556] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1360.395457][T10556] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1360.513280][T10556] usb 4-1: USB disconnect, device number 52 [ 1361.203798][T21621] gretap1: entered promiscuous mode [ 1361.639343][T21635] tipc: Started in network mode [ 1361.644839][T21635] tipc: Node identity 8ec2aeb876b1, cluster identity 4711 [ 1361.653331][T21635] tipc: Enabled bearer , priority 0 [ 1361.665393][T21636] tipc: Enabling of bearer rejected, failed to enable media [ 1361.787141][T21639] syzkaller0: entered promiscuous mode [ 1361.793160][T21639] syzkaller0: entered allmulticast mode [ 1361.923244][T21635] tipc: Resetting bearer [ 1362.015405][T21632] delete_channel: no stack [ 1362.055632][T21632] tipc: Resetting bearer [ 1362.098217][T21632] tipc: Disabling bearer [ 1362.650719][T21653] netlink: 'syz.1.5195': attribute type 62 has an invalid length. [ 1362.680894][T21649] syzkaller0: entered promiscuous mode [ 1362.686670][T21649] syzkaller0: entered allmulticast mode [ 1362.695033][T21651] 9pnet_fd: Insufficient options for proto=fd [ 1363.132645][T21663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5198'. [ 1363.195456][T21663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5198'. [ 1363.564666][T21672] fuse: Bad value for 'fd' [ 1364.211109][T21686] tipc: Enabled bearer , priority 0 [ 1364.286207][T21693] syzkaller0: entered promiscuous mode [ 1364.292261][T21693] syzkaller0: entered allmulticast mode [ 1364.480145][T21686] tipc: Resetting bearer [ 1364.636643][T21697] tipc: Enabling of bearer rejected, failed to enable media [ 1364.651805][T21683] delete_channel: no stack [ 1364.709289][T21683] tipc: Resetting bearer [ 1364.782846][T21683] tipc: Disabling bearer [ 1365.744212][T21709] 9pnet_fd: Insufficient options for proto=fd [ 1366.353581][T21725] fuse: Bad value for 'fd' [ 1367.345603][T21745] tipc: Enabling of bearer rejected, failed to enable media [ 1368.551880][T21773] fuse: Bad value for 'fd' [ 1368.562323][T21769] 9pnet_fd: Insufficient options for proto=fd [ 1369.400339][ T5855] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1369.600224][ T5855] usb 7-1: Using ep0 maxpacket: 16 [ 1369.620335][ T5855] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.630824][ T5855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1369.642155][ T5855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1369.652359][ T5855] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1369.667648][ T5855] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1369.785516][T21791] Illegal XDP return value 2397828596 on prog (id 312) dev N/A, expect packet loss! [ 1369.818525][ T5855] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1369.828140][ T5855] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1369.836709][ T5855] usb 7-1: Manufacturer: syz [ 1369.921521][ T5855] usb 7-1: config 0 descriptor?? [ 1369.974640][T21794] syzkaller0: entered promiscuous mode [ 1369.980638][T21794] syzkaller0: entered allmulticast mode [ 1370.471765][ T5855] rc_core: IR keymap rc-hauppauge not found [ 1370.477963][ T5855] Registered IR keymap rc-empty [ 1370.487999][ T5855] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1370.562258][ T5855] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1370.593323][ T5855] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1370.608542][ T5855] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input86 [ 1370.712189][T21806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5242'. [ 1370.713137][ T5855] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1370.751684][ T5855] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1370.850810][ T5855] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1370.931092][ T5855] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1370.972866][ T5855] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1371.000820][ T5855] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1371.059242][ T5855] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1371.121790][ T5855] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1371.150898][ T5855] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1371.180892][ T5855] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1371.214721][ T5855] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1371.225369][ T5855] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1371.340467][ T5855] usb 7-1: USB disconnect, device number 9 [ 1372.465125][T21830] syzkaller0: entered promiscuous mode [ 1372.471253][T21830] syzkaller0: entered allmulticast mode [ 1373.022155][T21847] syzkaller0: entered promiscuous mode [ 1373.028092][T21847] syzkaller0: entered allmulticast mode [ 1373.689442][T21851] gretap1: entered promiscuous mode [ 1374.738053][T21872] syzkaller0: entered promiscuous mode [ 1374.744034][T21872] syzkaller0: entered allmulticast mode [ 1374.959976][T21874] tipc: Started in network mode [ 1374.965106][T21874] tipc: Node identity 32bbf7886e01, cluster identity 4711 [ 1374.974117][T21874] tipc: Enabled bearer , priority 0 [ 1375.049336][T21873] tipc: Disabling bearer [ 1375.463779][T21880] syzkaller0: entered promiscuous mode [ 1375.469563][T21880] syzkaller0: entered allmulticast mode [ 1376.707757][T21901] syzkaller0: entered promiscuous mode [ 1376.713960][T21901] syzkaller0: entered allmulticast mode [ 1377.199477][T21908] syzkaller0: entered promiscuous mode [ 1377.205560][T21908] syzkaller0: entered allmulticast mode [ 1377.340565][T21910] syzkaller0: entered promiscuous mode [ 1377.346276][T21910] syzkaller0: entered allmulticast mode [ 1377.560724][ T5855] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1377.780759][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880269dfc00: rx timeout, send abort [ 1377.790123][ T5855] usb 2-1: Using ep0 maxpacket: 8 [ 1377.812245][T10556] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1377.883934][ T5855] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1377.893441][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.903325][ T5855] usb 2-1: Product: syz [ 1377.907676][ T5855] usb 2-1: Manufacturer: syz [ 1377.912750][ T5855] usb 2-1: SerialNumber: syz [ 1377.986352][T10556] usb 6-1: config 0 has no interfaces? [ 1377.992415][T10556] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1378.002065][T10556] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.008713][ T5855] usb 2-1: config 0 descriptor?? [ 1378.047907][ T5855] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1378.050242][T10556] usb 6-1: config 0 descriptor?? [ 1378.192281][ T3013] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 1378.280983][ C1] vcan0: j1939_tp_rxtimer: 0xffff888118d3ca00: rx timeout, send abort [ 1378.284297][T13767] usb 6-1: USB disconnect, device number 11 [ 1378.290101][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880269dfc00: abort rx timeout. Force session deactivation [ 1378.793866][ C1] vcan0: j1939_tp_rxtimer: 0xffff888118d3ca00: abort rx timeout. Force session deactivation [ 1378.870121][ T5855] gspca_sonixj: reg_r err -32 [ 1378.875520][ T5855] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 1379.614954][T21937] syzkaller0: