last executing test programs: 2.031040981s ago: executing program 0 (id=1340): syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.981123883s ago: executing program 0 (id=1341): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 1.915277905s ago: executing program 0 (id=1343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1.76059168s ago: executing program 1 (id=1345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x86e83e67fbf2b07a}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@gettaction={0x44, 0x32, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x44080) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) 1.693498172s ago: executing program 2 (id=1347): r0 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000010085000000860000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000002d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) 1.544549758s ago: executing program 2 (id=1348): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1.544305598s ago: executing program 1 (id=1349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xa888, 0x0, 0x3a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x0) 1.525587658s ago: executing program 0 (id=1350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x3c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x286}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xa170}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4048805}, 0x0) 1.340530345s ago: executing program 2 (id=1353): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYBLOB="4800000000000000240012800b0001006272696467650000140002"], 0x44}}, 0x4) 1.140407761s ago: executing program 1 (id=1355): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc0100"/56], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081) 1.140186461s ago: executing program 3 (id=1356): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000010085000000860000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000002d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) 1.056857694s ago: executing program 3 (id=1357): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000000)="b9ff03076003008cb89e08f086dddcb3eaa0d36d6b33428d203648143a5a9f6f04b03c307143bd47", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 932.636008ms ago: executing program 3 (id=1358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x86e83e67fbf2b07a}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@gettaction={0x44, 0x32, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x44080) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) 872.11499ms ago: executing program 2 (id=1359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x6, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x0, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x5, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0xb, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0x5b86, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x7, 0x9, 0x167, 0x2, 0x71, 0x9b91}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x329, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x5, 0x1ff, 0x7437ec77, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x2, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0xffff, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff742, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0x8ac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7f7f, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x8, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x1}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5206, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x808f}, {0x741, 0x0, 0x9, 0x7ffffffd, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x0, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x4f}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0x2, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff05, 0x3}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x5, 0x80000000, 0x2}, {0x9, 0xffff8000, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x6, 0x10, 0x3, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x0, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0xffe00000, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0x7, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0xb, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7c0, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80040000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x40003, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 778.471084ms ago: executing program 3 (id=1360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x83}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7df7}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 759.145524ms ago: executing program 0 (id=1361): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 612.4935ms ago: executing program 3 (id=1362): socket$inet(0x2, 0x3, 0x2) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x86c, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r1, 0x0, 0xc000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000001c0)={0x0, &(0x7f0000000100)}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000078c0), 0x0, 0x4040) recvmsg$can_raw(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x10001, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SIOCNRDECOBS(r0, 0x89e2) 491.148314ms ago: executing program 0 (id=1363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xa888, 0x0, 0x3a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x0) 469.061954ms ago: executing program 3 (id=1364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xccd1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x286}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xa170}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048805}, 0x0) 393.246487ms ago: executing program 2 (id=1365): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000010085000000860000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000002d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) 272.435821ms ago: executing program 2 (id=1366): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYRES32=r1, @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000"/72], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r9, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x5, 0x1, 0x6}, 0x10) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="7800000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000480012800b0001006772657461700000380002800400120008001500d57002000500", @ANYRES32, @ANYBLOB, @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) 209.343223ms ago: executing program 1 (id=1367): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000000)="b9ff03076003008cb89e08f086dddcb3eaa0d36d6b33428d203648143a5a9f6f04b03c307143bd47", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 106.000657ms ago: executing program 1 (id=1368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x86e83e67fbf2b07a}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@gettaction={0x44, 0x32, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x44080) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) 0s ago: executing program 1 (id=1369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x3c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x286}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xa170}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4048805}, 0x0) kernel console output (not intermixed with test programs): im3 netdevsim2: renamed from eth2 [ 87.562815][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.678101][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.691981][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.704016][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.714685][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.775164][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.796053][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.808310][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.821621][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.873072][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.962756][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.020355][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.027776][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.073929][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.098809][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.113309][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.120597][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.183136][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.195454][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.229730][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.252686][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.259875][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.281772][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.289000][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.310937][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.318125][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.333358][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.358920][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.366718][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.382760][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.389936][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.440496][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.447722][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.506519][ T51] Bluetooth: hci0: command tx timeout [ 88.586657][ T51] Bluetooth: hci2: command tx timeout [ 88.666982][ T51] Bluetooth: hci1: command tx timeout [ 88.746292][ T51] Bluetooth: hci3: command tx timeout [ 88.881569][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.009661][ T5769] veth0_vlan: entered promiscuous mode [ 89.051840][ T5769] veth1_vlan: entered promiscuous mode [ 89.139930][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.177931][ T5769] veth0_macvtap: entered promiscuous mode [ 89.188009][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.210719][ T5769] veth1_macvtap: entered promiscuous mode [ 89.251387][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.291852][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.314184][ T5772] veth0_vlan: entered promiscuous mode [ 89.331048][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.340553][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.351149][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.360518][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.382596][ T5772] veth1_vlan: entered promiscuous mode [ 89.398600][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.449936][ T5779] veth0_vlan: entered promiscuous mode [ 89.486721][ T5779] veth1_vlan: entered promiscuous mode [ 89.558716][ T5772] veth0_macvtap: entered promiscuous mode [ 89.614496][ T5772] veth1_macvtap: entered promiscuous mode [ 89.629577][ T5773] veth0_vlan: entered promiscuous mode [ 89.650195][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.665727][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.688016][ T5773] veth1_vlan: entered promiscuous mode [ 89.702478][ T5779] veth0_macvtap: entered promiscuous mode [ 89.722565][ T5779] veth1_macvtap: entered promiscuous mode [ 89.766050][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.780213][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.793367][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.811489][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.823131][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.833537][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.845657][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.857357][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.879759][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.891446][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.903251][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.910736][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.923041][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.933649][ T5773] veth0_macvtap: entered promiscuous mode [ 89.949254][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.959976][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.970595][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.982000][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.998557][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.008924][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.022901][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.035346][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.044361][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.067943][ T5773] veth1_macvtap: entered promiscuous mode [ 90.077322][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.087448][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.097238][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.109016][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.178744][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.190804][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.208576][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.219824][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.240310][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.252371][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.268454][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.291869][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.319586][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.331000][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.345235][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.360763][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.371272][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.383235][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.406562][ T5832] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2'. [ 90.428962][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.437919][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.447716][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.457231][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.585857][ T51] Bluetooth: hci0: command tx timeout [ 90.666167][ T51] Bluetooth: hci2: command tx timeout [ 90.694689][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.702831][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.745899][ T51] Bluetooth: hci1: command tx timeout [ 