last executing test programs: 6.551870821s ago: executing program 2 (id=4575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x20000880) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0x9, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x57, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x5, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x1, 0x9, 0x8001, 0xffff, 0x5, 0x3a1838ea, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 6.127369012s ago: executing program 2 (id=4583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 5.984275456s ago: executing program 0 (id=4585): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x40}}, 0x0) close(0x4) 5.897726318s ago: executing program 2 (id=4587): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x5, 0x5, 0x9206, 0x5}, 0x3, 0x4}, [{0xe, 0x7, 0x3, 0x8, 0x3, 0x4df}, {0x8, 0x8, 0x40, 0x8, 0x5, 0x1}, {0x7e12f9c5, 0xffffff61, 0x0, 0x6b5, 0x80000000, 0x101}, {0x9, 0xb1f, 0x3, 0x1, 0x1, 0x2}, {0xfffffe01, 0x5, 0xb91, 0x8, 0x6, 0x4}, {0x1, 0x0, 0x0, 0xe49, 0x4, 0x15}, {0x1, 0xa, 0xc79, 0x5, 0x401, 0xfffffff4}, {0x7, 0x8c0, 0x5, 0xffffffff, 0x2, 0x10001}, {0xfffffffa, 0x1, 0x7, 0xffffffff, 0x1, 0xffffffff}, {0x1, 0x100, 0x0, 0x80000000, 0x7f6b, 0x1}, {0x154, 0x8, 0xb, 0x2, 0x7fffffff, 0xb3e4}, {0x36, 0x7, 0xffff, 0xfffffff7, 0x10, 0xf7bb}, {0x8, 0x7, 0x401, 0x1, 0x400, 0x8565}, {0x5, 0x4, 0x80000000, 0xc50, 0x7, 0xfffffffd}, {0x4, 0x101, 0x2, 0x6, 0x6, 0x2}, {0x1000, 0x800, 0xe, 0x1, 0x7ff, 0xe}, {0x2, 0x9, 0x7, 0x3, 0xfffffff9, 0x4}, {0x1, 0x200, 0x975f, 0x2, 0x400, 0x3dc4}, {0x100, 0x200, 0x98, 0xf9d6, 0xb}, {0x1, 0x83, 0xf9, 0x5, 0x3}, {0x8000, 0x7, 0x1, 0x9, 0xc9d, 0x2}, {0x81, 0x7fffffff, 0x2, 0x7fff, 0x7, 0x5}, {0x80, 0x4, 0x76, 0x1, 0xf403, 0xfffffff1}, {0xffff, 0xedf, 0xc, 0x8, 0x5, 0x1}, {0x0, 0x4, 0x8000, 0xfa8, 0x6, 0x1}, {0xa7d, 0x6, 0x6, 0x80, 0x3f9, 0x9}, {0x2f, 0xdfb, 0x8, 0x4b, 0x7, 0x1}, {0x9, 0x7ff, 0xa, 0x280000, 0x2, 0x1}, {0x138, 0x51d, 0xf, 0x6, 0x4, 0x7}, {0x10001, 0x6, 0x8, 0x8, 0x4, 0xb}, {0x4, 0x2be2, 0x79f29323, 0x3ff, 0x2, 0x4}, {0xd4, 0x5, 0x5, 0x7, 0xea4c, 0xa4b1}, {0x993, 0x4, 0xfff, 0x23b06916, 0x6, 0xfffffffc}, {0x6, 0x4a6, 0x3, 0x80, 0x7ff, 0xa}, {0x7, 0xfffffffb, 0x0, 0xffffffff, 0x1, 0xfb3}, {0x5, 0xe6, 0xfff, 0x0, 0x1, 0x400}, {0xfffff1a2, 0xa, 0x7, 0xa1, 0xfffff800, 0x4}, {0xbe, 0x2000, 0xffffffff, 0xfffffc00, 0xe06, 0x6}, {0x20100, 0x9c86, 0x8, 0x4, 0x4, 0x9497}, {0xd, 0x8001, 0xf2b, 0xffffffff, 0x3, 0xfffffff3}, {0x2, 0x80000000, 0x5a, 0x1, 0x5, 0x6}, {0x4, 0xc378, 0x8, 0xf, 0x7, 0x8144}, {0x6, 0x81, 0x5, 0x5, 0x3}, {0x9, 0x8001, 0xe10, 0x783, 0x7, 0x3}, {0x7fff, 0x1, 0xe05, 0xffffad2a, 0x4, 0x99c}, {0x99eb, 0x6, 0x5, 0x2, 0x2, 0x1fe0000}, {0x800, 0x9, 0x2a3b, 0x4, 0x7, 0x9}, {0x2, 0x6, 0x0, 0x9, 0xe, 0xe}, {0x65d, 0x8000, 0x6, 0xfffffffe, 0x20000400, 0x1}, {0xfffffff8, 0x7, 0x6, 0xd4, 0x1000, 0x4}, {0x0, 0xc, 0x5, 0x3, 0xb9, 0x3}, {0x5, 0xfffffffd, 0x9, 0x4, 0x4, 0x6}, {0x1, 0x0, 0x4, 0x100, 0x9, 0xa}, {0x3, 0x2, 0x10, 0x2, 0x5, 0x3}, {0xfffffff8, 0xe, 0xfd0, 0x9, 0x0, 0x7fff}, {0xb, 0x7ff, 0x7, 0xffffff81, 0x9, 0x3}, {0x4, 0xff, 0x10001, 0x0, 0x3, 0x4}, {0x8, 0x8, 0x3ff, 0xbf, 0x7, 0x10}, {0x2f, 0xfffffe00, 0xc6000000, 0x81, 0x6, 0xffffff01}, {0x5, 0x44bd, 0x3, 0x8, 0x0, 0xffffffff}, {0x800000, 0xd, 0x4737, 0xf0000, 0x8405, 0x3}, {0xa4, 0x7, 0x7, 0x7, 0x6, 0xda73}, {0x9, 0x0, 0x7, 0x8971, 0x8, 0x8}, {0x8, 0x1, 0x6, 0x68, 0x7fff, 0x4}, {0x1, 0xf9c3, 0x5, 0x9, 0x0, 0x6c}, {0x5, 0x6, 0x5, 0x1, 0xf, 0x9}, {0x1, 0xf580, 0x3ff, 0x6, 0x6e, 0x6}, {0xad, 0x9, 0x7fff, 0x6, 0x8}, {0x862, 0x0, 0x2800000, 0x2, 0x8, 0x8}, {0x4, 0x90000, 0x2, 0x8d1, 0x1, 0x4}, {0x200, 0xb, 0x40, 0x9, 0xfffffff9, 0x2}, {0x8, 0xdbb, 0x4, 0x3, 0x7, 0xfff}, {0x7, 0x4, 0xce, 0x9, 0x6, 0x4}, {0x5ae2, 0x8, 0x8, 0x8, 0xfffffff0, 0x3ff}, {0x1, 0x5, 0x8, 0x7ff, 0x101, 0xffffffff}, {0x12, 0xa7, 0x6, 0x0, 0xc6, 0x4}, {0x4, 0x9, 0x9, 0xa, 0x9}, {0x84d5, 0xfffffffe, 0x7fffffff, 0x5, 0xf}, {0x5, 0x40, 0x8, 0xa, 0x6, 0x2}, {0x4, 0x100, 0x4d90, 0xf, 0xffffffd7, 0xffffffff}, {0x3, 0x10001, 0x2, 0x6, 0x82dc, 0xffff}, {0x6, 0x1, 0x2, 0xfffff402, 0x2}, {0x4, 0x6, 0xca6, 0x6, 0xb, 0xa}, {0xa, 0x4, 0x9, 0x8ec1, 0x1, 0x10000}, {0x2, 0x2, 0x1ff, 0x171a9022, 0xf4, 0x9000000}, {0x313, 0xfffffff8, 0x1, 0x0, 0x2, 0x1}, {0x5841, 0xfffffffb, 0x3, 0x4, 0x3ff, 0x9f}, {0x10f, 0xca1c, 0x5, 0x8001, 0xa, 0x4}, {0x766, 0x7, 0x7, 0x7, 0x1, 0x5}, {0x7, 0xba, 0xfffffffd, 0x8001, 0x7ffd}, {0x1, 0x23, 0x3, 0x335, 0x4, 0x5}, {0x2, 0xc, 0x9, 0x0, 0x4, 0x8000}, {0x1, 0x8, 0xb7, 0x3, 0x9, 0x4}, {0x3c, 0x4, 0x1000, 0x2, 0xfff, 0x80000001}, {0x24, 0xffff, 0xd513, 0x748, 0x6eea, 0x4}, {0x57, 0x3, 0x40, 0xb, 0x3080d7c0}, {0x5, 0x7, 0x7, 0x48, 0x9, 0x5}, {0x5, 0xf01, 0x2, 0x80001d, 0x2, 0x7}, {0x7fff, 0x66019165, 0x8, 0x6, 0x4}, {0x22, 0x0, 0x0, 0x168b, 0x9, 0x5}, {0x4, 0x9, 0x3, 0x3, 0x7fffffff, 0x3}, {0x6, 0x7, 0xfffffff5, 0x4, 0x9, 0x9}, {0x4, 0x8, 0x4, 0x8000, 0x8, 0x4}, {0x16, 0x6, 0x7, 0xc00, 0xede, 0x5}, {0x9, 0x4, 0x7fffffff, 0x5, 0x7, 0x6125d06a}, {0xfff, 0x9, 0xda1, 0x521, 0x101, 0xd}, {0xdb2b, 0x1, 0x1, 0x9, 0x5, 0x800}, {0x3, 0x200, 0xfffffffe, 0xff, 0xff, 0x2}, {0x2, 0x5, 0x7, 0x62d, 0x5, 0x3ff}, {0x600, 0x4, 0x3, 0xb42f, 0x5, 0x3}, {0x401, 0x9, 0xc44, 0x3, 0x2, 0x6ea9894}, {0x624, 0xecdb, 0x8000, 0x6, 0x1f, 0x7}, {0x9, 0x2, 0x8, 0xf71, 0xfb0, 0x5}, {0x3, 0x4, 0x5908c254, 0x45c8, 0x2, 0x4}, {0x6, 0xff, 0x20000, 0x2, 0x221, 0x30000}, {0x8, 0x59bc, 0x7, 0x4, 0x0, 0x6}, {0xfffff001, 0x80000000, 0x8, 0x4, 0x644, 0x2}, {0x7, 0x2, 0x6, 0x9, 0xe, 0x3}, {0x2, 0x5, 0x101, 0x9199, 0x694, 0x66c}, {0x4, 0x2, 0x7, 0xc2, 0x69, 0xe5}, {0x8, 0x205a52ca, 0xdc, 0x3, 0x5, 0x4}, {0x2, 0x7, 0x7, 0xf47e, 0x8, 0x8}, {0x7fff, 0x2, 0x9, 0x3ff, 0x7, 0x5}, {0x0, 0x80000000, 0x5, 0x100, 0x6, 0x400}, {0x7, 0x3f8, 0x4, 0x2, 0x7, 0xfffffff9}, {0x7bce, 0xfffffffc, 0xfffffff8, 0x8001, 0x5, 0xf16}, {0xe, 0x3, 0x34b1, 0xb9a, 0x81, 0x800}, {0x101, 0x7, 0x4, 0x10000, 0x68063168, 0x81}], [{0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x86f1faf2efed1208}, {0x4}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x4}, {0x2}, {0x4}, {0x4}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0xa22732b51f90c34a}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x6, 0x1}, {0x1, 0xa77fa159ed31b0c3}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2}, {0x0, 0x1}, {0x4, 0xa845cf6605cfc9f5}, {0x1, 0x222ada2ec63376b7}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 5.544371168s ago: executing program 0 (id=4589): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0x5d, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.325753624s ago: executing program 0 (id=4591): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r12, r9, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) 2.21669417s ago: executing program 2 (id=4594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0xea9c1c76c4b5156c, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.002344656s ago: executing program 2 (id=4598): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ff1df4b7a000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2911010020100000140012800c000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="0500110002"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) 1.940413527s ago: executing program 0 (id=4599): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, 0x0, 0x20000000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2021}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(r0, &(0x7f0000008500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)}}], 0x1, 0x4081) 1.940200158s ago: executing program 3 (id=4600): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getnexthop={0x18, 0x6a, 0xc8dc08aaea25e219, 0x70bd29, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.704351144s ago: executing program 3 (id=4603): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000000440)=""/115, 0x73}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000003780)=""/84, 0x54}, 0x10062) 1.704105734s