entered promiscuous mode [ 1379.620946][T21937] syzkaller0: entered allmulticast mode [ 1380.574084][T13767] usb 2-1: USB disconnect, device number 62 [ 1381.279639][T21967] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.5310'. [ 1381.812673][T21974] syzkaller0: entered promiscuous mode [ 1381.818350][T21974] syzkaller0: entered allmulticast mode [ 1382.731042][T21990] tipc: Started in network mode [ 1382.736423][T21990] tipc: Node identity 564691a6451e, cluster identity 4711 [ 1382.744657][T21990] tipc: Enabled bearer , priority 0 [ 1382.809049][T21995] syzkaller0: entered promiscuous mode [ 1382.815397][T21995] syzkaller0: entered allmulticast mode [ 1382.933501][T21990] tipc: Resetting bearer [ 1383.050813][T21988] tipc: Resetting bearer [ 1383.096286][T21988] tipc: Disabling bearer [ 1384.192148][T22010] syzkaller0: entered promiscuous mode [ 1384.197979][T22010] syzkaller0: entered allmulticast mode [ 1384.314567][T22012] syzkaller0: entered promiscuous mode [ 1384.320780][T22012] syzkaller0: entered allmulticast mode [ 1384.641122][T22017] tipc: Enabling of bearer rejected, failed to enable media [ 1384.722018][T22018] syzkaller0: entered promiscuous mode [ 1384.727689][T22018] syzkaller0: entered allmulticast mode [ 1385.067049][T22027] netlink: 'syz.0.5334': attribute type 12 has an invalid length. [ 1385.075394][T22027] netlink: 'syz.0.5334': attribute type 29 has an invalid length. [ 1385.083626][T22027] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5334'. [ 1385.131149][T22026] tipc: Enabled bearer , priority 0 [ 1385.144860][T22026] syzkaller0: entered promiscuous mode [ 1385.150658][T22026] syzkaller0: entered allmulticast mode [ 1385.248407][T22026] tipc: Resetting bearer [ 1385.330067][T22023] tipc: Resetting bearer [ 1385.372919][T22023] tipc: Disabling bearer [ 1385.570613][T22031] syzkaller0: entered promiscuous mode [ 1385.576313][T22031] syzkaller0: entered allmulticast mode [ 1386.555274][T22042] syzkaller0: entered promiscuous mode [ 1386.561315][T22042] syzkaller0: entered allmulticast mode [ 1386.966831][T22051] syzkaller0: entered promiscuous mode [ 1386.972950][T22051] syzkaller0: entered allmulticast mode [ 1387.598291][T22061] tipc: Enabled bearer , priority 0 [ 1387.641938][T22061] syzkaller0: entered promiscuous mode [ 1387.647622][T22061] syzkaller0: entered allmulticast mode [ 1387.775127][T22063] syzkaller0: entered promiscuous mode [ 1387.781109][T22063] syzkaller0: entered allmulticast mode [ 1387.846318][T22061] tipc: Resetting bearer [ 1387.944997][T22059] tipc: Resetting bearer [ 1388.023373][T22059] tipc: Disabling bearer [ 1388.918026][T22082] syzkaller0: entered promiscuous mode [ 1388.924191][T22082] syzkaller0: entered allmulticast mode [ 1388.964859][T22084] gretap1: entered promiscuous mode [ 1389.214638][T22089] syzkaller0: entered promiscuous mode [ 1389.220662][T22089] syzkaller0: entered allmulticast mode [ 1389.953869][T22099] tipc: Enabled bearer , priority 0 [ 1389.999630][T22099] syzkaller0: entered promiscuous mode [ 1390.005610][T22099] syzkaller0: entered allmulticast mode [ 1390.086277][T22099] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1390.223039][T22098] tipc: Resetting bearer [ 1390.312110][T22098] tipc: Disabling bearer [ 1390.576673][T22109] syzkaller0: entered promiscuous mode [ 1390.582696][T22109] syzkaller0: entered allmulticast mode [ 1391.023882][T22117] syzkaller0: entered promiscuous mode [ 1391.029681][T22117] syzkaller0: entered allmulticast mode [ 1391.390296][T22122] syzkaller0: entered promiscuous mode [ 1391.396176][T22122] syzkaller0: entered allmulticast mode [ 1391.878238][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1391.885555][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1392.463332][T22138] syzkaller0: entered promiscuous mode [ 1392.469019][T22138] syzkaller0: entered allmulticast mode [ 1392.565858][T22141] tipc: Enabled bearer , priority 0 [ 1392.677286][T22137] tipc: Resetting bearer [ 1392.752464][T22137] tipc: Disabling bearer [ 1392.955020][T22147] syzkaller0: entered promiscuous mode [ 1392.961619][T22147] syzkaller0: entered allmulticast mode [ 1393.371824][T22154] syzkaller0: entered promiscuous mode [ 1393.377596][T22154] syzkaller0: entered allmulticast mode [ 1393.667978][T22156] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.5389'. [ 1395.298124][T22183] syzkaller0: entered promiscuous mode [ 1395.304032][T22183] syzkaller0: entered allmulticast mode [ 1395.432446][T22185] syzkaller0: entered promiscuous mode [ 1395.438131][T22185] syzkaller0: entered allmulticast mode [ 1397.511004][ T5852] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1397.715731][ T5852] usb 6-1: Using ep0 maxpacket: 32 [ 1397.740161][ T5852] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1397.749015][ T5852] usb 6-1: config 0 has no interface number 0 [ 1397.755719][ T5852] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1397.834813][ T5852] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1397.844789][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.853220][ T5852] usb 6-1: Product: syz [ 1397.857565][ T5852] usb 6-1: Manufacturer: syz [ 1397.862727][ T5852] usb 6-1: SerialNumber: syz [ 1397.946331][ T5852] usb 6-1: config 0 descriptor?? [ 1397.955613][T22217] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1398.213698][T22217] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1398.675673][ T5852] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1398.687012][ T5852] asix 6-1:0.188: probe with driver asix failed with error -61 [ 1399.022511][T22249] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5426'. [ 1399.058443][T22249] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5426'. [ 1399.085206][T22249] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5426'. [ 1399.585166][T22259] netlink: 'syz.0.5430': attribute type 2 has an invalid length. [ 1399.593997][T22259] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5430'. [ 1399.744116][ T5855] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1399.920348][ T5855] usb 7-1: Using ep0 maxpacket: 8 [ 1400.006717][ T5855] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1400.016483][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.027585][ T5855] usb 7-1: Product: syz [ 1400.032604][ T5855] usb 7-1: Manufacturer: syz [ 1400.037370][ T5855] usb 7-1: SerialNumber: syz [ 1400.056420][ T5855] usb 7-1: config 0 descriptor?? [ 1400.075141][ T5855] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1400.486995][T13767] usb 6-1: USB disconnect, device number 12 [ 1402.540697][T10556] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1402.740596][T10556] usb 6-1: Using ep0 maxpacket: 32 [ 1402.771798][ T5852] usb 7-1: USB disconnect, device number 10 [ 1402.808910][T10556] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1402.817867][T10556] usb 6-1: config 0 has no interface number 0 [ 1402.824411][T10556] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1402.907837][T10556] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1402.917529][T10556] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.926280][T10556] usb 6-1: Product: syz [ 