90.773735][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.782841][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.826522][ T51] Bluetooth: hci3: command tx timeout [ 90.847468][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.866097][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.929930][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.953894][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.043778][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.066893][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.152010][ T5842] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.201760][ T5842] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.266257][ T5842] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.326805][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.502667][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.029621][ T23] cfg80211: failed to load regulatory.db [ 92.320110][ T5855] netlink: 'syz.1.11': attribute type 29 has an invalid length. [ 92.371782][ T5855] netlink: 'syz.1.11': attribute type 29 has an invalid length. [ 92.393323][ T5858] netlink: 'syz.1.11': attribute type 29 has an invalid length. [ 92.416819][ T5857] netlink: 'syz.0.12': attribute type 10 has an invalid length. [ 92.424684][ T5857] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.12'. [ 92.676556][ T51] Bluetooth: hci0: command tx timeout [ 92.748262][ T51] Bluetooth: hci2: command tx timeout [ 92.833004][ T51] Bluetooth: hci1: command tx timeout [ 92.906229][ T51] Bluetooth: hci3: command tx timeout [ 92.928087][ T5813] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.200646][ T5771] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 93.217439][ T5771] CPU: 1 PID: 5771 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 93.225048][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.235238][ T5771] Workqueue: hci0 hci_rx_work [ 93.240013][ T5771] Call Trace: [ 93.243340][ T5771] [ 93.246324][ T5771] dump_stack_lvl+0x18c/0x250 [ 93.251070][ T5771] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 93.256771][ T5771] ? show_regs_print_info+0x20/0x20 [ 93.262045][ T5771] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 93.267755][ T5771] sysfs_create_dir_ns+0x26e/0x2a0 [ 93.272941][ T5771] ? sysfs_warn_dup+0xa0/0xa0 [ 93.277669][ T5771] ? do_raw_spin_unlock+0x121/0x230 [ 93.282932][ T5771] kobject_add_internal+0x61c/0xcc0 [ 93.288282][ T5771] kobject_add+0x164/0x240 [ 93.292757][ T5771] ? kobject_init+0x1e0/0x1e0 [ 93.297512][ T5771] ? _raw_spin_unlock+0x3a/0x40 [ 93.302421][ T5771] ? get_device_parent+0x366/0x390 [ 93.307678][ T5771] device_add+0x408/0xc20 [ 93.312421][ T5771] hci_conn_add_sysfs+0xd5/0x1e0 [ 93.317419][ T5771] le_conn_complete_evt+0xf5d/0x1540 [ 93.322757][ T5771] ? hci_event_packet+0x4cb/0x1270 [ 93.327945][ T5771] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 93.334254][ T5771] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 93.339955][ T5771] ? skb_pull_data+0xfb/0x200 [ 93.344688][ T5771] hci_le_conn_complete_evt+0x187/0x440 [ 93.350302][ T5771] ? hci_remote_host_features_evt+0x150/0x150 [ 93.356423][ T5771] hci_event_packet+0x7ba/0x1270 [ 93.361427][ T5771] ? bis_list+0x290/0x290 [ 93.365832][ T5771] ? kcov_remote_start+0x2b/0x7e0 [ 93.370914][ T5771] ? hci_send_to_monitor+0xd7/0x4f0 [ 93.376170][ T5771] hci_rx_work+0x43a/0xd60 [ 93.380743][ T5771] ? process_scheduled_works+0x96f/0x15d0 [ 93.386551][ T5771] process_scheduled_works+0xa5d/0x15d0 [ 93.392195][ T5771] ? worker_attach_to_pool+0x380/0x380 [ 93.397719][ T5771] ? assign_work+0x3d2/0x5d0 [ 93.402373][ T5771] worker_thread+0xa55/0xfc0 [ 93.407016][ T5771] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 93.412956][ T5771] ? _raw_spin_unlock+0x40/0x40 [ 93.417879][ T5771] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 93.423858][ T5771] kthread+0x2fa/0x390 [ 93.427976][ T5771] ? pr_cont_work+0x560/0x560 [ 93.432710][ T5771] ? kthread_blkcg+0xd0/0xd0 [ 93.437343][ T5771] ret_from_fork+0x48/0x80 [ 93.441815][ T5771] ? kthread_blkcg+0xd0/0xd0 [ 93.446457][ T5771] ret_from_fork_asm+0x11/0x20 [ 93.451296][ T5771] [ 93.473186][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 93.489479][ T5771] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 93.506011][ T5771] Bluetooth: hci0: failed to register connection device [ 93.681241][ T5885] nbd: socks must be embedded in a SOCK_ITEM attr [ 94.189250][ T5813] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.580267][ T5759] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.835017][ T5759] usb 4-1: device descriptor read/64, error -71 [ 95.068421][ T51] Bluetooth: hci3: command tx timeout [ 95.348495][ T5759] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.557505][ T5759] usb 4-1: device descriptor read/64, error -71 [ 95.716911][ T5759] usb usb4-port1: attempt power cycle [ 96.129326][ T5813] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 96.157148][ T5813] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 96.167377][ T5813] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.190535][ T5813] usb 1-1: string descriptor 0 read error: -71 [ 96.197822][ T5813] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 96.207126][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 96.224252][ T5813] usb 1-1: can't set config #1, error -71 [ 96.233524][ T5813] usb 1-1: USB disconnect, device number 2 [ 96.327534][ T5759] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.419324][ T5759] usb 4-1: device descriptor read/8, error -71 [ 96.688746][ T5764] udevd[5764]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 96.720548][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'. [ 96.791119][ T5900] netlink: 'syz.0.25': attribute type 1 has an invalid length. [ 96.814991][ T5895] tipc: Started in network mode [ 96.823698][ T5895] tipc: Node identity ba9599d879b, cluster identity 4711 [ 96.846772][ T5900] netlink: 36 bytes leftover after parsing attributes in process `syz.0.25'. [ 96.859240][ T5895] tipc: Enabled bearer , priority 0 [ 96.877822][ T5903] syzkaller0: entered promiscuous mode [ 96.889936][ T5903] syzkaller0: entered allmulticast mode [ 96.921065][ T5895] tipc: Resetting bearer [ 97.031245][ T5917] netlink: set zone limit has 8 unknown bytes [ 97.040242][ T5917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.31'. [ 97.060832][ T5893] tipc: Resetting bearer [ 97.096315][ T5893] tipc: Disabling bearer [ 97.541389][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 97.551428][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 97.558956][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.569060][ T51] Workqueue: hci3 hci_rx_work [ 97.573802][ T51] Call Trace: [ 97.577119][ T51] [ 97.580088][ T51] dump_stack_lvl+0x18c/0x250 [ 97.584833][ T51] ? show_regs_print_info+0x20/0x20 [ 97.590108][ T51] ? load_image+0x400/0x400 [ 97.594710][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 97.599881][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 97.604616][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 97.609877][ T51] kobject_add_internal+0x61c/0xcc0 [ 97.615143][ T51] kobject_add+0x164/0x240 [ 97.619617][ T51] ? kobject_init+0x1e0/0x1e0 [ 97.624343][ T51] ? _raw_spin_unlock+0x3a/0x40 [ 97.629249][ T51] ? get_device_parent+0x366/0x390 [ 97.634420][ T51] device_add+0x408/0xc20 [ 97.638815][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 97.643830][ T51] le_conn_complete_evt+0xf5d/0x1540 [ 97.649175][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 97.655494][ T51] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 97.661202][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 97.666452][ T51] ? skb_pull_data+0xfb/0x200 [ 97.671192][ T51] hci_le_conn_complete_evt+0x187/0x440 [ 97.676803][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 97.682925][ T51] hci_event_packet+0x7ba/0x1270 [ 97.687937][ T51] ? bis_list+0x290/0x290 [ 97.692319][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 97.697571][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 97.702828][ T51] hci_rx_work+0x43a/0xd60 [ 97.707330][ T51] ? process_scheduled_works+0x96f/0x15d0 [ 97.713105][ T51] process_scheduled_works+0xa5d/0x15d0 [ 97.718734][ T51] ? worker_attach_to_pool+0x380/0x380 [ 97.724250][ T51] ? assign_work+0x3d2/0x5d0 [ 97.728909][ T51] worker_thread+0xa55/0xfc0 [ 97.733578][ T51] kthread+0x2fa/0x390 [ 97.737693][ T51] ? pr_cont_work+0x560/0x560 [ 97.742429][ T51] ? kthread_blkcg+0xd0/0xd0 [ 97.747098][ T51] ret_from_fork+0x48/0x80 [ 97.751586][ T51] ? kthread_blkcg+0xd0/0xd0 [ 97.756276][ T51] ret_from_fork_asm+0x11/0x20 [ 97.761151][ T51] [ 97.781606][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 97.811237][ T51] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 97.834727][ T51] Bluetooth: hci3: failed to register connection device [ 97.940235][ T5934] nbd: socks must be embedded in a SOCK_ITEM attr [ 98.616507][ T5936] netlink: 'syz.1.35': attribute type 11 has an invalid length. [ 98.761685][ T5906] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 99.076884][ T5906] usb 4-1: device descriptor read/64, error -71 [ 99.396651][ T5906] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 99.715034][ T5936] gretap1: entered promiscuous mode [ 99.721430][ T5906] usb 4-1: device descriptor read/64, error -71 [ 99.916953][ T5906] usb usb4-port1: attempt power cycle [ 100.445868][ T5906] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 101.524614][ T5763] udevd[5763]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 101.555504][ T5906] usb 4-1: device descriptor read/8, error -71 [ 101.677653][ T5764] udevd[5764]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 101.946864][ T5961] netlink: 348 bytes leftover after parsing attributes in process `syz.1.45'. [ 101.981716][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 102.315997][ T51] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 102.341418][ T5975] Illegal XDP return value 1818361899 on prog (id 7) dev N/A, expect packet loss! [ 102.393490][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'. [ 102.534926][ T5977] nbd: socks must be embedded in a SOCK_ITEM attr [ 102.875640][ T5906] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 105.083104][ T5906] usb 4-1: device descriptor read/8, error -71 [ 105.288401][ T5940] udevd[5940]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 105.316235][ T5906] usb usb4-port1: unable to enumerate USB device [ 105.415316][ T5764] udevd[5764]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 105.669926][ T5997] Zero length message leads to an empty skb [ 105.991648][ T6013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.67'. [ 106.101131][ T5830] hid-generic 0005:16C0:05DF.0001: item fetching failed at offset 0/1 [ 106.136497][ T5830] hid-generic: probe of 0005:16C0:05DF.0001 failed with error -22 [ 106.446876][ T5906] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.615667][ T5906] usb 3-1: device descriptor read/64, error -71 [ 106.675714][ T5759] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.879013][ T5759] usb 1-1: Using ep0 maxpacket: 32 [ 106.905905][ T5906] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.919101][ T5759] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 106.937910][ T5759] usb 1-1: config 0 has no interface number 0 [ 106.944123][ T5759] usb 1-1: config 0 interface 12 has no altsetting 0 [ 106.956083][ T5759] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 106.966161][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.974215][ T5759] usb 1-1: Product: syz [ 106.979862][ T5759] usb 1-1: Manufacturer: syz [ 106.984508][ T5759] usb 1-1: SerialNumber: syz [ 106.995098][ T5759] usb 1-1: config 0 descriptor?? [ 107.095844][ T5906] usb 3-1: device descriptor read/64, error -71 [ 107.236482][ T5906] usb usb3-port1: attempt power cycle [ 107.327012][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.525924][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 107.539797][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.556914][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.573495][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.585253][ T27] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 107.598808][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.615257][ T27] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 107.626344][ T27] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 107.634472][ T27] usb 2-1: Manufacturer: syz [ 107.657014][ T27] usb 2-1: config 0 descriptor?? [ 107.665767][ T5906] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.718684][ T5906] usb 3-1: device descriptor read/8, error -71 [ 107.996287][ T27] rc_core: IR keymap rc-hauppauge not found [ 108.004953][ T27] Registered IR keymap rc-empty [ 108.012021][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 108.019600][ T5906] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.065901][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 108.083204][ T5906] usb 3-1: device descriptor read/8, error -71 [ 108.122259][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 108.137908][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 108.165913][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 108.196074][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 108.216366][ T5906] usb usb3-port1: unable to enumerate USB device [ 108.235764][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 108.256739][ T5759] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71 [ 108.265180][ T5759] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 108.273418][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 108.280868][ T5759] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 108.290225][ T5759] f81534: probe of 1-1:0.12 failed with error -71 [ 108.312453][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 108.327279][ T5759] usb 1-1: USB disconnect, device number 3 [ 108.375972][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 108.413117][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 108.448004][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 108.489260][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 108.525847][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 108.582247][ T27] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 108.593948][ T27] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 108.617990][ T27] usb 2-1: USB disconnect, device number 2 [ 109.905840][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.260940][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 110.385768][ T27] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 110.393978][ T27] usb 2-1: config 0 has no interface number 0 [ 110.498103][ T27] usb 2-1: config 0 interface 12 has no altsetting 0 [ 110.549657][ T27] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 110.558987][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.572916][ T27] usb 2-1: Product: syz [ 110.577205][ T27] usb 2-1: Manufacturer: syz [ 110.581992][ T27] usb 2-1: SerialNumber: syz [ 110.632115][ T27] usb 2-1: config 0 descriptor?? [ 110.678957][ T6113] syz.0.106 (6113) used greatest stack depth: 17896 bytes left [ 110.750553][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.765061][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.777058][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.787805][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.798040][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.812112][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.826797][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.837711][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.848742][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.860069][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.870215][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.882954][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.931750][ T27] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71 [ 111.940352][ T27] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 111.948534][ T27] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 111.956687][ T27] f81534: probe of 2-1:0.12 failed with error -71 [ 111.969455][ T27] usb 2-1: USB disconnect, device number 3 [ 112.461579][ T5906] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.668595][ T5906] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 112.677354][ T5906] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 112.684658][ T5906] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.694295][ T5906] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.713366][ T5906] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.724040][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.736915][ T5906] usb 1-1: Product: syz [ 112.741267][ T5906] usb 1-1: Manufacturer: syz [ 112.753874][ T5906] cdc_wdm 1-1:1.0: skipping garbage [ 112.760681][ T5906] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 113.355458][ T6175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.204194][ T5830] usb 1-1: USB disconnect, device number 4 [ 115.675833][ T5808] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.579489][ T5808] usb 2-1: device descriptor read/64, error -71 [ 116.865736][ T5808] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.015719][ T5808] usb 2-1: device descriptor read/64, error -71 [ 117.146598][ T5808] usb usb2-port1: attempt power cycle [ 117.556036][ T5808] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.586400][ T5808] usb 2-1: device descriptor read/8, error -71 [ 117.858967][ T5808] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 117.896571][ T5808] usb 2-1: device descriptor read/8, error -71 [ 118.016475][ T5808] usb usb2-port1: unable to enumerate USB device [ 118.429089][ T6243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.185945][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 119.461083][ T27] usb 4-1: device descriptor read/64, error -71 [ 119.714260][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'. [ 119.955435][ T27] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 120.175847][ T27] usb 4-1: device descriptor read/64, error -71 [ 120.346493][ T27] usb usb4-port1: attempt power cycle [ 120.775955][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 120.836438][ T27] usb 4-1: device descriptor read/8, error -71 [ 121.091592][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 121.111056][ T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 121.168395][ T27] usb 4-1: device descriptor read/8, error -71 [ 121.298457][ T27] usb usb4-port1: unable to enumerate USB device [ 123.555663][ T5759] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 123.741415][ T6458] syz.0.188 uses obsolete (PF_INET,SOCK_PACKET) [ 123.755724][ T5759] usb 3-1: device descriptor read/64, error -71 [ 124.047923][ T5759] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 124.199922][ T6473] netlink: 'syz.3.195': attribute type 1 has an invalid length. [ 124.216093][ T5759] usb 3-1: device descriptor read/64, error -71 [ 124.280385][ T6473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.303170][ T6477] vlan2: entered allmulticast mode [ 124.316260][ T6477] bond1: entered allmulticast mode [ 124.338152][ T5759] usb usb3-port1: attempt power cycle [ 124.451619][ T6473] bond1: (slave geneve2): making interface the new active one [ 124.462064][ T6473] geneve2: entered allmulticast mode [ 124.472188][ T6473] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 124.745726][ T5759] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 124.799172][ T5759] usb 3-1: device descriptor read/8, error -71 [ 124.825853][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.856049][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 125.036054][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 125.061303][ T9] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 125.070949][ T9] usb 2-1: config 0 has no interface number 0 [ 125.083148][ T9] usb 2-1: config 0 interface 12 has no altsetting 0 [ 125.095680][ T5759] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 125.095899][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 125.135642][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.145172][ T5759] usb 3-1: device descriptor read/8, error -71 [ 125.151674][ T9] usb 2-1: Product: syz [ 125.151696][ T9] usb 2-1: Manufacturer: syz [ 125.151712][ T9] usb 2-1: SerialNumber: syz [ 125.159605][ T9] usb 2-1: config 0 descriptor?? [ 125.297951][ T5759] usb usb3-port1: unable to enumerate USB device [ 126.641480][ T9] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71 [ 126.688482][ T9] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 126.723948][ T9] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 126.734144][ T9] f81534: probe of 2-1:0.12 failed with error -71 [ 126.760557][ T9] usb 2-1: USB disconnect, device number 8 [ 128.636529][ T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 129.097804][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 129.125325][ T23] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 129.145518][ T23] usb 4-1: config 0 has no interface number 0 [ 129.152378][ T23] usb 4-1: config 0 interface 12 has no altsetting 0 [ 129.203344][ T23] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 129.234890][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.278179][ T23] usb 4-1: Product: syz [ 129.282437][ T23] usb 4-1: Manufacturer: syz [ 129.312540][ T23] usb 4-1: SerialNumber: syz [ 129.339993][ T23] usb 4-1: config 0 descriptor?? [ 129.652830][ T6598] netlink: 136 bytes leftover after parsing attributes in process `syz.2.241'. [ 130.401995][ T6624] netlink: 136 bytes leftover after parsing attributes in process `syz.0.254'. [ 130.795743][ T23] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71 [ 130.804118][ T23] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 130.834150][ T23] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 130.844037][ T23] f81534: probe of 4-1:0.12 failed with error -71 [ 130.869673][ T23] usb 4-1: USB disconnect, device number 14 [ 131.257442][ T6654] netlink: 148 bytes leftover after parsing attributes in process `syz.1.267'. [ 132.433379][ T6704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.290'. [ 132.795833][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 132.977041][ T6729] netlink: 16 bytes leftover after parsing attributes in process `syz.0.302'. [ 132.993787][ T23] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.993818][ T23] usb 3-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 132.993837][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.993882][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.002334][ T23] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 133.002366][ T23] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 133.002387][ T23] usb 3-1: Product: syz [ 133.002402][ T23] usb 3-1: Manufacturer: syz [ 133.037903][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.085715][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.095869][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 133.102226][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 133.107780][ T23] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 133.689874][ T6753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.312'. [ 134.376593][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'. [ 134.389135][ T6776] netlink: 'syz.1.319': attribute type 1 has an invalid length. [ 134.408249][ T6776] netlink: 36 bytes leftover after parsing attributes in process `syz.1.319'. [ 135.010503][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 135.020513][ T6801] netlink: 'syz.1.331': attribute type 1 has an invalid length. [ 135.030288][ T6801] netlink: 36 bytes leftover after parsing attributes in process `syz.1.331'. [ 135.085676][ T5906] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 135.375639][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 135.382608][ T5906] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 135.393449][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.404574][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.414391][ T5906] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 135.424389][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.439383][ T5906] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 135.449613][ T5906] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 135.460006][ T5906] usb 1-1: Manufacturer: syz [ 135.476455][ T5906] usb 1-1: config 0 descriptor?? [ 135.554366][ T9] usb 3-1: USB disconnect, device number 10 [ 135.643430][ T6806] syzkaller0: entered promiscuous mode [ 135.651978][ T6806] syzkaller0: entered allmulticast mode [ 135.817193][ T5906] rc_core: IR keymap rc-hauppauge not found [ 135.833407][ T5906] Registered IR keymap rc-empty [ 135.843657][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 135.894419][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 135.939577][ T5906] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 136.081251][ T5906] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 136.113213][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.145802][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.200083][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.246841][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.305725][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.336163][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.392424][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 136.409774][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.445721][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.475723][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.508712][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.557599][ T5906] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 136.567913][ T5906] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 136.589226][ T5906] usb 1-1: USB disconnect, device number 5 [ 137.625444][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'. [ 137.661179][ T6855] netlink: 'syz.2.352': attribute type 1 has an invalid length. [ 137.675846][ T6855] netlink: 36 bytes leftover after parsing attributes in process `syz.2.352'. [ 138.544103][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 139.063828][ T6898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.371'. [ 139.392930][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 139.711265][ T6925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'. [ 140.017083][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 140.575800][ T6516] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 140.775809][ T6516] usb 4-1: Using ep0 maxpacket: 16 [ 140.791440][ T6516] usb 4-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 140.809182][ T6516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.832861][ T6516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 140.853331][ T6516] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 140.878214][ T6516] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.909849][ T6516] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 140.923260][ T6516] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 140.937281][ T6516] usb 4-1: Manufacturer: syz [ 140.957071][ T6516] usb 4-1: config 0 descriptor?? [ 141.019472][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 141.365940][ T6516] rc_core: IR keymap rc-hauppauge not found [ 141.388569][ T6516] Registered IR keymap rc-empty [ 141.407996][ T6516] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.446315][ T6516] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.502834][ T6516] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 141.534201][ T6516] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 141.580437][ T6516] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.636216][ T6516] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.675963][ T6516] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.715825][ T6516] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.755729][ T6516] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.804098][ T6516] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.845790][ T6516] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.876050][ T6516] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.906028][ T6516] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.943389][ T6516] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 142.010961][ T6516] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 142.025754][ T6516] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 142.059539][ T6516] usb 4-1: USB disconnect, device number 15 [ 142.423196][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'. [ 142.737320][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 143.189654][ T27] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 143.415662][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 143.431494][ T27] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 143.452629][ T27] usb 3-1: config 0 has no interface number 0 [ 143.470440][ T27] usb 3-1: config 0 interface 12 has no altsetting 0 [ 143.485351][ T27] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 