ago: executing program 0 (id=4604): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'bond_slave_1\x00', 0x2000}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 1.574561228s ago: executing program 2 (id=4605): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000100001"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0x4}}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000100)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x2386, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0xf, &(0x7f0000004280)=ANY=[], &(0x7f0000004380)='syzkaller\x00', 0x6, 0x20, &(0x7f0000000000)=""/32, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220b000000b04f344ca67bab"], 0x0}, 0x0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 1.554357488s ago: executing program 3 (id=4606): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9", 0xd}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7", 0x16}], 0x4}}], 0x3, 0x0) 1.49119727s ago: executing program 4 (id=4607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.297453415s ago: executing program 1 (id=4608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x12, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.182843078s ago: executing program 4 (id=4609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x20000880) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0x9, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x57, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x5, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x1, 0x9, 0x8001, 0xffff, 0x5, 0x3a1838ea, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.030869962s ago: executing program 1 (id=4610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) close(0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000380)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) 970.998524ms ago: executing program 4 (id=4611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4894) 860.394117ms ago: executing program 1 (id=4612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0xea9c1c76c4b5156c, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 851.405027ms ago: executing program 0 (id=4613): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x6, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 764.70233ms ago: executing program 4 (id=4614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 708.915571ms ago: executing program 1 (id=4615): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ff1df4b7a000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2911010020100000140012800c000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="0500110002"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) 586.034765ms ago: executing program 3 (id=4616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0x5d, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 540.661066ms ago: executing program 4 (id=4617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8064}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {0x0}], 0x2}, 0x5) 396.14768ms ago: executing program 3 (id=4618): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x60000, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xb}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0) 395.45644ms ago: executing program 1 (id=4619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 110.707327ms ago: executing program 4 (id=4620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 318.32µs ago: executing program 1 (id=4621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x12, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 3 (id=4622): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_newrule={0x30, 0x20, 0x800, 0x70bd2b, 0x25dfdbff, {0x2, 0x14, 0x10, 0x6, 0x4, 0x0, 0x0, 0x7, 0x10}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xee}, @FRA_FLOW={0x8, 0xb, 0x8000}]}, 0x30}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@hopopts_2292={{0x88, 0x29, 0x36, {0x3b, 0xd, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6c, 0x8, [0x2, 0xfffffffffffffff7, 0x6, 0x7fff, 0x6, 0x7]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn]}}}, @hopopts={{0x78, 0x29, 0x36, {0x5e, 0xb, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x966, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1, 0x3, "2bdb86"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}], 0x118}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xa11, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): , got 36) [ 811.772101][ T14] usb 2-1: config 255 has an invalid descriptor of length 72, skipping remainder of the config [ 811.791860][ T14] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 13 [ 811.815502][ T14] usb 2-1: config index 2 descriptor too short (expected 18482, got 36) [ 811.823955][ T14] usb 2-1: config 255 has an invalid descriptor of length 72, skipping remainder of the config [ 811.835085][ T14] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 13 [ 811.880365][ T14] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 811.890162][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.910447][ T14] usb 2-1: Product: syz [ 811.915263][ T14] usb 2-1: Manufacturer: syz [ 811.919938][ T14] usb 2-1: SerialNumber: syz [ 812.151290][T15088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.171821][T15088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.184907][T15088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.197606][T15088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.217530][ T14] usb 2-1: USB disconnect, device number 39 [ 812.805356][ T14] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 813.019113][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 813.036117][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 192, setting to 8 [ 813.047908][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 813.061227][ T14] usb 2-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 813.071113][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.081528][ T14] usb 2-1: config 0 descriptor?? [ 813.101796][ T14] usbhid 2-1:0.0: can't add hid device: -22 [ 813.118063][ T14] usbhid: probe of 2-1:0.0 failed with error -22 [ 813.307360][ T14] usb 2-1: USB disconnect, device number 40 [ 815.219916][T15127] device syzkaller0 entered promiscuous mode [ 815.243125][T15133] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 815.684705][ T14] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 815.894422][ T14] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 815.920483][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.947755][ T14] usb 3-1: Product: syz [ 815.956820][ T14] usb 3-1: Manufacturer: syz [ 815.967203][ T14] usb 3-1: SerialNumber: syz [ 817.113240][ T14] rtl8150 3-1:1.0: couldn't reset the device [ 817.126363][ T14] rtl8150: probe of 3-1:1.0 failed with error -5 [ 818.709160][ T125] usb 3-1: USB disconnect, device number 60 [ 818.918415][T15171] device syzkaller0 entered promiscuous mode [ 819.367911][T15181] device syzkaller0 entered promiscuous mode [ 820.208849][T15198] device syzkaller0 entered promiscuous mode [ 823.893899][T15201] device bridge_slave_0 left promiscuous mode [ 823.900726][T15201] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.913201][T15201] device bridge_slave_1 left promiscuous mode [ 823.919887][T15201] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.931528][T15201] bond0: (slave bond_slave_0): Releasing backup interface [ 823.940757][T15201] bond0: (slave bond_slave_1): Releasing backup interface [ 823.955861][T15201] team0: Port device team_slave_0 removed [ 823.963536][T15201] team0: Port device team_slave_1 removed [ 823.984816][T15201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.992833][T15201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.044476][ T125] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 824.107347][T15215] device syzkaller0 entered promiscuous mode [ 824.147793][T15229] device syzkaller0 