1402.930794][T10556] usb 6-1: Manufacturer: syz [ 1402.935571][T10556] usb 6-1: SerialNumber: syz [ 1403.037910][T10556] usb 6-1: config 0 descriptor?? [ 1403.064013][T22306] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1403.515894][T22306] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1403.627551][T22322] C: renamed from veth0_to_batadv (while UP) [ 1403.654819][T22322] netlink: 'syz.0.5456': attribute type 2 has an invalid length. [ 1403.663177][T22322] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5456'. [ 1403.672722][T22322] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1403.994062][T10556] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1404.001070][T22326] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5458'. [ 1404.006641][T10556] asix 6-1:0.188: probe with driver asix failed with error -61 [ 1404.099420][T22326] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5458'. [ 1404.163458][T22326] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5458'. [ 1404.890903][T13767] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1405.093165][T13767] usb 1-1: Using ep0 maxpacket: 8 [ 1405.130589][T13767] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1405.140139][T13767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.148388][T13767] usb 1-1: Product: syz [ 1405.153986][T13767] usb 1-1: Manufacturer: syz [ 1405.159162][T13767] usb 1-1: SerialNumber: syz [ 1405.188151][T13767] usb 1-1: config 0 descriptor?? [ 1405.239446][T13767] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1405.478380][T10556] usb 6-1: USB disconnect, device number 13 [ 1405.760885][T22353] netlink: 64935 bytes leftover after parsing attributes in process `syz.5.5469'. [ 1407.056995][T22374] syzkaller0: entered promiscuous mode [ 1407.066548][T22374] syzkaller0: entered allmulticast mode [ 1407.395043][T22381] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.5479'. [ 1407.962016][ T5855] usb 1-1: USB disconnect, device number 54 [ 1408.086199][T22391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5484'. [ 1408.578541][T22402] syzkaller0: entered promiscuous mode [ 1408.584502][T22402] syzkaller0: entered allmulticast mode [ 1409.738554][T22423] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.5493'. [ 1410.190469][T10556] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1410.194866][T22434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5497'. [ 1410.393426][T10556] usb 1-1: Using ep0 maxpacket: 8 [ 1410.437460][T10556] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1410.447264][T10556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.455806][T10556] usb 1-1: Product: syz [ 1410.460368][T10556] usb 1-1: Manufacturer: syz [ 1410.465215][T10556] usb 1-1: SerialNumber: syz [ 1410.528079][T10556] usb 1-1: config 0 descriptor?? [ 1410.552655][T10556] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1411.051414][T22444] syzkaller0: entered promiscuous mode [ 1411.057100][T22444] syzkaller0: entered allmulticast mode [ 1412.847663][T22474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5513'. [ 1413.011586][T10556] usb 1-1: USB disconnect, device number 55 [ 1413.367182][T22481] syzkaller0: entered promiscuous mode [ 1413.373922][T22481] syzkaller0: entered allmulticast mode [ 1413.847831][T22487] syzkaller0: entered promiscuous mode [ 1413.853733][T22487] syzkaller0: entered allmulticast mode [ 1414.233491][T22494] netlink: 'syz.3.5522': attribute type 1 has an invalid length. [ 1415.082676][ T5855] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1415.300520][ T5855] usb 6-1: Using ep0 maxpacket: 8 [ 1415.367046][ T5855] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1415.377585][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.387061][ T5855] usb 6-1: Product: syz [ 1415.391511][ T5855] usb 6-1: Manufacturer: syz [ 1415.396283][ T5855] usb 6-1: SerialNumber: syz [ 1415.485176][ T5855] usb 6-1: config 0 descriptor?? [ 1415.538774][ T5855] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1416.542198][T10556] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 1416.739284][T10556] usb 1-1: config 0 has no interfaces? [ 1416.745653][T10556] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1416.755217][T10556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.852755][T10556] usb 1-1: config 0 descriptor?? [ 1417.597035][T13767] usb 1-1: USB disconnect, device number 56 [ 1417.898558][T13767] usb 6-1: USB disconnect, device number 14 [ 1418.200447][T22559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5546'. [ 1419.276396][T22577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5554'. [ 1419.800137][T10556] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1419.982129][T10556] usb 7-1: Using ep0 maxpacket: 8 [ 1420.052247][T10556] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1420.062110][T10556] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.070578][T10556] usb 7-1: Product: syz [ 1420.074904][T10556] usb 7-1: Manufacturer: syz [ 1420.079661][T10556] usb 7-1: SerialNumber: syz [ 1420.114875][T10556] usb 7-1: config 0 descriptor?? [ 1420.151548][T10556] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1421.181056][T10556] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1421.390201][T10556] usb 2-1: Using ep0 maxpacket: 32 [ 1421.434382][T10556] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1421.443212][T10556] usb 2-1: config 0 has no interface number 0 [ 1421.449593][T10556] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1421.525162][T10556] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1421.536778][T10556] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.546389][T10556] usb 2-1: Product: syz [ 1421.550941][T10556] usb 2-1: Manufacturer: syz [ 1421.555706][T10556] usb 2-1: SerialNumber: syz [ 1421.582245][T10556] usb 2-1: config 0 descriptor?? [ 1421.596347][T22604] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1421.684580][T22614] syzkaller0: entered promiscuous mode [ 1421.690698][T22614] syzkaller0: entered allmulticast mode [ 1421.848512][T22604] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1422.712611][T10556] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1422.723453][T10556] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1422.734961][T10556] asix 2-1:0.188: probe with driver asix failed with error -61 [ 1422.858763][T13767] usb 7-1: USB disconnect, device number 11 [ 1423.191903][T22639] syzkaller0: entered promiscuous mode [ 1423.197756][T22639] syzkaller0: entered allmulticast mode [ 1423.255738][T22639] tipc: Enabled bearer , priority 0 [ 1423.306402][T22638] tipc: Resetting bearer [ 1423.382762][T22638] tipc: Disabling bearer [ 1424.081284][T22655] syzkaller0: entered promiscuous mode [ 1424.089658][T22655] syzkaller0: entered allmulticast mode [ 1424.190419][T10556] usb 2-1: USB disconnect, device number 63 [ 1424.650604][ T5855] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1424.850847][ T5855] usb 6-1: Using ep0 maxpacket: 8 [ 1424.916289][ T5855] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1424.926216][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.934605][ T5855] usb 6-1: Product: syz [ 