143.505340][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.519558][ T27] usb 3-1: Product: syz [ 143.529746][ T27] usb 3-1: Manufacturer: syz [ 143.538472][ T27] usb 3-1: SerialNumber: syz [ 143.553974][ T27] usb 3-1: config 0 descriptor?? [ 144.093815][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 144.846669][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 144.954065][ T7058] netlink: 32 bytes leftover after parsing attributes in process `syz.1.429'. [ 145.205954][ T27] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 145.235823][ T27] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 145.243587][ T27] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 145.257355][ T27] f81534: probe of 3-1:0.12 failed with error -71 [ 145.273019][ T27] usb 3-1: USB disconnect, device number 11 [ 145.601710][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.436'. [ 145.611508][ T7073] netlink: 56 bytes leftover after parsing attributes in process `syz.3.436'. [ 147.214066][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.450'. [ 147.387395][ T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 147.595965][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 147.609048][ T23] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 147.623958][ T23] usb 4-1: config 0 has no interface number 0 [ 147.631044][ T23] usb 4-1: config 0 interface 12 has no altsetting 0 [ 147.649003][ T23] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 147.663921][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.682555][ T23] usb 4-1: Product: syz [ 147.691987][ T23] usb 4-1: Manufacturer: syz [ 147.697281][ T23] usb 4-1: SerialNumber: syz [ 147.705355][ T23] usb 4-1: config 0 descriptor?? [ 147.917452][ T7131] netlink: 68 bytes leftover after parsing attributes in process `syz.1.462'. [ 148.160004][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.465'. [ 148.173127][ T7142] netlink: 56 bytes leftover after parsing attributes in process `syz.0.465'. [ 148.973978][ T7155] netlink: 224 bytes leftover after parsing attributes in process `syz.2.470'. [ 149.379669][ T23] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 149.400113][ T23] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 149.419412][ T23] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 149.430354][ T23] f81534: probe of 4-1:0.12 failed with error -71 [ 149.442110][ T23] usb 4-1: USB disconnect, device number 16 [ 149.574491][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'. [ 149.651082][ T7167] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 149.664079][ T7167] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 149.699591][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'. [ 149.805738][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 149.982378][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 149.997028][ T9] usb 3-1: no configurations [ 150.001794][ T9] usb 3-1: can't read configurations, error -22 [ 150.186685][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 150.386699][ T9] usb 3-1: no configurations [ 150.391386][ T9] usb 3-1: can't read configurations, error -22 [ 150.408752][ T9] usb usb3-port1: attempt power cycle [ 150.583251][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.488'. [ 150.631307][ T7197] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 150.642987][ T7197] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 150.674287][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.488'. [ 150.819120][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 150.867629][ T9] usb 3-1: no configurations [ 150.872491][ T9] usb 3-1: can't read configurations, error -22 [ 151.053333][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 151.086561][ T5906] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 151.096880][ T9] usb 3-1: no configurations [ 151.102925][ T9] usb 3-1: can't read configurations, error -22 [ 151.111372][ T9] usb usb3-port1: unable to enumerate USB device [ 151.173265][ T7207] netlink: 68 bytes leftover after parsing attributes in process `syz.0.492'. [ 151.295964][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 151.311204][ T5906] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 151.321248][ T5906] usb 2-1: config 0 has no interface number 0 [ 151.329438][ T5906] usb 2-1: config 0 interface 12 has no altsetting 0 [ 151.347971][ T5906] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 151.366976][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.381808][ T5906] usb 2-1: Product: syz [ 151.398199][ T5906] usb 2-1: Manufacturer: syz [ 151.403867][ T5906] usb 2-1: SerialNumber: syz [ 151.416874][ T5906] usb 2-1: config 0 descriptor?? [ 153.050010][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 153.070739][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 153.092655][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 153.102711][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 153.110610][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 153.118515][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 153.126786][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 153.134599][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 153.142318][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 153.150097][ T5906] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 153.157704][ T5906] f81534 2-1:0.12: f81534_find_config_idx: read failed: -32 [ 153.175804][ T5906] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 153.185146][ T5906] f81534: probe of 2-1:0.12 failed with error -32 [ 153.216989][ T5906] usb 2-1: USB disconnect, device number 9 [ 153.698796][ T7258] __nla_validate_parse: 1 callbacks suppressed [ 153.698812][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 153.737804][ T23] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 153.849237][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 153.956887][ T23] usb 4-1: no configurations [ 153.961659][ T23] usb 4-1: can't read configurations, error -22 [ 154.145920][ T23] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 154.566498][ T23] usb 4-1: no configurations [ 154.575679][ T23] usb 4-1: can't read configurations, error -22 [ 154.597366][ T23] usb usb4-port1: attempt power cycle [ 155.025585][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 155.095733][ T23] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 155.148692][ T23] usb 4-1: no configurations [ 155.159882][ T23] usb 4-1: can't read configurations, error -22 [ 155.201365][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.526'. [ 155.254381][ T7292] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 155.266895][ T7292] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 155.315736][ T23] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 155.376855][ T23] usb 4-1: no configurations [ 155.393018][ T23] usb 4-1: can't read configurations, error -22 [ 155.430243][ T23] usb usb4-port1: unable to enumerate USB device [ 155.464319][ T7302] netlink: 68 bytes leftover after parsing attributes in process `syz.2.530'. [ 156.566568][ T5906] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 156.776211][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 156.789327][ T5906] usb 2-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 156.817952][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.857443][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.880624][ T5906] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 156.905684][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.931251][ T5906] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 156.951800][ T5906] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 156.991235][ T5906] usb 2-1: Manufacturer: syz [ 157.041167][ T5906] usb 2-1: config 0 descriptor?? [ 157.475691][ T5906] rc_core: IR keymap rc-hauppauge not found [ 157.494614][ T5906] Registered IR keymap rc-empty [ 157.510355][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.555742][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.606823][ T5906] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 157.633567][ T5906] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 157.669554][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.717990][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.777482][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.826394][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.869913][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.936486][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.987416][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.036194][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.085785][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.136215][ T5906] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 158.181869][ T5906] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 158.202762][ T5906] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 158.234287][ T5906] usb 2-1: USB disconnect, device number 10 [ 158.328654][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 158.985935][ T6516] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 159.048943][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.578'. [ 159.195801][ T6516] usb 4-1: Using ep0 maxpacket: 32 [ 159.216715][ T6516] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 159.235334][ T6516] usb 4-1: config 0 has no interface number 0 [ 159.256007][ T6516] usb 4-1: config 0 interface 12 has no altsetting 0 [ 159.293739][ T6516] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 159.337936][ T6516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.367851][ T6516] usb 4-1: Product: syz [ 159.387435][ T6516] usb 4-1: Manufacturer: syz [ 159.392114][ T6516] usb 4-1: SerialNumber: syz [ 159.450554][ T6516] usb 4-1: config 0 descriptor?? [ 160.341944][ T7441] fuse: Bad value for 'fd' [ 160.542216][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 161.484373][ T7477] fuse: Bad value for 'fd' [ 161.643543][ T6516] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 161.737386][ T6516] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 161.766032][ T6516] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 161.790590][ T6516] f81534: probe of 4-1:0.12 failed with error -71 [ 161.811977][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 161.823362][ T6516] usb 4-1: USB disconnect, device number 21 [ 163.576251][ T7502] fuse: Bad value for 'fd' [ 163.679062][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'. [ 164.832268][ T7531] fuse: Bad value for 'fd' [ 165.372052][ T7533] netlink: 95 bytes leftover after parsing attributes in process `syz.1.621'. [ 165.622619][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.625'. [ 166.308166][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.630'. [ 166.605300][ T7552] fuse: Bad value for 'fd' [ 167.479832][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.639'. [ 168.120729][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'. [ 168.337451][ T7594] fuse: Bad value for 'fd' [ 168.770065][ T7605] netlink: 'syz.2.651': attribute type 8 has an invalid length. [ 169.466457][ T7614] netlink: 68 bytes leftover after parsing attributes in process `syz.2.655'. [ 169.804224][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.657'. [ 170.688513][ T7633] fuse: Bad value for 'fd' [ 171.874498][ T7664] fuse: Bad value for 'fd' [ 172.104371][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.674'. [ 172.498718][ T7685] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 172.905795][ T7689] fuse: Bad value for 'fd' [ 173.267648][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.686'. [ 173.884355][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.699'. [ 174.106097][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.699'. [ 174.182565][ T7736] netlink: 'syz.3.700': attribute type 12 has an invalid length. [ 177.438365][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 178.105696][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 178.287619][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.309782][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 178.325789][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.335367][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 178.354257][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 178.377560][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.395986][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.411046][ T9] usb 2-1: Product: syz [ 178.415284][ T9] usb 2-1: Manufacturer: syz [ 178.443008][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 178.460770][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 178.497017][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 178.503016][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 178.837344][ T23] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 178.995627][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 179.040806][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.051038][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 179.060525][ T23] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 179.073609][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.099507][ T23] usb 3-1: config 0 descriptor?? [ 179.185924][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 179.193639][ T9] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 179.203056][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.218734][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 179.219779][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 179.241166][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 179.251420][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.272097][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 179.284087][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 179.301209][ T9] usb 1-1: Manufacturer: syz [ 179.309066][ T9] usb 1-1: config 0 descriptor?? [ 179.334804][ T5906] usb 3-1: USB disconnect, device number 16 [ 179.655708][ T9] rc_core: IR keymap rc-hauppauge not found [ 179.665678][ T9] Registered IR keymap rc-empty [ 179.670735][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 179.692478][ T7916] netlink: 32 bytes leftover after parsing attributes in process `syz.3.782'. [ 179.701677][ T7916] netlink: 'syz.3.782': attribute type 32 has an invalid length. [ 179.710755][ T7916] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 179.722686][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 179.768434][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 179.809219][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 