entered promiscuous mode [ 824.586707][ T4941] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 824.724548][ T4324] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 824.934515][ T4324] usb 3-1: Using ep0 maxpacket: 16 [ 824.949182][ T4324] usb 3-1: unable to get BOS descriptor or descriptor too short [ 824.979287][ T4324] usb 3-1: config 7 has an invalid interface number: 106 but max is 3 [ 825.005495][ T4324] usb 3-1: config 7 has an invalid interface number: 182 but max is 3 [ 825.032112][ T4324] usb 3-1: config 7 has an invalid interface number: 148 but max is 3 [ 825.043438][ T4324] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 825.067730][ T4324] usb 3-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 825.093712][ T4324] usb 3-1: config 7 has no interface number 0 [ 825.113638][ T4324] usb 3-1: config 7 has no interface number 1 [ 825.135254][ T4324] usb 3-1: config 7 has no interface number 2 [ 825.161884][ T4324] usb 3-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 825.212555][ T4324] usb 3-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 825.241749][ T4324] usb 3-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 825.279797][ T4324] usb 3-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 825.322474][ T4324] usb 3-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 825.360448][ T4324] usb 3-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 825.397742][ T4324] usb 3-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 825.432231][ T4324] usb 3-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 825.469215][ T4324] usb 3-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 825.495340][ T4324] usb 3-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 825.518437][ T4324] usb 3-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 825.541670][ T4324] usb 3-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 825.564705][ T4324] usb 3-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 825.587856][ T4324] usb 3-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 825.609963][ T4324] usb 3-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 825.637731][ T4324] usb 3-1: config 7 interface 106 has no altsetting 0 [ 825.653931][ T4324] usb 3-1: config 7 interface 182 has no altsetting 0 [ 825.668932][ T4324] usb 3-1: config 7 interface 148 has no altsetting 0 [ 825.696891][ T4324] usb 3-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 825.707945][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.717816][ T4324] usb 3-1: Product: syz [ 825.722048][ T4324] usb 3-1: Manufacturer: syz [ 825.728599][ T4324] usb 3-1: SerialNumber: syz [ 826.005217][ T4324] usb 3-1: USB disconnect, device number 61 [ 826.276145][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 828.963903][T15304] device syzkaller0 entered promiscuous mode [ 829.453933][T15328] device syzkaller0 entered promiscuous mode [ 829.574610][ T4518] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 829.765322][ T4518] usb 3-1: Using ep0 maxpacket: 32 [ 829.773257][ T4518] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 829.807922][ T4518] usb 3-1: config 0 interface 0 has no altsetting 0 [ 829.831096][ T4518] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 829.858912][ T4518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.888239][ T4518] usb 3-1: config 0 descriptor?? [ 830.596914][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 830.681802][ T4518] corsair-cpro 0003:1B1C:0C10.0024: unknown main item tag 0x0 [ 830.704439][ T4518] corsair-cpro 0003:1B1C:0C10.0024: unknown main item tag 0x0 [ 830.728321][ T4518] corsair-cpro 0003:1B1C:0C10.0024: item fetching failed at offset 3/5 [ 830.768326][ T4518] corsair-cpro: probe of 0003:1B1C:0C10.0024 failed with error -22 [ 832.315528][ T125] usb 3-1: USB disconnect, device number 62 [ 834.242037][T15341] device syzkaller0 entered promiscuous mode [ 834.295701][ T4518] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 835.235143][ T4518] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 837.488916][T15382] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 837.530364][T15382] device syzkaller0 entered promiscuous mode [ 841.029436][T15427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 841.060056][T15427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 841.094764][T15427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 841.135763][T15427] device bridge_slave_0 left promiscuous mode [ 841.142131][T15427] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.205971][T15427] device bridge_slave_1 left promiscuous mode [ 841.215521][T15427] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.269986][T15427] bond0: (slave bond_slave_0): Releasing backup interface [ 841.335535][T15427] bond0: (slave bond_slave_1): Releasing backup interface [ 841.515917][T15427] team0: Port device team_slave_0 removed [ 841.550841][T15427] team0: Port device team_slave_1 removed [ 841.586910][T15427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.604447][T15427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.640253][T15427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.665897][T15427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.880330][T15446] device syzkaller0 entered promiscuous mode [ 842.345423][ T4324] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 842.534532][ T4324] usb 2-1: Using ep0 maxpacket: 32 [ 842.541930][ T4324] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 842.578122][ T4324] usb 2-1: config 0 interface 0 has no altsetting 0 [ 842.601836][ T4324] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 842.630495][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.675584][ T4324] usb 2-1: config 0 descriptor?? [ 843.462692][ T4324] corsair-cpro 0003:1B1C:0C10.0025: unknown main item tag 0x0 [ 843.471133][ T4324] corsair-cpro 0003:1B1C:0C10.0025: item fetching failed at offset 3/5 [ 843.480409][ T4324] corsair-cpro: probe of 0003:1B1C:0C10.0025 failed with error -22 [ 845.057937][ T4324] usb 2-1: USB disconnect, device number 41 [ 846.136273][ T6543] tipc: Left network mode [ 846.742468][T15535] xt_hashlimit: size too large, truncated to 1048576 [ 846.782840][T15538] device syzkaller0 entered promiscuous mode [ 846.918464][T15535] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 846.974454][ T4325] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 847.164527][ T4325] usb 1-1: Using ep0 maxpacket: 32 [ 847.180028][ T4325] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 847.213316][ T4325] usb 1-1: config 0 has no interface number 0 [ 847.254453][ T4325] usb 1-1: config 0 interface 12 has no altsetting 0 [ 847.290552][ T4325] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 847.317730][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.344853][ T4325] usb 1-1: Product: syz [ 847.359184][ T4325] usb 1-1: Manufacturer: syz [ 847.376687][ T4325] usb 1-1: SerialNumber: syz [ 847.397802][ T4325] usb 1-1: config 0 descriptor?? [ 847.654497][ T4324] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 847.874589][ T4324] usb 3-1: Using ep0 maxpacket: 8 [ 847.881913][ T4324] usb 3-1: config index 0 descriptor too short (expected 18482, got 36) [ 847.921471][ T4324] usb 3-1: config 255 has an invalid descriptor of length 72, skipping remainder of the config [ 847.972948][ T4324] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 13 [ 848.017833][ T4324] usb 3-1: config index 1 descriptor too short (expected 18482, got 36) [ 848.074505][ T4324] usb 3-1: config 255 has an invalid descriptor of length 72, skipping remainder of the config [ 848.116461][ T4324] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 13 [ 848.158862][ T4324] usb 3-1: config index 2 descriptor too short (expected 18482, got 36) [ 848.195587][ T4324] usb 3-1: config 255 has an invalid descriptor of length 72, skipping remainder of the config [ 848.247094][ T4324] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 