1424.938982][ T5855] usb 6-1: Manufacturer: syz [ 1424.943975][ T5855] usb 6-1: SerialNumber: syz [ 1425.023074][ T5855] usb 6-1: config 0 descriptor?? [ 1425.047948][ T5855] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1425.660800][T22679] syzkaller0: entered promiscuous mode [ 1425.662348][T22681] fuse: Unknown parameter 'grou00000000000000000000' [ 1425.666757][T22679] syzkaller0: entered allmulticast mode [ 1425.775939][T22679] tipc: Enabled bearer , priority 0 [ 1425.824071][T22678] tipc: Resetting bearer [ 1425.906268][T22678] tipc: Disabling bearer [ 1426.436430][T22692] syzkaller0: entered promiscuous mode [ 1426.445033][T22692] syzkaller0: entered allmulticast mode [ 1426.590590][ T5855] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1426.771655][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 1426.808459][ T5855] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1426.817545][ T5855] usb 4-1: config 0 has no interface number 0 [ 1426.824128][ T5855] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1426.911411][ T5855] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1426.921055][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.929610][ T5855] usb 4-1: Product: syz [ 1426.934282][ T5855] usb 4-1: Manufacturer: syz [ 1426.939068][ T5855] usb 4-1: SerialNumber: syz [ 1426.961854][ T5855] usb 4-1: config 0 descriptor?? [ 1426.973083][T22690] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1427.213605][T22690] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1427.412592][T22712] syzkaller0: entered promiscuous mode [ 1427.418385][T22712] syzkaller0: entered allmulticast mode [ 1427.602784][T10556] usb 6-1: USB disconnect, device number 15 [ 1428.069669][T22716] fuse: Unknown parameter 'grou00000000000000000000' [ 1428.186964][ T5855] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1428.197870][ T5855] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1428.209267][ T5855] asix 4-1:0.188: probe with driver asix failed with error -61 [ 1428.308615][T22718] syzkaller0: entered promiscuous mode [ 1428.314463][T22718] syzkaller0: entered allmulticast mode [ 1428.355534][T22718] tipc: Enabled bearer , priority 0 [ 1428.380323][T22717] tipc: Resetting bearer [ 1428.479558][T22717] tipc: Disabling bearer [ 1429.021898][T22727] syzkaller0: entered promiscuous mode [ 1429.027854][T22727] syzkaller0: entered allmulticast mode [ 1429.162432][T22734] xt_l2tp: v2 sid > 0xffff: 16776960 [ 1429.657379][T13767] usb 4-1: USB disconnect, device number 53 [ 1429.706011][T22743] fuse: Unknown parameter 'grou00000000000000000000' [ 1429.740681][ T5855] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1429.940914][ T5855] usb 1-1: Using ep0 maxpacket: 8 [ 1429.989174][ T5855] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1429.998711][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.007118][ T5855] usb 1-1: Product: syz [ 1430.011689][ T5855] usb 1-1: Manufacturer: syz [ 1430.016480][ T5855] usb 1-1: SerialNumber: syz [ 1430.155222][ T5855] usb 1-1: config 0 descriptor?? [ 1430.197892][ T5855] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1430.250300][T22754] syzkaller0: entered promiscuous mode [ 1430.256167][T22754] syzkaller0: entered allmulticast mode [ 1430.338412][T22754] tipc: Enabled bearer , priority 0 [ 1430.373271][T22753] tipc: Resetting bearer [ 1430.424278][T22753] tipc: Disabling bearer [ 1431.323401][T22767] syzkaller0: entered promiscuous mode [ 1431.329082][T22767] syzkaller0: entered allmulticast mode [ 1431.770075][ T5855] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1431.796475][T22778] fuse: Unknown parameter 'group_i00000000000000000000' [ 1431.976035][ T5855] usb 2-1: Using ep0 maxpacket: 32 [ 1432.009082][ T5855] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1432.020698][ T5855] usb 2-1: config 0 has no interface number 0 [ 1432.027007][ T5855] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1432.099241][ T5855] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1432.109417][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.117813][ T5855] usb 2-1: Product: syz [ 1432.122521][ T5855] usb 2-1: Manufacturer: syz [ 1432.127300][ T5855] usb 2-1: SerialNumber: syz [ 1432.228101][ T5855] usb 2-1: config 0 descriptor?? [ 1432.237010][T22772] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1432.493782][T22772] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1432.564925][T22788] syzkaller0: entered promiscuous mode [ 1432.571272][T22788] syzkaller0: entered allmulticast mode [ 1432.626247][T10556] usb 1-1: USB disconnect, device number 57 [ 1432.775916][T22788] tipc: Enabled bearer , priority 0 [ 1432.862193][T22786] tipc: Resetting bearer [ 1432.924003][T22786] tipc: Disabling bearer [ 1433.052353][T22794] autofs: Unknown parameter '00000000000000000000' [ 1433.122976][T22794] 9pnet_fd: Insufficient options for proto=fd [ 1433.401401][ T5855] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1433.412279][ T5855] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1433.424241][ T5855] asix 2-1:0.188: probe with driver asix failed with error -61 [ 1433.672740][T22802] syzkaller0: entered promiscuous mode [ 1433.678523][T22802] syzkaller0: entered allmulticast mode [ 1434.097175][T22810] fuse: Unknown parameter 'group_i00000000000000000000' [ 1434.732187][T10556] usb 2-1: USB disconnect, device number 64 [ 1435.091836][T22825] syzkaller0: entered promiscuous mode [ 1435.097544][T22825] syzkaller0: entered allmulticast mode [ 1435.253139][T22825] tipc: Enabled bearer , priority 0 [ 1435.306116][T22824] tipc: Resetting bearer [ 1435.320355][T10556] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1435.377741][T22824] tipc: Disabling bearer [ 1435.415616][T22830] autofs: Unknown parameter 'fd00000000000000000000' [ 1435.429086][T22830] 9pnet_fd: Insufficient options for proto=fd [ 1435.795441][T10556] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1435.805092][T10556] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.852800][T10556] usb 6-1: config 0 descriptor?? [ 1436.016054][T22836] syzkaller0: entered promiscuous mode [ 1436.022075][T22836] syzkaller0: entered allmulticast mode [ 1436.034069][T22839] fuse: Unknown parameter 'group_i00000000000000000000' [ 1437.358051][T10556] pegasus 6-1:0.0: can't reset MAC [ 1437.364522][T10556] pegasus 6-1:0.0: probe with driver pegasus failed with error -5 [ 1437.861320][T22862] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5667'. [ 1437.924363][T22862] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5667'. [ 1437.971286][T22862] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5667'. [ 1438.429517][T22870] syzkaller0: entered promiscuous mode [ 1438.435476][T22870] syzkaller0: entered allmulticast mode [ 1438.489062][ T5855] usb 6-1: USB disconnect, device number 16 [ 1438.559387][T22870] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1438.577414][T22874] fuse: Unknown parameter 'group_id00000000000000000000' [ 1439.870759][T22899] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5682'. [ 1440.090672][ T5855] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1440.248116][T22906] fuse: Unknown parameter 