179.832433][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 179.865901][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 179.896359][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 179.936236][ T5906] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 179.937152][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 179.979976][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 180.025782][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 180.055712][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 180.085955][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 180.125757][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 180.140531][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.155081][ T5906] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 180.165098][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 180.171563][ T5906] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 180.188224][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.208586][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 180.222476][ T5906] usb 3-1: config 0 descriptor?? [ 180.228073][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 180.254637][ T9] usb 1-1: USB disconnect, device number 6 [ 180.902128][ T23] usb 2-1: USB disconnect, device number 11 [ 181.560314][ T7955] netlink: 'syz.1.792': attribute type 1 has an invalid length. [ 181.633972][ T23] usb 3-1: USB disconnect, device number 17 [ 181.757644][ T7963] netlink: 'syz.2.795': attribute type 10 has an invalid length. [ 181.799252][ T7963] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.808476][ T7963] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.871768][ T7963] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.879039][ T7963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.887373][ T7963] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.895218][ T7963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.925241][ T7963] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 181.948746][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.795'. [ 181.990526][ T7970] bridge_slave_1: left allmulticast mode [ 182.019126][ T7970] bridge_slave_1: left promiscuous mode [ 182.039656][ T7970] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.048292][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 182.069992][ T7970] bridge_slave_0: left allmulticast mode [ 182.075818][ T7970] bridge_slave_0: left promiscuous mode [ 182.081766][ T7970] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.155839][ T7970] bond0: (slave bridge0): Releasing backup interface [ 182.240583][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 182.249427][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 182.265695][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 182.274744][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 182.309837][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 182.338625][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 182.364880][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 182.373433][ T9] usb 1-1: Product: syz [ 182.382291][ T9] usb 1-1: Manufacturer: syz [ 182.395372][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 182.401082][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 182.415122][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 182.422367][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 182.432636][ T7980] syzkaller0: entered promiscuous mode [ 182.438479][ T7980] syzkaller0: entered allmulticast mode [ 183.154028][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 184.169163][ T8009] syzkaller1: entered promiscuous mode [ 184.174716][ T8009] syzkaller1: entered allmulticast mode [ 184.265775][ T51] Bluetooth: hci3: command tx timeout [ 184.342045][ T7949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.846418][ T27] usb 1-1: USB disconnect, device number 7 [ 184.979102][ T8028] netlink: 44 bytes leftover after parsing attributes in process `syz.1.814'. [ 185.085197][ T8033] netlink: 64 bytes leftover after parsing attributes in process `syz.1.816'. [ 185.255668][ T8038] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 185.267403][ T8041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.816'. [ 185.286466][ T27] IPVS: starting estimator thread 0... [ 185.292650][ T8041] netlink: 32 bytes leftover after parsing attributes in process `syz.1.816'. [ 185.309064][ T8041] gretap2: entered promiscuous mode [ 185.396939][ T8042] IPVS: using max 19 ests per chain, 45600 per kthread [ 185.683726][ T8052] veth1_macvtap: left promiscuous mode [ 185.689546][ T8052] macsec0: entered promiscuous mode [ 185.725749][ T6514] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 185.893894][ T8058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.824'. [ 185.903842][ T8058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.824'. [ 185.917852][ T6514] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 185.928536][ T6514] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 185.957413][ T6514] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 185.974371][ T6514] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 185.991284][ T6514] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 186.012141][ T6514] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 186.021361][ T6514] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 186.045748][ T6514] usb 1-1: Product: syz [ 186.049991][ T6514] usb 1-1: Manufacturer: syz [ 186.116038][ T6514] cdc_wdm 1-1:1.0: skipping garbage [ 186.121341][ T6514] cdc_wdm 1-1:1.0: skipping garbage [ 186.136953][ T6514] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 186.150933][ T6514] cdc_wdm 1-1:1.0: Unknown control protocol [ 186.863183][ T8088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.835'. [ 186.873573][ T8088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.835'. [ 186.905103][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 188.104857][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 188.202628][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 188.492024][ T27] usb 1-1: USB disconnect, device number 8 [ 188.805643][ T5906] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 189.015835][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 189.029255][ T5906] usb 3-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 189.045136][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.063366][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 189.082649][ T5906] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 189.100852][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.139293][ T5906] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 189.151070][ T5906] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 189.162310][ T5906] usb 3-1: Manufacturer: syz [ 189.190864][ T5906] usb 3-1: config 0 descriptor?? [ 189.515858][ T5906] rc_core: IR keymap rc-hauppauge not found [ 189.533179][ T5906] Registered IR keymap rc-empty [ 189.536910][ T6515] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 189.540488][ T5906] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.598795][ T5906] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.658008][ T5906] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 189.685501][ T5906] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 189.706382][ T5906] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.745742][ T5906] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.758559][ T6515] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.775695][ T5906] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.789761][ T6515] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 189.822170][ T5906] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.835617][ T6515] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.849704][ T6515] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 189.862076][ T6515] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 189.873378][ T5906] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.891469][ T6515] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.903540][ T6515] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.906137][ T5906] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.923132][ T6515] usb 1-1: Product: syz [ 189.941120][ T6515] usb 1-1: Manufacturer: syz [ 189.962697][ T6515] cdc_wdm 1-1:1.0: skipping garbage [ 189.968595][ T5906] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 189.982581][ T6515] cdc_wdm 1-1:1.0: skipping garbage [ 189.999043][ T6515] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 190.005014][ T6515] cdc_wdm 1-1:1.0: Unknown control protocol [ 190.015833][ T5906] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 190.067868][ T5906] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 190.116245][ T5906] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 190.148520][ T5906] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 190.183633][ T5906] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 190.204351][ T5906] usb 3-1: USB disconnect, device number 18 [ 190.245418][ T8165] __nla_validate_parse: 2 callbacks suppressed [ 190.245435][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.866'. [ 190.315651][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.866'. [ 190.456695][ T8170] bridge1: entered promiscuous mode [ 190.462099][ T8170] bridge1: entered allmulticast mode [ 190.476821][ T8170] team0: Failed to send options change via netlink (err -105) [ 190.484393][ T8170] team0: Port device bridge1 added [ 190.730459][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 191.372802][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.875'. [ 191.428147][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.875'. [ 192.042162][ T8206] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 192.258987][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.884'. [ 192.335911][ T6515] usb 1-1: USB disconnect, device number 9 [ 192.555487][ T8217] syzkaller0: entered promiscuous mode [ 192.575762][ T8217] syzkaller0: entered allmulticast mode [ 193.276058][ T6514] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 193.431415][ T8242] syzkaller0: entered promiscuous mode [ 193.439072][ T8242] syzkaller0: entered allmulticast mode [ 193.479320][ T6514] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.495056][ T6514] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 193.510049][ T6514] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.521559][ T6514] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 193.541732][ T6514] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 193.556134][ T6514] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.565328][ T6514] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.578255][ T6514] usb 4-1: Product: syz [ 193.582886][ T6514] usb 4-1: Manufacturer: syz [ 193.610044][ T6514] cdc_wdm 4-1:1.0: skipping garbage [ 193.615331][ T6514] cdc_wdm 4-1:1.0: skipping garbage [ 193.645953][ T6514] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 193.651945][ T6514] cdc_wdm 4-1:1.0: Unknown control protocol [ 194.376588][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 194.404024][ T8266] syzkaller0: entered promiscuous mode [ 194.409928][ T8266] syzkaller0: entered allmulticast mode [ 194.432339][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.445846][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.456673][ T5759] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 194.655627][ T5759] usb 3-1: Using ep0 maxpacket: 16 [ 194.665362][ T5759] usb 3-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 194.683445][ T5759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.697259][ T5759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 194.707531][ T5759] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 194.717930][ T5759] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.732961][ T5759] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 194.742753][ T5759] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 194.760822][ T5759] usb 3-1: Manufacturer: syz [ 194.768830][ T5759] usb 3-1: config 0 descriptor?? [ 195.098162][ T5759] rc_core: IR keymap rc-hauppauge not found [ 195.104841][ T5759] Registered IR keymap rc-empty [ 195.114658][ T5759] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.126018][ T8275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.914'. [ 195.155654][ T5759] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.186645][ T5759] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 195.219476][ T5759] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 195.251444][ T5759] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.305942][ T5759] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.337606][ T5759] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.395682][ T5759] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.425692][ T5759] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.465764][ T5759] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.495705][ T5759] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.539030][ T5759] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.576151][ T5759] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.626222][ T5759] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 195.670112][ T5759] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 195.689710][ T5759] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 195.720315][ T5759] usb 3-1: USB disconnect, device number 19 [ 196.056189][ T6514] usb 4-1: USB disconnect, device number 22 [ 196.234872][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.923'. [ 196.749612][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.935'. [ 196.914089][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'. [ 197.478538][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.947'. [ 197.495823][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'. [ 198.174942][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.957'. [ 198.258390][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.958'. [ 198.736342][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.969'. [ 198.790587][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'. [ 199.011079][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'. [ 200.830920][ T8465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.842411][ T8465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.853898][ T8465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.869218][ T8465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.882326][ T8465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.920066][ T8465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.957685][ T8465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.002073][ T8465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.022188][ T8465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.033178][ T8465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.045589][ T5906] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 201.057372][ T8465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.083708][ T8465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.186159][ T8492] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 201.248386][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.276586][ T5906] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 201.305991][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.326763][ T5906] usb 1-1: config 0 descriptor?? [ 201.336581][ T5906] pwc: Askey VC010 type 2 USB webcam detected. [ 201.586041][ T5906] pwc: send_video_command error -71 [ 201.595063][ T5906] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 201.622541][ T5906] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 201.664893][ T5906] usb 1-1: USB disconnect, device number 10 [ 202.048549][ T8519] syzkaller0: entered promiscuous mode [ 202.054184][ T8519] syzkaller0: entered allmulticast mode [ 202.575193][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.590625][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.603601][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.632449][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.644724][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.661321][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.675316][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.691064][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.702080][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.718270][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.734735][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.750547][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.188639][ T8549] syzkaller0: entered promiscuous mode [ 203.204406][ T8549] syzkaller0: entered allmulticast mode [ 203.299904][ T8555] __nla_validate_parse: 6 callbacks suppressed [ 203.299915][ T8555] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1024'. [ 203.757366][ T6515] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 203.977199][ T6515] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.991937][ T6515] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 204.026495][ T6515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.081232][ T6515] usb 3-1: config 0 descriptor?? [ 204.138637][ T6515] pwc: Askey VC010 type 2 USB webcam detected. [ 204.365718][ T6515] pwc: send_video_command error -71 [ 204.372444][ T6515] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 204.386089][ T6515] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 204.405218][ T6515] usb 3-1: USB disconnect, device number 20 [ 204.935892][ T6515] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 205.130949][ T6515] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.152887][ T6515] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 205.163824][ T6515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.179312][ T6515] usb 3-1: config 0 descriptor?? [ 205.198709][ T6515] pwc: Askey VC010 type 2 USB webcam detected. [ 205.613440][ T6515] pwc: recv_control_msg error -32 req 02 val 2b00 [ 205.623537][ T6515] pwc: recv_control_msg error -32 req 02 val 2700 [ 205.641210][ T6515] pwc: recv_control_msg error -32 req 02 val 2c00 [ 205.658402][ T6515] pwc: recv_control_msg error -32 req 04 val 1000 [ 205.669152][ T6515] pwc: recv_control_msg error -32 req 04 val 1300 [ 205.676746][ T6515] pwc: recv_control_msg error -32 req 04 val 1400 [ 205.684221][ T6515] pwc: recv_control_msg error -32 req 02 val 2000 [ 205.692460][ T6515] pwc: recv_control_msg error -32 req 02 val 2100 [ 205.706241][ T6515] pwc: recv_control_msg error -32 req 04 val 1500 [ 205.713600][ T6515] pwc: recv_control_msg error -32 req 02 val 2500 [ 205.721212][ T6515] pwc: recv_control_msg error -32 req 02 val 2400 [ 205.729258][ T6515] pwc: recv_control_msg error -32 req 02 val 2600 [ 205.737302][ T6515] pwc: recv_control_msg error -32 req 02 val 2900 [ 205.757507][ T6515] pwc: recv_control_msg error -71 req 02 val 2800 [ 205.764742][ T6515] pwc: recv_control_msg error -71 req 04 val 1100 [ 205.772201][ T6515] pwc: recv_control_msg error -71 req 04 val 1200 [ 205.816617][ T6515] pwc: Registered as video103. [ 205.823566][ T6515] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 205.844260][ T6515] usb 3-1: USB disconnect, device number 21 [ 205.954065][ T8575] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 205.979519][ T8575] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 206.005818][ T8575] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 206.084457][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.099099][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.117323][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.128343][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.139230][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.150232][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.162731][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.173858][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.196693][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.211162][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.224388][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.237521][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.754852][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 206.754895][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 206.838286][ T5908] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 206.860839][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1039'. [ 207.015125][ T8612] lo speed is unknown, defaulting to 1000 [ 207.023408][ T8612] lo speed is unknown, defaulting to 1000 [ 207.035750][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 207.047939][ T5908] usb 2-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 207.049774][ T8612] lo speed is unknown, defaulting to 1000 [ 207.069070][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.095564][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 207.116089][ T5908] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 207.119175][ T8612] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 207.135678][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.163560][ T5908] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 207.173983][ T5908] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 207.193641][ T5908] usb 2-1: Manufacturer: syz [ 207.203146][ T8612] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 207.210812][ T8613] syzkaller0: entered promiscuous mode [ 207.217722][ T5908] usb 2-1: config 0 descriptor?? [ 207.242659][ T8613] syzkaller0: entered allmulticast mode [ 207.525661][ T5908] rc_core: IR keymap rc-hauppauge not found [ 207.531752][ T5908] Registered IR keymap rc-empty [ 207.541446][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 207.586059][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 207.617081][ T6514] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 207.639718][ T5908] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 207.655733][ T5908] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 207.683714][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 207.707179][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 207.744626][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 207.785770][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 207.816935][ T6514] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.826211][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 207.839404][ T6514] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 207.849005][ T6514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.876437][ T6514] usb 4-1: config 0 descriptor?? [ 207.898775][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 207.905240][ T6514] pwc: Askey VC010 type 2 USB webcam detected. [ 207.965786][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.011580][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.061398][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.096025][ T6514] pwc: send_video_command error -71 [ 208.103025][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.113160][ T6514] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 208.131137][ T6514] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 208.144774][ T6514] usb 4-1: USB disconnect, device number 23 [ 208.165770][ T5908] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 208.175087][ T5908] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 208.195231][ T5908] usb 2-1: USB disconnect, device number 12 [ 208.708301][ T6514] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 208.914281][ T6514] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.928172][ T6514] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 208.938434][ T6514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.951408][ T6514] usb 4-1: config 0 descriptor?? [ 208.971912][ T6514] pwc: Askey VC010 type 2 USB webcam detected. [ 209.394435][ T6514] pwc: recv_control_msg error -32 req 02 val 2b00 [ 209.411801][ T6514] pwc: recv_control_msg error -32 req 02 val 2700 [ 209.423576][ T6514] pwc: recv_control_msg error -32 req 02 val 2c00 [ 209.433768][ T6514] pwc: recv_control_msg error -32 req 04 val 1000 [ 209.443843][ T6514] pwc: recv_control_msg error -32 req 04 val 1300 [ 209.455096][ T6514] pwc: recv_control_msg error -32 req 04 val 1400 [ 209.470183][ T6514] pwc: recv_control_msg error -32 req 02 val 2000 [ 209.477658][ T6514] pwc: recv_control_msg error -32 req 02 val 2100 [ 209.495734][ T6514] pwc: recv_control_msg error -32 req 04 val 1500 [ 209.503702][ T6514] pwc: recv_control_msg error -32 req 02 val 2500 [ 209.522428][ T6514] pwc: recv_control_msg error -32 req 02 val 2400 [ 209.529948][ T6514] pwc: recv_control_msg error -32 req 02 val 2600 [ 209.542558][ T6514] pwc: recv_control_msg error -32 req 02 val 2900 [ 209.551874][ T6514] pwc: recv_control_msg error -71 req 02 val 2800 [ 209.562899][ T6514] pwc: recv_control_msg error -71 req 04 val 1100 [ 209.570205][ T6514] pwc: recv_control_msg error -71 req 04 val 1200 [ 209.582721][ T6514] pwc: Registered as video103. [ 209.595967][ T6514] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 209.625238][ T6514] usb 4-1: USB disconnect, device number 24 [ 209.877600][ T8612] lo speed is unknown, defaulting to 1000 [ 209.887413][ T8612] lo speed is unknown, defaulting to 1000 [ 209.894786][ T8612] lo speed is unknown, defaulting to 1000 [ 209.927492][ T8612] lo speed is unknown, defaulting to 1000 [ 210.183744][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1053'. [ 210.870323][ T8677] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1060'. [ 211.150101][ T8687] syzkaller0: entered promiscuous mode [ 211.176852][ T8687] syzkaller0: entered allmulticast mode [ 211.203498][ T8687] 0: reclassify loop, rule prio 0, protocol 700 [ 211.701392][ T8697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1065'. [ 211.771693][ T8699] warning: `syz.0.1066' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 212.931633][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1076'. [ 213.723695][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1090'. [ 214.130764][ T8808] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1098'. [ 214.342075][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 214.925677][ T27] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 215.118001][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 215.145121][ T27] usb 3-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 215.171326][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.195166][ T8851] ip6erspan0: entered promiscuous mode [ 215.202656][ T8851] ip6erspan0: entered allmulticast mode [ 215.208916][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 215.208952][ T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 215.208976][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.255326][ T27] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 215.264833][ T27] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 215.285580][ T27] usb 3-1: Manufacturer: syz [ 215.293750][ T27] usb 3-1: config 0 descriptor?? [ 215.425312][ T8858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1112'. [ 215.465686][ T5906] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 215.646888][ T27] rc_core: IR keymap rc-hauppauge not found [ 215.653076][ T27] Registered IR keymap rc-empty [ 215.666014][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 215.692206][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.720178][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 215.735705][ T5906] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 215.744901][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.769766][ T5906] usb 2-1: config 0 descriptor?? [ 215.778733][ T5906] pwc: Askey VC010 type 2 USB webcam detected. [ 215.797136][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 215.842457][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 215.886997][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 215.935883][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 216.002812][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 216.011805][ T5906] pwc: send_video_command error -71 [ 216.017832][ T5906] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 216.026319][ T5906] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 216.045819][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 216.057137][ T5906] usb 2-1: USB disconnect, device number 13 [ 216.096707][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 216.136056][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 216.206326][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 216.250149][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 216.285650][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 216.328204][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 216.378939][ T27] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 216.394929][ T27] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 216.414146][ T27] usb 3-1: USB disconnect, device number 22 [ 216.596971][ T5906] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 