13 [ 848.259967][ T6543] device veth13 left promiscuous mode [ 848.308761][ T6543] bridge12: port 1(veth13) entered disabled state [ 848.332767][ T4324] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 848.352774][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.372854][ T4324] usb 3-1: Product: syz [ 848.383009][ T4324] usb 3-1: Manufacturer: syz [ 848.393171][ T4324] usb 3-1: SerialNumber: syz [ 848.449011][ T6543] device veth0_to_bond left promiscuous mode [ 848.484729][ T6543] bridge11: port 1(veth0_to_bond) entered disabled state [ 848.530071][ T6543] device veth9 left promiscuous mode [ 848.564482][ T6543] bridge5: port 1(veth9) entered disabled state [ 848.600618][ T6543] device veth7 left promiscuous mode [ 848.620956][ T6543] bridge2: port 1(veth7) entered disabled state [ 848.629957][T15549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.643277][ T6543] device veth5 left promiscuous mode [ 848.649003][ T6543] bridge1: port 2(veth5) entered disabled state [ 848.651885][T15549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.698765][T15549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.709537][ T6543] device veth3 left promiscuous mode [ 848.715440][ T6543] bridge1: port 1(veth3) entered disabled state [ 848.731561][T15549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.766371][ T6543] device hsr_slave_0 left promiscuous mode [ 848.777017][ T4324] usb 3-1: USB disconnect, device number 63 [ 848.814478][ T6543] device hsr_slave_1 left promiscuous mode [ 848.834887][ T6543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.842440][ T6543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.865784][ T6543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.873373][ T6543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.905600][ T6543] device bridge_slave_1 left promiscuous mode [ 848.912076][ T6543] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.945957][ T6543] device bridge_slave_0 left promiscuous mode [ 848.952344][ T6543] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.145059][ T6543] device veth1_macvtap left promiscuous mode [ 849.165036][ T6543] device veth0_macvtap left promiscuous mode [ 849.204734][ T6543] device veth1_vlan left promiscuous mode [ 849.210833][ T6543] device veth0_vlan left promiscuous mode [ 849.893409][ T4325] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 849.919248][ T4325] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 849.935510][ T4325] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 849.997270][ T4325] f81534: probe of 1-1:0.12 failed with error -71 [ 850.107114][ T4325] usb 1-1: USB disconnect, device number 9 [ 850.451559][ T6543] bond1 (unregistering): Released all slaves [ 852.079283][ T6543] team0 (unregistering): Port device team_slave_1 removed [ 852.131973][ T6543] team0 (unregistering): Port device team_slave_0 removed [ 852.194455][ T6543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 852.255350][ T6543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 852.684492][ T6543] bond0 (unregistering): Released all slaves [ 852.804715][T15590] device syzkaller0 entered promiscuous mode [ 853.512871][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3530'. [ 857.444347][ T7] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 857.494427][ T4324] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 857.624542][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 857.631638][ T7] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 857.640257][ T7] usb 2-1: config 0 has no interface number 0 [ 857.646786][ T7] usb 2-1: config 0 interface 12 has no altsetting 0 [ 857.656178][ T7] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 857.665372][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.673524][ T7] usb 2-1: Product: syz [ 857.677938][ T7] usb 2-1: Manufacturer: syz [ 857.682844][ T7] usb 2-1: SerialNumber: syz [ 857.690826][ T4324] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 857.708648][ T7] usb 2-1: config 0 descriptor?? [ 857.713830][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.725963][ T4324] usb 4-1: Product: syz [ 857.730280][ T4324] usb 4-1: Manufacturer: syz [ 857.735573][ T4324] usb 4-1: SerialNumber: syz [ 857.984989][ T4324] rtl8150 4-1:1.0: couldn't reset the device [ 857.991737][ T4324] rtl8150: probe of 4-1:1.0 failed with error -5 [ 858.011341][ T4324] usb 4-1: USB disconnect, device number 16 [ 858.028682][T15695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 860.151548][ T7] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 860.186762][ T7] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 860.194178][ T7] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 860.243129][ T7] f81534: probe of 2-1:0.12 failed with error -71 [ 860.300146][ T7] usb 2-1: USB disconnect, device number 42 [ 860.644450][ T4941] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 860.840141][ T4941] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 860.870095][ T4941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.914626][ T4941] usb 1-1: Product: syz [ 860.944788][ T4941] usb 1-1: Manufacturer: syz [ 860.972726][ T4941] usb 1-1: SerialNumber: syz [ 861.137316][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3577'. [ 861.285757][ T4941] rtl8150 1-1:1.0: couldn't reset the device [ 861.320439][ T4941] rtl8150: probe of 1-1:1.0 failed with error -5 [ 861.395860][ T4941] usb 1-1: USB disconnect, device number 10 [ 861.671819][T15862] device syzkaller0 entered promiscuous mode [ 862.114656][T11493] Bluetooth: hci1: command 0x0406 tx timeout [ 862.412197][T15895] device syzkaller0 entered promiscuous mode [ 862.909318][T15914] netlink: 'syz.0.3597': attribute type 13 has an invalid length. [ 862.957865][T15914] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3597'. [ 863.016275][T15914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3597'. [ 863.495911][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 863.506589][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 863.568000][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 863.652909][T15933] device bridge_slave_0 left promiscuous mode [ 863.674341][ T8885] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 863.683688][T15933] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.772847][T15933] device bridge_slave_1 left promiscuous mode [ 863.785011][T15933] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.818844][T15933] bond0: (slave bond_slave_0): Releasing backup interface [ 863.890688][ T8885] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 863.907464][ T8885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.930888][ T8885] usb 2-1: Product: syz [ 863.943616][ T8885] usb 2-1: Manufacturer: syz [ 863.958536][ T8885] usb 2-1: SerialNumber: syz [ 864.005621][T15933] bond0: (slave bond_slave_1): Releasing backup interface [ 864.082676][T15933] team0: Port device team_slave_0 removed [ 864.118806][T15933] team0: Port device team_slave_1 removed [ 864.135967][T15933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.143950][T15933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.153383][T15933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 864.161028][T15933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.188017][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3607'. [ 864.231650][ T8885] rtl8150 2-1:1.0: couldn't reset the device [ 864.281050][ T8885] rtl8150: probe of 2-1:1.0 failed with error -5 [ 864.342203][ T8885] usb 2-1: USB disconnect, device number 43 [ 864.411290][T15949] device syzkaller0 entered promiscuous mode [ 864.480485][T15956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 868.049216][T15972] netlink: 'syz.0.3613': attribute type 13 has an invalid length. [ 868.057434][T15972] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3613'. [ 868.549742][T16029] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 