'group_id00000000000000000000' [ 1440.286787][ T5855] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1440.296477][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.372838][ T5855] usb 4-1: config 0 descriptor?? [ 1440.887843][T22912] syzkaller0: entered promiscuous mode [ 1440.893877][T22912] syzkaller0: entered allmulticast mode [ 1440.976312][T22915] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1441.224147][T22918] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5690'. [ 1441.233620][T22918] netlink: 43 bytes leftover after parsing attributes in process `syz.6.5690'. [ 1441.243187][T22918] netlink: 'syz.6.5690': attribute type 5 has an invalid length. [ 1441.251235][T22918] netlink: 43 bytes leftover after parsing attributes in process `syz.6.5690'. [ 1441.977808][ T5855] pegasus 4-1:0.0: can't reset MAC [ 1441.985244][ T5855] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 1442.281179][T22927] syzkaller0: entered promiscuous mode [ 1442.286870][T22927] syzkaller0: entered allmulticast mode [ 1442.300477][ T5855] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1442.342745][T22935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5697'. [ 1442.500365][ T5855] usb 6-1: Using ep0 maxpacket: 8 [ 1442.562232][ T5855] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1442.571800][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.580229][ T5855] usb 6-1: Product: syz [ 1442.584680][ T5855] usb 6-1: Manufacturer: syz [ 1442.589451][ T5855] usb 6-1: SerialNumber: syz [ 1442.641229][T22942] fuse: Unknown parameter 'group_id00000000000000000000' [ 1442.650411][ T5855] usb 6-1: config 0 descriptor?? [ 1442.671907][ T5855] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1443.222724][T10556] usb 4-1: USB disconnect, device number 54 [ 1443.522548][T22953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5704'. [ 1443.741369][T22955] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1445.091318][ T5855] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1445.225687][T10556] usb 6-1: USB disconnect, device number 17 [ 1445.300796][ T5855] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1445.310872][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.388705][ T5855] usb 4-1: config 0 descriptor?? [ 1445.934668][T22996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5718'. [ 1445.996432][T22997] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5717'. [ 1446.081139][T22997] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5717'. [ 1446.655507][T23009] syzkaller0: entered promiscuous mode [ 1446.661537][T23009] syzkaller0: entered allmulticast mode [ 1446.890780][ T5855] pegasus 4-1:0.0: can't reset MAC [ 1446.897391][ T5855] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 1447.174094][ T5855] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1447.390961][ T5855] usb 6-1: Using ep0 maxpacket: 8 [ 1447.441131][ T5855] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1447.451115][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.459313][ T5855] usb 6-1: Product: syz [ 1447.463871][ T5855] usb 6-1: Manufacturer: syz [ 1447.468652][ T5855] usb 6-1: SerialNumber: syz [ 1447.511020][ T5855] usb 6-1: config 0 descriptor?? [ 1447.541086][ T5855] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1448.243119][T10556] usb 4-1: USB disconnect, device number 55 [ 1448.504298][T23037] syzkaller0: entered promiscuous mode [ 1448.510321][T23037] syzkaller0: entered allmulticast mode [ 1448.732644][T23044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5733'. [ 1448.809391][T23044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5733'. [ 1450.073229][ T5855] usb 6-1: USB disconnect, device number 18 [ 1450.250144][ T11] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1450.434588][ T11] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1450.444310][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.524253][ T11] usb 2-1: config 0 descriptor?? [ 1450.803217][T23076] syzkaller0: entered promiscuous mode [ 1450.809377][T23076] syzkaller0: entered allmulticast mode [ 1451.274399][T23082] IPv6: NLM_F_CREATE should be specified when creating new route [ 1451.997506][ T11] pegasus 2-1:0.0: can't reset MAC [ 1452.003828][ T11] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 1453.295904][T10556] usb 2-1: USB disconnect, device number 65 [ 1453.342683][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1453.349514][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1455.200287][T10556] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1455.440344][T10556] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1455.449650][T10556] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.514276][T10556] usb 6-1: config 0 descriptor?? [ 1457.009077][T10556] pegasus 6-1:0.0: can't reset MAC [ 1457.015756][T10556] pegasus 6-1:0.0: probe with driver pegasus failed with error -5 [ 1457.862791][T23199] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5796'. [ 1457.903188][T23199] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5796'. [ 1458.326711][T10556] usb 6-1: USB disconnect, device number 19 [ 1460.381325][ T11] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1460.527128][T23248] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5815'. [ 1460.574645][T23248] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5815'. [ 1460.588642][ T11] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1460.598278][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.623376][T23248] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5815'. [ 1460.658560][ T11] usb 6-1: config 0 descriptor?? [ 1462.144461][ T11] pegasus 6-1:0.0: can't reset MAC [ 1462.151022][ T11] pegasus 6-1:0.0: probe with driver pegasus failed with error -5 [ 1463.341888][ T11] usb 6-1: USB disconnect, device number 20 [ 1464.224551][T23303] syzkaller0: entered promiscuous mode [ 1464.230799][T23303] syzkaller0: entered allmulticast mode [ 1464.450281][T23309] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5834'. [ 1465.106294][T23322] netlink: 'syz.0.5837': attribute type 1 has an invalid length. [ 1465.405471][T23327] No control pipe specified [ 1465.426671][T23327] 9pnet_fd: Insufficient options for proto=fd [ 1465.890812][ T11] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1466.094483][ T11] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1466.104154][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.214098][ T11] usb 1-1: config 0 descriptor?? [ 1466.581772][T23348] syzkaller0: entered promiscuous mode [ 1466.590477][T23348] syzkaller0: entered allmulticast mode [ 1467.177963][T23358] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1467.703437][ T11] pegasus 1-1:0.0: can't reset MAC [ 1467.710278][ T11] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 1468.210623][T23377] No control pipe specified [ 1468.259691][T23377] 9pnet_fd: Insufficient options for proto=fd [ 1469.001491][T10556] usb 1-1: USB disconnect, device number 58 [ 1469.566547][T23403] syzkaller0: entered promiscuous mode [ 1469.573207][T23403] syzkaller0: entered allmulticast mode [ 