216.807828][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.818969][ T5906] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 216.828715][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.846849][ T5906] usb 2-1: config 0 descriptor?? [ 216.860267][ T5906] pwc: Askey VC010 type 2 USB webcam detected. [ 217.261782][ T5906] pwc: recv_control_msg error -32 req 02 val 2b00 [ 217.275169][ T5906] pwc: recv_control_msg error -32 req 02 val 2700 [ 217.284715][ T5906] pwc: recv_control_msg error -32 req 02 val 2c00 [ 217.296041][ T5906] pwc: recv_control_msg error -32 req 04 val 1000 [ 217.307193][ T5906] pwc: recv_control_msg error -32 req 04 val 1300 [ 217.314771][ T5906] pwc: recv_control_msg error -32 req 04 val 1400 [ 217.323066][ T5906] pwc: recv_control_msg error -32 req 02 val 2000 [ 217.337606][ T5906] pwc: recv_control_msg error -32 req 02 val 2100 [ 217.345461][ T5906] pwc: recv_control_msg error -32 req 04 val 1500 [ 217.354996][ T5906] pwc: recv_control_msg error -32 req 02 val 2500 [ 217.370377][ T5906] pwc: recv_control_msg error -32 req 02 val 2400 [ 217.384078][ T5906] pwc: recv_control_msg error -32 req 02 val 2600 [ 217.406241][ T5906] pwc: recv_control_msg error -32 req 02 val 2900 [ 217.420971][ T5906] pwc: recv_control_msg error -71 req 02 val 2800 [ 217.433445][ T5906] pwc: recv_control_msg error -71 req 04 val 1100 [ 217.440925][ T5906] pwc: recv_control_msg error -71 req 04 val 1200 [ 217.462941][ T5906] pwc: Registered as video103. [ 217.489731][ T5906] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 217.539890][ T5906] usb 2-1: USB disconnect, device number 14 [ 218.049068][ T8935] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1130'. [ 218.167306][ T8941] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 218.196004][ T5906] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 218.405656][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 218.417803][ T5906] usb 1-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 218.436286][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.463620][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 218.479714][ T5906] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 218.492866][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.512202][ T5906] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 218.525105][ T5906] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 218.533612][ T5906] usb 1-1: Manufacturer: syz [ 218.543158][ T5906] usb 1-1: config 0 descriptor?? [ 218.951688][ T5906] rc_core: IR keymap rc-hauppauge not found [ 218.972285][ T5906] Registered IR keymap rc-empty [ 218.984516][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.038961][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.088865][ T5906] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 219.116638][ T5906] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input17 [ 219.135766][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.186795][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.244954][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.295688][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.325728][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.366032][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.417642][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.465716][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.516739][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.565713][ T27] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 219.574040][ T5906] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.628289][ T5906] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 219.651360][ T5906] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 219.676171][ T5906] usb 1-1: USB disconnect, device number 11 [ 219.759433][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.778948][ T27] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 219.792926][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.808576][ T27] usb 3-1: config 0 descriptor?? [ 219.840264][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 220.041176][ T27] pwc: send_video_command error -71 [ 220.065580][ T27] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 220.083706][ T27] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 220.103571][ T27] usb 3-1: USB disconnect, device number 23 [ 220.625815][ T27] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 220.842919][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.869757][ T27] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 220.894153][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.913122][ T27] usb 3-1: config 0 descriptor?? [ 220.950050][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 221.195744][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 221.358889][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 221.376531][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 221.395646][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 221.401225][ T27] pwc: recv_control_msg error -32 req 02 val 2c00 [ 221.415083][ T9] usb 1-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 221.426612][ T27] pwc: recv_control_msg error -32 req 04 val 1000 [ 221.443568][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.460133][ T27] pwc: recv_control_msg error -32 req 04 val 1300 [ 221.467297][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 221.478595][ T27] pwc: recv_control_msg error -32 req 04 val 1400 [ 221.493417][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 221.503925][ T27] pwc: recv_control_msg error -32 req 02 val 2000 [ 221.519349][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.532945][ T27] pwc: recv_control_msg error -32 req 02 val 2100 [ 221.553228][ T27] pwc: recv_control_msg error -32 req 04 val 1500 [ 221.567068][ T27] pwc: recv_control_msg error -32 req 02 val 2500 [ 221.583153][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 221.593175][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 221.594273][ T27] pwc: recv_control_msg error -32 req 02 val 2400 [ 221.611821][ T9] usb 1-1: Manufacturer: syz [ 221.625905][ T27] pwc: recv_control_msg error -32 req 02 val 2600 [ 221.632594][ T9] usb 1-1: config 0 descriptor?? [ 221.645734][ T27] pwc: recv_control_msg error -32 req 02 val 2900 [ 221.668694][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 221.692973][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 221.729454][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 221.748153][ T27] pwc: Registered as video103. [ 221.754847][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 221.816483][ T27] usb 3-1: USB disconnect, device number 24 [ 222.022061][ T9] rc_core: IR keymap rc-hauppauge not found [ 222.035873][ T9] Registered IR keymap rc-empty [ 222.040977][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 222.097409][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 222.137831][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 222.173778][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 222.231244][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 222.266090][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 222.306442][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 222.345894][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 222.387307][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 222.445793][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 222.498242][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 222.555701][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 222.586528][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 222.627079][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 222.686599][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 222.716060][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 222.747935][ T9] usb 1-1: USB disconnect, device number 12 [ 227.110973][ T9185] syzkaller0: entered promiscuous mode [ 227.116911][ T9185] syzkaller0: entered allmulticast mode [ 227.137674][ T9185] TC_ACT_REPEAT abuse ? [ 227.441750][ T9196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1210'. [ 227.552377][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1210'. [ 227.894007][ T9209] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1216'. [ 228.547687][ T9230] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1227'. [ 228.700482][ T9233] syzkaller0: entered promiscuous mode [ 228.714529][ T9233] syzkaller0: entered allmulticast mode [ 229.363603][ T6514] IPVS: starting estimator thread 0... [ 229.465804][ T9253] IPVS: using max 17 ests per chain, 40800 per kthread [ 229.517709][ T9256] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1237'. [ 230.135194][ T9268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.151693][ T9268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.165382][ T9268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.177380][ T9268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.189021][ T9268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.202933][ T9268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.216715][ T9268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.228076][ T9268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.241384][ T9268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.264308][ T9268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.296856][ T9268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.325062][ T9268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.345697][ T5908] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 230.466136][ T5906] lo speed is unknown, defaulting to 1000 [ 230.539385][ T5908] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 230.555617][ T5908] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 230.586712][ T5908] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 230.625657][ T5908] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 230.657429][ T5908] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 230.688495][ T5908] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 230.698151][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 230.714083][ T5908] usb 3-1: Product: syz [ 230.724011][ T5908] usb 3-1: Manufacturer: syz [ 230.756676][ T5908] cdc_wdm 3-1:1.0: skipping garbage [ 230.761973][ T5908] cdc_wdm 3-1:1.0: skipping garbage [ 230.800944][ T5908] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 230.825086][ T5908] cdc_wdm 3-1:1.0: Unknown control protocol [ 231.026861][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1248'. [ 231.039997][ T9285] netlink: 4676 bytes leftover after parsing attributes in process `syz.1.1248'. [ 231.683468][ T9310] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1256'. [ 231.708764][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.741301][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.770287][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.801213][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.836466][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.882096][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.927317][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.958865][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.984407][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.017751][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.050644][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.065933][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.581480][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1259'. [ 232.594330][ T9319] netlink: 4676 bytes leftover after parsing attributes in process `syz.1.1259'. [ 233.157402][ T5908] usb 3-1: USB disconnect, device number 25 [ 234.038951][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.075682][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.096127][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.119301][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.147902][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.180958][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.198554][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.213380][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.224624][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.241338][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.254899][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.273148][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.308360][ T6514] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 234.502717][ T6514] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 234.520939][ T6514] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 234.559614][ T6514] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 234.575834][ T6514] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 234.606140][ T6514] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 234.627884][ T6514] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 234.645266][ T6514] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 234.665113][ T6514] usb 1-1: Product: syz [ 234.680834][ T6514] usb 1-1: Manufacturer: syz [ 234.715027][ T6514] cdc_wdm 1-1:1.0: skipping garbage [ 234.724918][ T6514] cdc_wdm 1-1:1.0: skipping garbage [ 234.741371][ T6514] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 234.759928][ T6514] cdc_wdm 1-1:1.0: Unknown control protocol [ 234.820281][ T9367] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1277'. [ 235.853487][ T9396] syzkaller0: entered promiscuous mode [ 235.864732][ T9396] syzkaller0: entered allmulticast mode [ 236.244264][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 236.289064][ T9402] hsr0: entered promiscuous mode [ 236.311361][ T9402] macvlan2: entered allmulticast mode [ 236.328712][ T9402] hsr0: entered allmulticast mode [ 236.345058][ T9402] hsr_slave_0: entered allmulticast mode [ 236.374020][ T9402] hsr_slave_1: entered allmulticast mode [ 236.462035][ T9409] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1286'. [ 236.541232][ T9404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.569121][ T9404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.599536][ T9404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.616390][ T9404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.634327][ T9404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.651792][ T9404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.671828][ T9404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.684214][ T9404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.701220][ T9404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.712378][ T9404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.729280][ T9404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.744828][ T9404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.021671][ T9411] syzkaller0: entered promiscuous mode [ 237.033522][ T9411] syzkaller0: entered allmulticast mode [ 237.129530][ T5906] usb 1-1: USB disconnect, device number 13 [ 237.449318][ T9417] syzkaller0: entered promiscuous mode [ 237.454866][ T9417] syzkaller0: entered allmulticast mode [ 237.965674][ T5908] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 238.036382][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1297'. [ 238.169875][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 238.178046][ T5908] usb 1-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 238.195707][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1297'. [ 238.213755][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.239449][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 238.260274][ T5908] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 238.280483][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.297876][ T5908] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 238.312147][ T5908] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 238.321657][ T5908] usb 1-1: Manufacturer: syz [ 238.341088][ T5908] usb 1-1: config 0 descriptor?? [ 238.522561][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.558212][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.578437][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.626117][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.661291][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.681373][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.715646][ T5908] rc_core: IR keymap rc-hauppauge not found [ 238.724194][ T5908] Registered IR keymap rc-empty [ 238.742902][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.748476][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.795783][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.815627][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.834940][ T5908] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 238.848409][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.866842][ T5908] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20 [ 238.887955][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.902882][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.910646][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.933831][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.945991][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.992753][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 239.047749][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 239.116656][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 239.176227][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 239.215853][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 239.245706][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 239.285830][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 239.325793][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 239.367388][ T5908] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 239.405872][ T5908] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 239.436544][ T5908] usb 1-1: USB disconnect, device number 14 [ 239.588111][ T9454] syzkaller0: entered promiscuous mode [ 239.605435][ T9454] syzkaller0: entered allmulticast mode [ 239.858875][ T9458] syzkaller0: entered promiscuous mode [ 239.864423][ T9458] syzkaller0: entered allmulticast mode [ 240.126080][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1306'. [ 240.247504][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1306'. [ 240.795994][ T5908] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 240.831421][ T9481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.848737][ T9481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.861315][ T9481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.877288][ T9481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.890351][ T9481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.904231][ T9481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.935293][ T9481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.971279][ T9481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.995922][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 241.011543][ T5908] usb 1-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 241.029330][ T9481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.042508][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.065763][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 241.089980][ T5908] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 241.107142][ T9481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.118690][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.157974][ T5908] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 241.166510][ T9481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.180154][ T5908] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 241.198089][ T9481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.201444][ T5908] usb 1-1: Manufacturer: syz [ 241.232559][ T5908] usb 1-1: config 0 descriptor?? [ 241.617334][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1314'. [ 241.636365][ T5908] rc_core: IR keymap rc-hauppauge not found [ 241.643185][ T5908] Registered IR keymap rc-empty [ 241.670526][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.717807][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.766738][ T5908] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 241.813802][ T5908] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input21 [ 241.860970][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.941023][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.995924][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.050335][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.101848][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.145786][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.203426][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.245736][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.275771][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.292943][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1320'. [ 242.325687][ T5908] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.377786][ T5908] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 242.402255][ T5908] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 242.439441][ T5908] usb 1-1: USB disconnect, device number 15 [ 243.184568][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1330'. [ 243.344439][ T9533] lo speed is unknown, defaulting to 1000 [ 244.051791][ T9564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1342'. [ 244.194991][ T9566] syzkaller0: entered promiscuous mode [ 244.225620][ T9566] syzkaller0: entered allmulticast mode [ 244.517908][ T9577] syzkaller0: entered promiscuous mode [ 244.525690][ T9577] syzkaller0: entered allmulticast mode [ 244.959137][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'. [ 245.300546][ T9603] syzkaller0: entered promiscuous mode [ 245.325882][ T9603] syzkaller0: entered allmulticast mode [ 246.071096][ T9] IPVS: starting estimator thread 0... [ 246.105089][ T9624] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1366'. [ 246.129238][ T9628] syzkaller0: entered promiscuous mode [ 246.146308][ T9628] syzkaller0: entered allmulticast mode [ 246.162501][ T9634] [ 246.164898][ T9634] ====================================================== [ 246.171952][ T9634] WARNING: possible circular locking dependency detected [ 246.179377][ T9634] syzkaller #0 Not tainted [ 246.183828][ T9634] ------------------------------------------------------ [ 246.190883][ T9634] syz.2.1366/9634 is trying to acquire lock: [ 246.196903][ T9634] ffffffff8e51ef18 (nr_node_list_lock){+...}-{2:2}, at: nr_rt_device_down+0xa9/0x720 [ 246.206464][ T9634] [ 246.206464][ T9634] but task is already holding lock: [ 246.213864][ T9634] ffffffff8e51eeb8 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_device_down+0x28/0x720 [ 246.216008][ T9639] IPVS: using max 34 ests per chain, 81600 per kthread [ 246.223473][ T9634] [ 246.223473][ T9634] which lock already depends on the new lock. [ 246.223473][ T9634] [ 246.223482][ T9634] [ 246.223482][ T9634] the existing dependency chain (in reverse order) is: [ 246.250003][ T9634] [ 246.250003][ T9634] -> #2 (nr_neigh_list_lock){+...}-{2:2}: [ 246.257966][ T9634] _raw_spin_lock_bh+0x36/0x50 [ 246.263365][ T9634] nr_rt_ioctl+0x3e2/0xde0 [ 246.268420][ T9634] sock_do_ioctl+0xfc/0x310 [ 246.273493][ T9634] sock_ioctl+0x5ba/0x7e0 [ 246.278389][ T9634] __se_sys_ioctl+0xfd/0x170 [ 246.283547][ T9634] do_syscall_64+0x55/0xa0 [ 246.288561][ T9634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.295062][ T9634] [ 246.295062][ T9634] -> #1 (&nr_node->node_lock){+...}-{2:2}: [ 246.303085][ T9634] _raw_spin_lock_bh+0x36/0x50 [ 246.308568][ T9634] nr_rt_ioctl+0x1e5/0xde0 [ 246.313582][ T9634] sock_do_ioctl+0xfc/0x310 [ 246.318660][ T9634] sock_ioctl+0x5ba/0x7e0 [ 246.323558][ T9634] __se_sys_ioctl+0xfd/0x170 [ 246.328719][ T9634] do_syscall_64+0x55/0xa0 [ 246.333710][ T9634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.340185][ T9634] [ 246.340185][ T9634] -> #0 (nr_node_list_lock){+...}-{2:2}: [ 246.348061][ T9634] __lock_acquire+0x2df1/0x7d40 [ 246.353482][ T9634] lock_acquire+0x19e/0x420 [ 246.358561][ T9634] _raw_spin_lock_bh+0x36/0x50 [ 246.363913][ T9634] nr_rt_device_down+0xa9/0x720 [ 246.369349][ T9634] nr_device_event+0x137/0x150 [ 246.374693][ T9634] notifier_call_chain+0x197/0x380 [ 246.380384][ T9634] __dev_notify_flags+0x16e/0x310 [ 246.386006][ T9634] dev_change_flags+0xe8/0x1a0 [ 246.391355][ T9634] dev_ioctl+0x7b4/0x1140 [ 246.396274][ T9634] sock_do_ioctl+0x239/0x310 [ 246.401451][ T9634] sock_ioctl+0x5ba/0x7e0 [ 246.406352][ T9634] __se_sys_ioctl+0xfd/0x170 [ 246.411516][ T9634] do_syscall_64+0x55/0xa0 [ 246.416511][ T9634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.423062][ T9634] [ 246.423062][ T9634] other info that might help us debug this: [ 246.423062][ T9634] [ 246.433336][ T9634] Chain exists of: [ 246.433336][ T9634] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 246.433336][ T9634] [ 246.447217][ T9634] Possible unsafe locking scenario: [ 246.447217][ T9634] [ 246.454711][ T9634] CPU0 CPU1 [ 246.460111][ T9634] ---- ---- [ 246.465512][ T9634] lock(nr_neigh_list_lock); [ 246.470234][ T9634] lock(&nr_node->node_lock); [ 246.477588][ T9634] lock(nr_neigh_list_lock); [ 246.484836][ T9634] lock(nr_node_list_lock); [ 246.489476][ T9634] [ 246.489476][ T9634] *** DEADLOCK *** [ 246.489476][ T9634] [ 246.497651][ T9634] 2 locks held by syz.2.1366/9634: [ 246.502909][ T9634] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 246.511784][ T9634] #1: ffffffff8e51eeb8 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_device_down+0x28/0x720 [ 246.521866][ T9634] [ 246.521866][ T9634] stack backtrace: [ 246.527796][ T9634] CPU: 0 PID: 9634 Comm: syz.2.1366 Not tainted syzkaller #0 [ 246.535304][ T9634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 246.545421][ T9634] Call Trace: [ 246.548738][ T9634] [ 246.551706][ T9634] dump_stack_lvl+0x18c/0x250 [ 246.556536][ T9634] ? load_image+0x400/0x400 [ 246.561123][ T9634] ? show_regs_print_info+0x20/0x20 [ 246.566410][ T9634] ? print_circular_bug+0x12b/0x1a0 [ 246.571672][ T9634] check_noncircular+0x2fc/0x400 [ 246.576695][ T9634] ? print_deadlock_bug+0x5d0/0x5d0 [ 246.581949][ T9634] ? lockdep_lock+0xf5/0x230 [ 246.586606][ T9634] ? lockdep_unlock+0x146/0x2e0 [ 246.591507][ T9634] ? _find_first_zero_bit+0xd3/0x100 [ 246.596864][ T9634] __lock_acquire+0x2df1/0x7d40 [ 246.601789][ T9634] ? verify_lock_unused+0x140/0x140 [ 246.607143][ T9634] ? verify_lock_unused+0x140/0x140 [ 246.612416][ T9634] ? rt6_disable_ip+0x745/0x7b0 [ 246.617339][ T9634] lock_acquire+0x19e/0x420 [ 246.621979][ T9634] ? nr_rt_device_down+0xa9/0x720 [ 246.627059][ T9634] ? read_lock_is_recursive+0x20/0x20 [ 246.632489][ T9634] ? do_raw_spin_lock+0x11f/0x2c0 [ 246.637574][ T9634] ? __rwlock_init+0x150/0x150 [ 246.642455][ T9634] ? __local_bh_enable_ip+0x13a/0x1c0 [ 246.647855][ T9634] ? nr_rt_device_down+0xa9/0x720 [ 246.652912][ T9634] _raw_spin_lock_bh+0x36/0x50 [ 246.657693][ T9634] ? nr_rt_device_down+0xa9/0x720 [ 246.662736][ T9634] nr_rt_device_down+0xa9/0x720 [ 246.667616][ T9634] ? do_raw_spin_unlock+0x121/0x230 [ 246.672866][ T9634] nr_device_event+0x137/0x150 [ 246.677690][ T9634] notifier_call_chain+0x197/0x380 [ 246.682868][ T9634] __dev_notify_flags+0x16e/0x310 [ 246.687941][ T9634] ? __dev_change_flags+0x6a0/0x6a0 [ 246.693168][ T9634] ? __dev_change_flags+0x4d4/0x6a0 [ 246.698485][ T9634] ? dev_get_flags+0x1c0/0x1c0 [ 246.703283][ T9634] ? mutex_lock_nested+0x20/0x20 [ 246.708242][ T9634] dev_change_flags+0xe8/0x1a0 [ 246.713031][ T9634] dev_ioctl+0x7b4/0x1140 [ 246.717390][ T9634] sock_do_ioctl+0x239/0x310 [ 246.722051][ T9634] ? sock_show_fdinfo+0xb0/0xb0 [ 246.726995][ T9634] sock_ioctl+0x5ba/0x7e0 [ 246.731355][ T9634] ? sock_poll+0x3e0/0x3e0 [ 246.735829][ T9634] ? bpf_lsm_file_ioctl+0x9/0x10 [ 246.740830][ T9634] ? security_file_ioctl+0x80/0xa0 [ 246.746009][ T9634] ? sock_poll+0x3e0/0x3e0 [ 246.750539][ T9634] __se_sys_ioctl+0xfd/0x170 [ 246.755161][ T9634] do_syscall_64+0x55/0xa0 [ 246.759606][ T9634] ? clear_bhb_loop+0x40/0x90 [ 246.764360][ T9634] ? clear_bhb_loop+0x40/0x90 [ 246.769208][ T9634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.775680][ T9634] RIP: 0033:0x7ff7afd9c799 [ 246.780168][ T9634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.799857][ T9634] RSP: 002b:00007ff7adbb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.808505][ T9634] RAX: ffffffffffffffda RBX: 00007ff7b0016270 RCX: 00007ff7afd9c799 [ 246.816540][ T9634] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000a [ 246.824564][ T9634] RBP: 00007ff7afe32c99 R08: 0000000000000000 R09: 0000000000000000 [ 246.832593][ T9634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.840614][ T9634] R13: 00007ff7b0016308 R14: 00007ff7b0016270 R15: 00007fff3b2f7ff8 [ 246.848656][ T9634] [ 246.900337][ T9629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1366'. [ 246.910955][ T9629] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1366'. [ 246.929953][ T9629] gretap1: entered promiscuous mode [ 255.869394][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.875786][ T1280] ieee802154 phy1 wpan1: encryption failed: -22