868.615819][T16029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 868.654482][T16029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 868.765078][ T3598] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 868.824681][ T3598] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 869.089699][ T7] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 869.281548][ T7] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 869.307631][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.341648][ T7] usb 3-1: Product: syz [ 869.357843][ T7] usb 3-1: Manufacturer: syz [ 869.385268][T16059] netlink: 'syz.4.3632': attribute type 13 has an invalid length. [ 869.396946][ T7] usb 3-1: SerialNumber: syz [ 869.401804][T16059] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3632'. [ 869.439064][T16059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3632'. [ 869.664692][ T4319] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 869.721974][ T7] rtl8150 3-1:1.0: couldn't reset the device [ 869.747742][ T7] rtl8150: probe of 3-1:1.0 failed with error -5 [ 869.814039][ T7] usb 3-1: USB disconnect, device number 64 [ 870.015280][T16084] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 870.042839][T16084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 870.053102][T16084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 870.286619][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.293077][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.295109][ T7] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 871.364088][T16135] device syzkaller0 entered promiscuous mode [ 871.414501][ T4518] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 871.609331][T16141] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 871.617065][ T4518] usb 4-1: Using ep0 maxpacket: 16 [ 871.632274][ T4518] usb 4-1: unable to get BOS descriptor or descriptor too short [ 871.644078][T16141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 871.661068][ T4518] usb 4-1: config 7 has an invalid interface number: 106 but max is 3 [ 871.672054][T16141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 871.687038][ T4518] usb 4-1: config 7 has an invalid interface number: 182 but max is 3 [ 871.721390][ T4518] usb 4-1: config 7 has an invalid interface number: 148 but max is 3 [ 871.731036][T16141] device bridge_slave_0 left promiscuous mode [ 871.761050][T16141] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.773275][ T4518] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 871.816743][ T4518] usb 4-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 871.852714][ T4518] usb 4-1: config 7 has no interface number 0 [ 871.882589][ T4518] usb 4-1: config 7 has no interface number 1 [ 871.915892][ T4518] usb 4-1: config 7 has no interface number 2 [ 871.945179][ T4518] usb 4-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 871.994704][ T4518] usb 4-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 872.040335][ T4518] usb 4-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 872.105263][ T4518] usb 4-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 872.161637][ T4518] usb 4-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 872.214189][ T4518] usb 4-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 872.234085][ T4518] usb 4-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 872.272097][ T4518] usb 4-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 872.303442][ T4518] usb 4-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 872.332920][ T4518] usb 4-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 872.352293][ T4518] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 872.363879][ T4518] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 872.375116][ T4518] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 872.390807][ T4518] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 872.402397][ T4518] usb 4-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 872.416599][ T4518] usb 4-1: config 7 interface 106 has no altsetting 0 [ 872.423530][ T4518] usb 4-1: config 7 interface 182 has no altsetting 0 [ 872.433943][ T4518] usb 4-1: config 7 interface 148 has no altsetting 0 [ 872.465264][T16141] device bridge_slave_1 left promiscuous mode [ 872.471598][T16141] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.481755][ T4518] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 872.501532][ T4518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.519186][ T4518] usb 4-1: Product: syz [ 872.523987][ T4518] usb 4-1: Manufacturer: syz [ 872.529280][ T4518] usb 4-1: SerialNumber: syz [ 872.582451][T16141] bond0: (slave bond_slave_0): Releasing backup interface [ 872.607014][T16141] bond0: (slave bond_slave_1): Releasing backup interface [ 872.719879][T16141] team0: Port device team_slave_0 removed [ 872.793242][T16141] team0: Port device team_slave_1 removed [ 872.821505][T16141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.829288][ T4518] usb 4-1: USB disconnect, device number 17 [ 872.836638][T16141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.861696][T16141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.893013][T16141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.722842][T16205] tipc: Enabling of bearer rejected, failed to enable media [ 873.824378][ T4319] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 874.024508][ T4319] usb 5-1: Using ep0 maxpacket: 32 [ 874.031842][ T4319] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 874.084589][ T4319] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 874.134396][ T4319] usb 5-1: config 0 interface 0 has no altsetting 0 [ 874.163865][ T4319] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 874.185794][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.243544][ T4319] usb 5-1: config 0 descriptor?? [ 874.282164][T16220] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 874.292974][T16220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 874.301062][T16220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 874.711124][ T4319] corsair-cpro 0003:1B1C:0C10.0026: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 874.846301][ T4319] corsair-cpro: probe of 0003:1B1C:0C10.0026 failed with error -90 [ 874.934663][T16235] device syzkaller0 entered promiscuous mode [ 874.976635][T16234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3681'. [ 875.035666][ T125] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 875.114637][ T4319] usb 5-1: USB disconnect, device number 30 [ 875.204439][T16238] fido_id[16238]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 875.244443][ T125] usb 4-1: Using ep0 maxpacket: 32 [ 875.252401][ T125] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 875.286487][ T125] usb 4-1: config 0 has no interface number 0 [ 875.324442][ T125] usb 4-1: config 0 interface 184 has no altsetting 0 [ 875.352984][ T125] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 875.388745][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.419397][ T125] usb 4-1: Product: syz [ 875.433682][ T125] usb 4-1: Manufacturer: syz [ 875.460565][ T125] usb 4-1: SerialNumber: syz [ 875.492679][ T125] usb 4-1: config 0 descriptor?? [ 875.528770][ T125] smsc75xx v1.0.0 [ 876.132067][ T125] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 876.163562][ T125] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 876.194959][ T125] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 876.221579][ T125] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 876.240543][ T7] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 876.284289][ T125] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 876.339812][ T125] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 876.390225][ T125] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 876.656053][T16280] ip6tnl0: Caught tx_queue_len zero misconfig [ 876.824142][T16282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3694'. [ 