1471.045008][T18557] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1471.054478][T18557] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1471.063749][T18557] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1471.076446][T18557] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1471.087221][T18557] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1471.874318][T23438] 9pnet_fd: Insufficient options for proto=fd [ 1472.080467][ T11] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1472.313368][ T11] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1472.322911][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.392749][ T11] usb 6-1: config 0 descriptor?? [ 1472.881685][T23428] chnl_net:caif_netlink_parms(): no params data found [ 1473.175201][T13636] Bluetooth: hci2: command tx timeout [ 1473.428868][T23462] syzkaller0: entered promiscuous mode [ 1473.434914][T23462] syzkaller0: entered allmulticast mode [ 1473.905552][ T11] pegasus 6-1:0.0: can't reset MAC [ 1473.912141][ T11] pegasus 6-1:0.0: probe with driver pegasus failed with error -5 [ 1474.372506][T23428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.381627][T23428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.389464][T23428] bridge_slave_0: entered allmulticast mode [ 1474.399271][T23428] bridge_slave_0: entered promiscuous mode [ 1474.545802][T23428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.553424][T23428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.561383][T23428] bridge_slave_1: entered allmulticast mode [ 1474.570871][T23428] bridge_slave_1: entered promiscuous mode [ 1474.635715][T18696] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.061158][T18696] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.096517][T23428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1475.173631][T23428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1475.220509][T13636] Bluetooth: hci2: command tx timeout [ 1475.260253][T18696] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.421232][ T5852] usb 6-1: USB disconnect, device number 21 [ 1475.510423][T18696] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.736533][T23428] team0: Port device team_slave_0 added [ 1475.851969][T23428] team0: Port device team_slave_1 added [ 1476.316247][T18696] bridge_slave_1: left allmulticast mode [ 1476.322535][T18696] bridge_slave_1: left promiscuous mode [ 1476.329059][T18696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.431390][T18696] bridge_slave_0: left allmulticast mode [ 1476.437507][T18696] bridge_slave_0: left promiscuous mode [ 1476.444356][T18696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.105793][T23518] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1477.216308][T18696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1477.257276][T18696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1477.300403][T13636] Bluetooth: hci2: command tx timeout [ 1477.382000][T18696] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1477.456289][T18696] bond0 (unregistering): Released all slaves [ 1477.717249][T23428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1477.724781][T23428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1477.754794][T23428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1477.863674][T18696] tipc: Left network mode [ 1478.119115][T23428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.126519][T23428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.153350][T23428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.518812][T18696] hsr_slave_0: left promiscuous mode [ 1478.561502][T18696] hsr_slave_1: left promiscuous mode [ 1478.572226][T18696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1478.580049][T18696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1478.634177][T18696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1478.641997][T18696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1478.716195][T18696] veth1_macvtap: left promiscuous mode [ 1478.722293][T18696] veth0_macvtap: left promiscuous mode [ 1478.728150][T18696] veth1_vlan: left promiscuous mode [ 1478.735742][T18696] veth0_vlan: left promiscuous mode [ 1479.161073][T18696] team0 (unregistering): Port device vlan2 removed [ 1479.380397][T13636] Bluetooth: hci2: command tx timeout [ 1480.023083][T18696] team0 (unregistering): Port device team_slave_1 removed [ 1480.051712][T18696] team0 (unregistering): Port device team_slave_0 removed [ 1480.568556][T23428] hsr_slave_0: entered promiscuous mode [ 1480.578557][T23428] hsr_slave_1: entered promiscuous mode [ 1480.587505][T23428] debugfs: 'hsr0' already exists in 'hsr' [ 1480.593713][T23428] Cannot create hsr debugfs directory [ 1481.144659][T18696] IPVS: stop unused estimator thread 0... [ 1481.670632][T23594] syzkaller0: entered promiscuous mode [ 1481.676327][T23594] syzkaller0: entered allmulticast mode [ 1482.657473][T23428] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1482.731163][T23428] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1482.841362][T23428] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1482.947497][T23428] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1484.292786][T23428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.481998][T23641] syzkaller0: entered promiscuous mode [ 1484.487835][T23641] syzkaller0: entered allmulticast mode [ 1484.563661][T23428] 8021q: adding VLAN 0 to HW filter on device team0 [ 1484.744946][T18696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.752597][T18696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1484.837807][T18696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.845388][T18696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1487.464569][T23428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1487.607012][T23702] syzkaller0: entered promiscuous mode [ 1487.613188][T23702] syzkaller0: entered allmulticast mode [ 1488.034486][T23428] veth0_vlan: entered promiscuous mode [ 1488.171365][T23428] veth1_vlan: entered promiscuous mode [ 1488.468245][T23428] veth0_macvtap: entered promiscuous mode [ 1488.563774][T23428] veth1_macvtap: entered promiscuous mode [ 1488.796202][T23428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1488.930401][T23428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1488.999368][ T3013] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.056840][ T3013] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.133689][ T3013] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.191702][ T3013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.206934][T23743] syzkaller0: entered promiscuous mode [ 1490.212810][T23743] syzkaller0: entered allmulticast mode [ 1492.446232][T23786] syzkaller0: entered promiscuous mode [ 1492.452450][T23786] syzkaller0: entered allmulticast mode [ 1492.897651][T10556] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1493.107139][T10556] usb 2-1: Using ep0 maxpacket: 32 [ 1493.137661][T10556] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1493.146350][T10556] usb 2-1: config 0 has no interface number 0 [ 1493.153117][T10556] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1493.210149][T10556] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1493.219444][T10556] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.228507][T10556] usb 2-1: Product: syz [ 1493.233097][T10556] usb 2-1: Manufacturer: syz [ 1493.237873][T10556] usb 2-1: SerialNumber: syz [ 1493.262603][T10556] usb 2-1: config 0 descriptor?? [ 1493.272744][T23793] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1493.516619][T23793] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1494.353181][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1494.361671][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1494.548851][T14609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1494.557866][T14609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1494.616692][T10556] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1494.628107][T10556] asix 2-1:0.188: probe with driver asix failed with error -32 [ 1494.918735][ C0] ===================================================== [ 1494.926309][ C0] BUG: KMSAN: uninit-value in eth_type_trans+0x7d5/0x9b0 [ 1494.933671][ C0] eth_type_trans+0x7d5/0x9b0 [ 1494.938671][ C0] ip_tunnel_rcv+0x2d98/0x3610 [ 1494.943774][ C0] gre_rcv+0x1c8c/0x20e0 [ 1494.948210][ C0] gre_rcv+0x285/0x380 [ 1494.952587][ C0] ip_protocol_deliver_rcu+0xb2c/0x13d0 [ 1494.958337][ C0] ip_local_deliver_finish+0x409/0x730 [ 1494.964158][ C0] ip_local_deliver+0x228/0x4b0 [ 1494.969251][ C0] ip_rcv_finish+0x4f7/0x5c0 [ 1494.974126][ C0] ip_rcv+0xcb/0x380 [ 1494.978240][ C0] __netif_receive_skb+0x312/0xac0 [ 1494.983768][ C0] process_backlog+0x47c/0x9f0 [ 1494.988760][ C0] __napi_poll+0xd8/0x880 [ 1494.993401][ C0] net_rx_action+0xa45/0x1c90 [ 1494.998224][ C0] handle_softirqs+0x169/0x6e0 [ 1495.003355][ C0] __do_softirq+0x14/0x1b [ 1495.007846][ C0] do_softirq+0x99/0x100 [ 1495.012360][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 1495.017529][ C0] __dev_queue_xmit+0x3c32/0x58f0 [ 1495.022851][ C0] neigh_resolve_output+0x9c5/0xaf0 [ 1495.028268][ C0] ip_finish_output2+0x1abf/0x1d50 [ 1495.033697][ C0] ip_finish_output+0x292/0x8e0 [ 1495.038769][ C0] ip_mc_output+0x58a/0x8d0 [ 1495.043534][ C0] __ip_queue_xmit+0x20ed/0x2140 [ 1495.048630][ C0] sctp_v4_xmit+0x758/0x1190 [ 1495.053605][ C0] sctp_packet_transmit+0x42e3/0x4620 [ 1495.059151][ C0] sctp_packet_singleton+0x2e3/0x450 [ 1495.064718][ C0] sctp_outq_flush+0x71c/0x67c0 [ 1495.069813][ C0] sctp_outq_uncork+0x9e/0xc0 [ 1495.074655][ C0] sctp_do_sm+0x8c8e/0x9720 [ 1495.079363][ C0] sctp_primitive_ASSOCIATE+0xd4/0x100 [ 1495.085069][ C0] sctp_sendmsg_to_asoc+0x1a64/0x2250 [ 1495.090669][ C0] sctp_sendmsg+0x3910/0x49f0 [ 1495.095495][ C0] inet_sendmsg+0x26c/0x2a0 [ 1495.100226][ C0] __sock_sendmsg+0x278/0x3d0 [ 1495.105048][ C0] ____sys_sendmsg+0x7f5/0xcf0 [ 1495.110057][ C0] ___sys_sendmsg+0x271/0x3b0 [ 1495.114988][ C0] __x64_sys_sendmsg+0x211/0x3e0 [ 1495.120252][ C0] x64_sys_call+0x1c60/0x3e70 [ 1495.125217][ C0] do_syscall_64+0xd9/0xf80 [ 1495.129977][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.136024][ C0] [ 1495.138418][ C0] Uninit was stored to memory at: [ 1495.143757][ C0] pskb_expand_head+0x310/0x15d0 [ 1495.148949][ C0] skb_expand_head+0x416/0x860 [ 1495.154058][ C0] ip_finish_output2+0xe48/0x1d50 [ 1495.159267][ C0] ip_finish_output+0x292/0x8e0 [ 1495.164365][ C0] ip_mc_output+0x58a/0x8d0 [ 1495.169111][ C0] __ip_queue_xmit+0x20ed/0x2140 [ 1495.174320][ C0] sctp_v4_xmit+0x758/0x1190 [ 1495.179104][ C0] sctp_packet_transmit+0x42e3/0x4620 [ 1495.184714][ C0] sctp_packet_singleton+0x2e3/0x450 [ 1495.190277][ C0] sctp_outq_flush+0x71c/0x67c0 [ 1495.195324][ C0] sctp_outq_uncork+0x9e/0xc0 [ 1495.200253][ C0] sctp_do_sm+0x8c8e/0x9720 [ 1495.204933][ C0] sctp_primitive_ASSOCIATE+0xd4/0x100 [ 1495.210620][ C0] sctp_sendmsg_to_asoc+0x1a64/0x2250 [ 1495.216134][ C0] sctp_sendmsg+0x3910/0x49f0 [ 1495.221020][ C0] inet_sendmsg+0x26c/0x2a0 [ 1495.225658][ C0] __sock_sendmsg+0x278/0x3d0 [ 1495.230643][ C0] ____sys_sendmsg+0x7f5/0xcf0 [ 1495.235574][ C0] ___sys_sendmsg+0x271/0x3b0 [ 1495.240490][ C0] __x64_sys_sendmsg+0x211/0x3e0 [ 1495.245603][ C0] x64_sys_call+0x1c60/0x3e70 [ 1495.250524][ C0] do_syscall_64+0xd9/0xf80 [ 1495.255196][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.261327][ C0] [ 1495.263717][ C0] Uninit was created at: [ 1495.268185][ C0] __kmalloc_node_track_caller_noprof+0xb77/0x1c90 [ 1495.274979][ C0] kmalloc_reserve+0x22f/0x4b0 [ 1495.279971][ C0] __alloc_skb+0x866/0x10a0 [ 1495.284665][ C0] sctp_packet_transmit+0x44b/0x4620 [ 1495.290455][ C0] sctp_packet_singleton+0x2e3/0x450 [ 1495.295900][ C0] sctp_outq_flush+0x71c/0x67c0 [ 1495.300987][ C0] sctp_outq_uncork+0x9e/0xc0 [ 1495.305820][ C0] sctp_do_sm+0x8c8e/0x9720 [ 1495.310609][ C0] sctp_primitive_ASSOCIATE+0xd4/0x100 [ 1495.316236][ C0] sctp_sendmsg_to_asoc+0x1a64/0x2250 [ 1495.321849][ C0] sctp_sendmsg+0x3910/0x49f0 [ 1495.326682][ C0] inet_sendmsg+0x26c/0x2a0 [ 1495.331424][ C0] __sock_sendmsg+0x278/0x3d0 [ 1495.336244][ C0] ____sys_sendmsg+0x7f5/0xcf0 [ 1495.341258][ C0] ___sys_sendmsg+0x271/0x3b0 [ 1495.346115][ C0] __x64_sys_sendmsg+0x211/0x3e0 [ 1495.351323][ C0] x64_sys_call+0x1c60/0x3e70 [ 1495.356173][ C0] do_syscall_64+0xd9/0xf80 [ 1495.360918][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.367059][ C0] [ 1495.369477][ C0] CPU: 0 UID: 0 PID: 23822 Comm: syz.3.5971 Not tainted syzkaller #0 PREEMPT(none) [ 1495.379084][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1495.389695][ C0] ===================================================== [ 1495.396828][ C0] Disabling lock debugging due to kernel taint [ 1495.403175][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 1495.409731][ C0] CPU: 0 UID: 0 PID: 23822 Comm: syz.3.5971 Tainted: G B syzkaller #0 PREEMPT(none) [ 1495.420847][ C0] Tainted: [B]=BAD_PAGE [ 1495.425085][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1495.435264][ C0] Call Trace: [ 1495.438654][ C0] [ 1495.441579][ C0] __dump_stack+0x26/0x30 [ 1495.446079][ C0] dump_stack_lvl+0x53/0x270 [ 1495.450842][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.456852][ C0] dump_stack+0x1e/0x25 [ 1495.461168][ C0] vpanic+0x435/0xd30 [ 1495.465340][ C0] panic+0x15d/0x160 [ 1495.469447][ C0] kmsan_report+0x31c/0x320 [ 1495.474145][ C0] ? stack_depot_save_flags+0x35/0x790 [ 1495.479806][ C0] ? __msan_warning+0x1b/0x30 [ 1495.484652][ C0] ? eth_type_trans+0x7d5/0x9b0 [ 1495.489779][ C0] ? ip_tunnel_rcv+0x2d98/0x3610 [ 1495.494886][ C0] ? gre_rcv+0x1c8c/0x20e0 [ 1495.499467][ C0] ? gre_rcv+0x285/0x380 [ 1495.503848][ C0] ? ip_protocol_deliver_rcu+0xb2c/0x13d0 [ 1495.509784][ C0] ? ip_local_deliver_finish+0x409/0x730 [ 1495.515564][ C0] ? ip_local_deliver+0x228/0x4b0 [ 1495.520833][ C0] ? ip_rcv_finish+0x4f7/0x5c0 [ 1495.525736][ C0] ? ip_rcv+0xcb/0x380 [ 1495.529925][ C0] ? __netif_receive_skb+0x312/0xac0 [ 1495.535397][ C0] ? process_backlog+0x47c/0x9f0 [ 1495.540479][ C0] ? __napi_poll+0xd8/0x880 [ 1495.545156][ C0] ? net_rx_action+0xa45/0x1c90 [ 1495.550145][ C0] ? handle_softirqs+0x169/0x6e0 [ 1495.555246][ C0] ? __do_softirq+0x14/0x1b [ 1495.560088][ C0] ? do_softirq+0x99/0x100 [ 1495.564646][ C0] ? __local_bh_enable_ip+0xa1/0xb0 [ 1495.569988][ C0] ? __dev_queue_xmit+0x3c32/0x58f0 [ 1495.575443][ C0] ? neigh_resolve_output+0x9c5/0xaf0 [ 1495.581010][ C0] ? ip_finish_output2+0x1abf/0x1d50 [ 1495.586470][ C0] ? ip_finish_output+0x292/0x8e0 [ 1495.591646][ C0] ? ip_mc_output+0x58a/0x8d0 [ 1495.596476][ C0] ? __ip_queue_xmit+0x20ed/0x2140 [ 1495.601814][ C0] ? sctp_v4_xmit+0x758/0x1190 [ 1495.606754][ C0] ? sctp_packet_transmit+0x42e3/0x4620 [ 1495.612460][ C0] ? sctp_packet_singleton+0x2e3/0x450 [ 1495.618088][ C0] ? sctp_outq_flush+0x71c/0x67c0 [ 1495.623290][ C0] ? sctp_outq_uncork+0x9e/0xc0 [ 1495.628313][ C0] ? sctp_do_sm+0x8c8e/0x9720 [ 1495.633215][ C0] ? sctp_primitive_ASSOCIATE+0xd4/0x100 [ 1495.639018][ C0] ? sctp_sendmsg_to_asoc+0x1a64/0x2250 [ 1495.644731][ C0] ? sctp_sendmsg+0x3910/0x49f0 [ 1495.649742][ C0] ? inet_sendmsg+0x26c/0x2a0 [ 1495.654558][ C0] ? __sock_sendmsg+0x278/0x3d0 [ 1495.659545][ C0] ? ____sys_sendmsg+0x7f5/0xcf0 [ 1495.664648][ C0] ? ___sys_sendmsg+0x271/0x3b0 [ 1495.669657][ C0] ? __x64_sys_sendmsg+0x211/0x3e0 [ 1495.674938][ C0] ? x64_sys_call+0x1c60/0x3e70 [ 1495.679965][ C0] ? do_syscall_64+0xd9/0xf80 [ 1495.684825][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.691056][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1495.696373][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1495.701679][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1495.708205][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1495.713543][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.719565][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1495.724878][ C0] __msan_warning+0x1b/0x30 [ 1495.729553][ C0] eth_type_trans+0x7d5/0x9b0 [ 1495.734422][ C0] ip_tunnel_rcv+0x2d98/0x3610 [ 1495.739383][ C0] gre_rcv+0x1c8c/0x20e0 [ 1495.743769][ C0] ? __rcu_read_unlock+0x47/0xd0 [ 1495.748859][ C0] ? raw_local_deliver+0x388/0x1690 [ 1495.754185][ C0] ? raw_local_deliver+0x1650/0x1690 [ 1495.759627][ C0] ? __pfx_gre_rcv+0x10/0x10 [ 1495.764369][ C0] gre_rcv+0x285/0x380 [ 1495.768738][ C0] ? __pfx_gre_rcv+0x10/0x10 [ 1495.773467][ C0] ip_protocol_deliver_rcu+0xb2c/0x13d0 [ 1495.779225][ C0] ip_local_deliver_finish+0x409/0x730 [ 1495.784832][ C0] ip_local_deliver+0x228/0x4b0 [ 1495.790492][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1495.796607][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 1495.802149][ C0] ip_rcv_finish+0x4f7/0x5c0 [ 1495.806891][ C0] ip_rcv+0xcb/0x380 [ 1495.810918][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1495.816267][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1495.820898][ C0] __netif_receive_skb+0x312/0xac0 [ 1495.826182][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1495.831490][ C0] process_backlog+0x47c/0x9f0 [ 1495.836396][ C0] ? __pfx_process_backlog+0x10/0x10 [ 1495.841966][ C0] __napi_poll+0xd8/0x880 [ 1495.846481][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.852552][ C0] net_rx_action+0xa45/0x1c90 [ 1495.857353][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.863430][ C0] ? sched_clock_cpu+0x59/0xa80 [ 1495.868544][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1495.873865][ C0] handle_softirqs+0x169/0x6e0 [ 1495.878876][ C0] __do_softirq+0x14/0x1b [ 1495.883368][ C0] do_softirq+0x99/0x100 [ 1495.887769][ C0] [ 1495.890878][ C0] [ 1495.893983][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 1495.899268][ C0] __dev_queue_xmit+0x3c32/0x58f0 [ 1495.904442][ C0] ? __local_bh_enable_ip+0x75/0xb0 [ 1495.909776][ C0] ? _raw_spin_unlock_bh+0x2d/0x40 [ 1495.915093][ C0] ? ___neigh_create+0x34f4/0x3b90 [ 1495.920389][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1495.925704][ C0] ? __dev_queue_xmit+0x277/0x58f0 [ 1495.931002][ C0] neigh_resolve_output+0x9c5/0xaf0 [ 1495.936678][ C0] ? __pfx_neigh_resolve_output+0x10/0x10 [ 1495.942604][ C0] ip_finish_output2+0x1abf/0x1d50 [ 1495.947994][ C0] ip_finish_output+0x292/0x8e0 [ 1495.952998][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.959446][ C0] ip_mc_output+0x58a/0x8d0 [ 1495.964097][ C0] ? skb_cow+0x164/0x2a0 [ 1495.968496][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 1495.974036][ C0] ? __pfx_ip_mc_output+0x10/0x10 [ 1495.979205][ C0] ? __pfx_ip_mc_output+0x10/0x10 [ 1495.984368][ C0] __ip_queue_xmit+0x20ed/0x2140 [ 1495.989453][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1495.995950][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1496.002242][ C0] sctp_v4_xmit+0x758/0x1190 [ 1496.007037][ C0] ? skb_crc32c+0xed9/0xfc0 [ 1496.011709][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1496.017711][ C0] ? __pfx_sctp_v4_xmit+0x10/0x10 [ 1496.022914][ C0] sctp_packet_transmit+0x42e3/0x4620 [ 1496.028556][ C0] sctp_packet_singleton+0x2e3/0x450 [ 1496.034028][ C0] ? kmsan_get_metadata+0xf0/0x160 [ 1496.039393][ C0] sctp_outq_flush+0x71c/0x67c0 [ 1496.044508][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1496.050758][ C0] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1496.056742][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1496.062720][ C0] sctp_outq_uncork+0x9e/0xc0 [ 1496.067548][ C0] sctp_do_sm+0x8c8e/0x9720 [ 1496.072289][ C0] ? sctp_stream_init_ext+0x65/0x2f0 [ 1496.077741][ C0] ? __msan_warning+0x1b/0x30 [ 1496.082567][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1496.088276][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1496.094255][ C0] ? should_fail_ex+0x45/0x8a0 [ 1496.099249][ C0] sctp_primitive_ASSOCIATE+0xd4/0x100 [ 1496.104896][ C0] sctp_sendmsg_to_asoc+0x1a64/0x2250 [ 1496.110412][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1496.115689][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1496.121705][ C0] sctp_sendmsg+0x3910/0x49f0 [ 1496.126504][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1496.133327][ C0] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1496.138522][ C0] inet_sendmsg+0x26c/0x2a0 [ 1496.143205][ C0] __sock_sendmsg+0x278/0x3d0 [ 1496.148123][ C0] ____sys_sendmsg+0x7f5/0xcf0 [ 1496.153073][ C0] ___sys_sendmsg+0x271/0x3b0 [ 1496.157920][ C0] ? __rcu_read_unlock+0x6d/0xd0 [ 1496.163011][ C0] ? __fget_files+0x3b4/0x4a0 [ 1496.167937][ C0] ? __fget_files+0x3b9/0x4a0 [ 1496.172790][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1496.178171][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1496.184170][ C0] __x64_sys_sendmsg+0x211/0x3e0 [ 1496.189292][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1496.194581][ C0] x64_sys_call+0x1c60/0x3e70 [ 1496.199419][ C0] do_syscall_64+0xd9/0xf80 [ 1496.204077][ C0] ? clear_bhb_loop+0x40/0x90 [ 1496.208885][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.214920][ C0] RIP: 0033:0x7ffa08f8f749 [ 1496.219448][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1496.239303][ C0] RSP: 002b:00007ffa09dd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1496.247849][ C0] RAX: ffffffffffffffda RBX: 00007ffa091e5fa0 RCX: 00007ffa08f8f749 [ 1496.256020][ C0] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000006 [ 1496.264083][ C0] RBP: 00007ffa09013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1496.272151][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1496.280312][ C0] R13: 00007ffa091e6038 R14: 00007ffa091e5fa0 R15: 00007ffd77cde408 [ 1496.288424][ C0] [ 1496.291907][ C0] Kernel Offset: disabled [ 1496.296303][ C0] Rebooting in 86400 seconds..