876.874668][ T7] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 877.833735][T16321] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 877.852369][ T4518] usb 4-1: USB disconnect, device number 18 [ 877.879862][T16321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 877.942789][T16321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 879.116346][ T4518] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 879.304313][ T4518] usb 4-1: Using ep0 maxpacket: 32 [ 879.315654][ T4518] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 879.323938][ T4518] usb 4-1: config 0 has no interface number 0 [ 879.344352][ T4518] usb 4-1: config 0 interface 184 has no altsetting 0 [ 879.361824][ T4518] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 879.381720][ T4518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.424327][ T4518] usb 4-1: Product: syz [ 879.428595][ T4518] usb 4-1: Manufacturer: syz [ 879.433248][ T4518] usb 4-1: SerialNumber: syz [ 879.476324][ T4518] usb 4-1: config 0 descriptor?? [ 879.494516][ T4518] smsc75xx v1.0.0 [ 880.095452][ T4518] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 880.133604][ T4518] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 880.198063][ T4518] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 880.234975][ T4518] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 880.285724][ T4518] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 880.345539][ T4518] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 880.363957][ T4518] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 880.671067][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3733'. [ 881.120378][T16420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3737'. [ 881.864724][ T3598] usb 4-1: USB disconnect, device number 19 [ 882.012159][T16449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3746'. [ 882.152166][T16455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3749'. [ 882.623869][T16470] device syzkaller0 entered promiscuous mode [ 882.984863][T16482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3760'. [ 883.074677][ T4518] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 883.243182][T16492] veth: renamed from vlan0 [ 883.264582][ T4518] usb 5-1: Using ep0 maxpacket: 32 [ 883.273365][ T4518] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 883.298872][ T4518] usb 5-1: config 0 has no interface number 0 [ 883.318197][ T4518] usb 5-1: config 0 interface 184 has no altsetting 0 [ 883.360068][ T4518] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 883.375400][ T4518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.383749][ T4518] usb 5-1: Product: syz [ 883.389317][ T4518] usb 5-1: Manufacturer: syz [ 883.410936][ T4518] usb 5-1: SerialNumber: syz [ 883.428322][ T4518] usb 5-1: config 0 descriptor?? [ 883.448529][ T4518] smsc75xx v1.0.0 [ 883.508726][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3766'. [ 883.724312][ T3598] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 883.757440][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3769'. [ 883.772401][T16507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.883579][T16513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3771'. [ 883.921070][ T3598] usb 1-1: Using ep0 maxpacket: 16 [ 883.929586][ T3598] usb 1-1: unable to get BOS descriptor or descriptor too short [ 883.950389][T16512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3772'. [ 883.964322][ T3598] usb 1-1: config 7 has an invalid interface number: 106 but max is 3 [ 883.983045][ T3598] usb 1-1: config 7 has an invalid interface number: 182 but max is 3 [ 884.003326][ T3598] usb 1-1: config 7 has an invalid interface number: 148 but max is 3 [ 884.034516][ T3598] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 884.048825][ T4518] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 884.062298][ T4518] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 884.077423][ T3598] usb 1-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 884.088976][ T3598] usb 1-1: config 7 has no interface number 0 [ 884.099899][ T4518] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 884.113412][ T3598] usb 1-1: config 7 has no interface number 1 [ 884.124352][ T4518] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 884.134568][ T3598] usb 1-1: config 7 has no interface number 2 [ 884.140758][ T3598] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 884.164115][ T4518] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 884.184546][ T3598] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 884.195603][ T4518] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 884.205208][ T3598] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 884.216349][ T4518] smsc75xx: probe of 5-1:0.184 failed with error -32 [ 884.233630][ T3598] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 884.245000][ T3598] usb 1-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 884.258443][ T3598] usb 1-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 884.269789][ T3598] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 884.286747][ T3598] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 884.301219][ T3598] usb 1-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 884.317970][ T3598] usb 1-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 884.330137][ T3598] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 884.347986][ T3598] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 884.361587][ T3598] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 884.379674][ T3598] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 884.390694][ T3598] usb 1-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 884.410019][ T3598] usb 1-1: config 7 interface 106 has no altsetting 0 [ 884.417228][ T3598] usb 1-1: config 7 interface 182 has no altsetting 0 [ 884.424138][ T3598] usb 1-1: config 7 interface 148 has no altsetting 0 [ 884.452930][ T3598] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 884.471099][ T3598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.479555][ T3598] usb 1-1: Product: syz [ 884.483802][ T3598] usb 1-1: Manufacturer: syz [ 884.496881][ T3598] usb 1-1: SerialNumber: syz [ 884.515410][T16525] syz.2.3776[16525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 884.515572][T16525] syz.2.3776[16525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 884.621819][T16528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3777'. [ 884.702736][T16533] device syzkaller0 entered promiscuous mode [ 884.781319][ T3598] usb 1-1: USB disconnect, device number 11 [ 885.723342][T16553] __nla_validate_parse: 4 callbacks suppressed [ 885.723364][T16553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3784'. [ 885.820010][T16557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3785'. [ 885.919929][ T7] usb 5-1: USB disconnect, device number 31 [ 886.160743][T16566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3789'. [ 886.734727][T16590] tipc: Enabling of bearer rejected, failed to enable media [ 886.869973][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3799'. [ 887.014457][ T125] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 887.130290][T16599] device syzkaller0 entered promiscuous mode [ 887.224316][ T125] usb 4-1: Using ep0 maxpacket: 32 [ 887.232128][ T125] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 887.247774][ T125] usb 4-1: config 0 has no interface number 0 [ 887.260884][ T125] usb 4-1: config 0 interface 184 has no altsetting 0 [ 887.279450][ T125] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 887.305124][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.366552][ T125] usb 4-1: Product: syz [ 887.385907][ T125] usb 4-1: Manufacturer: syz [ 887.408633][ T125] usb 4-1: SerialNumber: syz [ 887.427956][ T125] usb 4-1: config 0 descriptor?? [ 887.471173][ T125] smsc75xx v1.0.0 [ 888.062141][ T125] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 888.083345][ T125] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 888.104456][ T125] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 888.129024][ T125] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 888.163033][ T125] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 888.202928][ T125] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 888.223778][ T125] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 888.377444][T16631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3813'. [ 888.531782][T16636] device syzkaller0 entered promiscuous mode [ 888.792443][T16650] device syzkaller0 entered promiscuous mode [ 889.537469][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3829'. [ 889.738922][ T22] usb 4-1: USB disconnect, device number 20 [ 889.855345][T16679] device syzkaller0 entered promiscuous mode [ 889.914403][ T4325] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 890.021940][T16683] device syzkaller0 entered promiscuous mode [ 890.114365][ T4325] usb 5-1: Using ep0 maxpacket: 16 [ 890.121859][ T4325] usb 5-1: unable to get BOS descriptor or descriptor too short [ 890.145001][ T4325] usb 5-1: config 7 has an invalid interface number: 106 but max is 3 [ 890.153289][ T4325] usb 5-1: config 7 has an invalid interface number: 182 but max is 3 [ 890.209389][ T4325] usb 5-1: config 7 has an invalid interface number: 148 but max is 3 [ 890.218427][ T4325] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 890.229829][ T4325] usb 5-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 890.249488][ T4325] usb 5-1: config 7 has no interface number 0 [ 890.253482][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3837'. [ 890.269069][ T4325] usb 5-1: config 7 has no interface number 1 [ 890.284509][ T4325] usb 5-1: config 7 has no interface number 2 [ 890.296807][ T4325] usb 5-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 890.308203][ T4325] usb 5-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 890.336199][ T4325] usb 5-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 890.349942][ T4325] usb 5-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 890.379837][ T4325] usb 5-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 890.393730][ T4325] usb 5-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 890.410704][ T4325] usb 5-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 890.422488][ T4325] usb 5-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 890.439812][ T4325] usb 5-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 890.450973][ T4325] usb 5-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 890.468224][ T4325] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 890.480347][ T4325] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 890.495560][ T4325] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 890.508781][ T4325] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 890.522164][ T4325] usb 5-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 890.540023][ T4325] usb 5-1: config 7 interface 106 has no altsetting 0 [ 890.547892][ T4325] usb 5-1: config 7 interface 182 has no altsetting 0 [ 890.555034][ T4325] usb 5-1: config 7 interface 148 has no altsetting 0 [ 890.573915][ T4325] usb 5-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 890.583959][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.599895][ T4325] usb 5-1: Product: syz [ 890.604157][ T4325] usb 5-1: Manufacturer: syz [ 890.610382][ T4325] usb 5-1: SerialNumber: syz [ 890.744344][ T4319] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 890.865411][ T4325] usb 5-1: USB disconnect, device number 32 [ 890.934431][ T4319] usb 4-1: Using ep0 maxpacket: 32 [ 890.942420][ T4319] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 890.959405][ T4319] usb 4-1: config 0 has no interface number 0 [ 890.966004][ T4319] usb 4-1: config 0 interface 12 has no altsetting 0 [ 890.975368][ T4319] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 890.989844][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.998926][ T4319] usb 4-1: Product: syz [ 891.003270][ T4319] usb 4-1: Manufacturer: syz [ 891.015478][ T4319] usb 4-1: SerialNumber: syz [ 891.022222][ T4319] usb 4-1: config 0 descriptor?? [ 891.224657][ T8885] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 891.282390][T16712] device syzkaller0 entered promiscuous mode [ 891.450050][ T8885] usb 2-1: Using ep0 maxpacket: 32 [ 891.457954][ T8885] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 891.506607][ T8885] usb 2-1: config 0 has no interface number 0 [ 891.513385][ T8885] usb 2-1: config 0 interface 184 has no altsetting 0 [ 891.531224][ T8885] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 891.542144][ T8885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.554067][ T8885] usb 2-1: Product: syz [ 891.559766][ T8885] usb 2-1: Manufacturer: syz [ 891.565219][ T8885] usb 2-1: SerialNumber: syz [ 891.582856][ T8885] usb 2-1: config 0 descriptor?? [ 891.607371][ T8885] smsc75xx v1.0.0 [ 891.842441][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3852'. [ 892.030180][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3854'. [ 892.218349][ T8885] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 892.241364][ T8885] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 892.263722][ T8885] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 892.276943][ T8885] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 892.288010][ T8885] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 892.299580][ T8885] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 892.309619][ T8885] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 892.664504][ T8885] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 892.874437][ T8885] usb 5-1: Using ep0 maxpacket: 16 [ 892.882286][ T8885] usb 5-1: unable to get BOS descriptor or descriptor too short [ 892.895093][ T8885] usb 5-1: config 7 has an invalid interface number: 106 but max is 3 [ 892.922759][ T8885] usb 5-1: config 7 has an invalid interface number: 182 but max is 3 [ 892.941576][ T8885] usb 5-1: config 7 has an invalid interface number: 148 but max is 3 [ 892.953218][ T8885] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 892.970155][ T8885] usb 5-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 892.982982][ T8885] usb 5-1: config 7 has no interface number 0 [ 892.993884][ T8885] usb 5-1: config 7 has no interface number 1 [ 893.002754][ T8885] usb 5-1: config 7 has no interface number 2 [ 893.009772][ T8885] usb 5-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 893.021410][ T8885] usb 5-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 893.032936][ T8885] usb 5-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 893.044751][ T8885] usb 5-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 893.057370][ T8885] usb 5-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 893.071162][ T8885] usb 5-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 893.083080][ T8885] usb 5-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 893.094674][ T8885] usb 5-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 893.110282][ T8885] usb 5-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 893.123020][ T8885] usb 5-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 893.134387][ T8885] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 893.146138][ T8885] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 893.157591][T16756] device syzkaller0 entered promiscuous mode [ 893.165748][ T8885] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 893.177305][ T8885] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 893.188716][ T8885] usb 5-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 893.203027][ T8885] usb 5-1: config 7 interface 106 has no altsetting 0 [ 893.210142][ T8885] usb 5-1: config 7 interface 182 has no altsetting 0 [ 893.217164][ T8885] usb 5-1: config 7 interface 148 has no altsetting 0 [ 893.247596][ T8885] usb 5-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 893.257701][ T8885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.266014][ T8885] usb 5-1: Product: syz [ 893.270527][ T8885] usb 5-1: Manufacturer: syz [ 893.279345][ T8885] usb 5-1: SerialNumber: syz [ 893.506175][ T4325] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 893.527159][ T4319] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 893.545149][ T4319] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 893.561171][ T4319] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 893.573149][ T4319] f81534: probe of 4-1:0.12 failed with error -71 [ 893.606817][ T8885] usb 5-1: USB disconnect, device number 33 [ 893.660589][ T4319] usb 4-1: USB disconnect, device number 21 [ 893.835688][ T22] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 893.948153][ T4319] usb 2-1: USB disconnect, device number 44 [ 894.124489][ T22] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 894.289344][T16782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3873'. [ 894.298997][T16782] bond0: option packets_per_slave: invalid value (5539623) [ 894.306876][T16782] bond0: option packets_per_slave: allowed values 0 - 65535 [ 894.314636][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 894.327671][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 894.340131][ T22] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 894.356108][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.371049][ T22] usb 1-1: config 0 descriptor?? [ 894.448804][T16785] device syzkaller0 entered promiscuous mode [ 894.585277][ T22] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 894.664342][ T4319] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 894.811407][ T8885] usb 1-1: USB disconnect, device number 12 [ 894.869938][ T4319] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 894.884312][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.914402][ T4319] usb 4-1: Product: syz [ 894.928708][ T4319] usb 4-1: Manufacturer: syz [ 894.943955][ T4319] usb 4-1: SerialNumber: syz [ 895.202125][ T4319] rtl8150 4-1:1.0: couldn't reset the device [ 895.224464][ T4319] rtl8150: probe of 4-1:1.0 failed with error -5 [ 895.298555][ T4319] usb 4-1: USB disconnect, device number 22 [ 895.614350][ T4324] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 895.824537][ T4324] usb 2-1: Using ep0 maxpacket: 32 [ 895.832617][ T4324] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 895.869852][ T4324] usb 2-1: config 0 has no interface number 0 [ 895.874956][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 895.885675][ T4324] usb 2-1: config 0 interface 184 has no altsetting 0 [ 895.905820][ T4324] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 895.916122][ T4324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.924315][ T4324] usb 2-1: Product: syz [ 895.928661][ T4324] usb 2-1: Manufacturer: syz [ 895.933380][ T4324] usb 2-1: SerialNumber: syz [ 895.949673][ T4324] usb 2-1: config 0 descriptor?? [ 895.978613][ T4324] smsc75xx v1.0.0 [ 896.376477][T16808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3884'. [ 896.478348][T16810] device syzkaller0 entered promiscuous mode [ 896.587344][ T4324] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 896.620709][ T4324] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 896.670867][ T4324] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 896.696502][ T4324] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 896.715768][ T4324] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 896.731509][ T4324] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 896.748849][ T4324] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 897.204389][ T7] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 897.384462][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 897.401686][ T7] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 897.417920][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 897.424942][ T7] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 897.434892][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.452985][ T7] usb 4-1: config 0 descriptor?? [ 897.587607][ T4518] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 897.792340][ T4518] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 897.824405][ T4518] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.832507][ T4518] usb 1-1: Product: syz [ 897.850593][ T4518] usb 1-1: Manufacturer: syz [ 897.855692][ T4518] usb 1-1: SerialNumber: syz [ 897.954437][T11493] Bluetooth: hci0: command 0x0406 tx timeout [ 897.979537][T16841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3897'. [ 898.117531][ T4518] rtl8150 1-1:1.0: couldn't reset the device [ 898.124081][ T4518] rtl8150: probe of 1-1:1.0 failed with error -5 [ 898.149277][ T4518] usb 1-1: USB disconnect, device number 13 [ 898.222822][ T7] corsair-cpro 0003:1B1C:0C10.0027: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 898.304343][ T4324] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 898.358459][ T22] usb 2-1: USB disconnect, device number 45 [ 898.396651][ T4319] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 898.504546][ T4324] usb 5-1: Using ep0 maxpacket: 16 [ 898.512778][ T4324] usb 5-1: unable to get BOS descriptor or descriptor too short [ 898.530806][ T4324] usb 5-1: config 7 has an invalid interface number: 106 but max is 3 [ 898.540699][ T4324] usb 5-1: config 7 has an invalid interface number: 182 but max is 3 [ 898.556484][ T4324] usb 5-1: config 7 has an invalid interface number: 148 but max is 3 [ 898.569187][ T4324] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 898.599084][ T4324] usb 5-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 898.624506][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 898.631547][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 898.647848][ T7] corsair-cpro: probe of 0003:1B1C:0C10.0027 failed with error -71 [ 898.660748][ T4324] usb 5-1: config 7 has no interface number 0 [ 898.688093][ T7] usb 4-1: USB disconnect, device number 23 [ 898.697944][ T4324] usb 5-1: config 7 has no interface number 1 [ 898.710511][ T4319] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 898.748620][ T4324] usb 5-1: config 7 has no interface number 2 [ 898.775085][ T4324] usb 5-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 898.787054][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.807877][ T4319] usb 3-1: config 0 descriptor?? [ 898.824307][ T4324] usb 5-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 898.845912][ T4324] usb 5-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 898.885377][ T4324] usb 5-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 898.909906][ T4324] usb 5-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 898.965480][ T4324] usb 5-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 899.004614][ T4324] usb 5-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 899.027503][ T4319] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 899.070042][ T4324] usb 5-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 899.101397][ T4324] usb 5-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 899.118529][ T4324] usb 5-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 899.163341][ T4324] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 899.192069][ T4324] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 899.208872][T16858] fido_id[16858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 899.264277][ T4324] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 899.336855][ T4324] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 899.367205][ T4324] usb 5-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 899.381453][ T4324] usb 5-1: config 7 interface 106 has no altsetting 0 [ 899.390722][ T4324] usb 5-1: config 7 interface 182 has no altsetting 0 [ 899.401580][ T4324] usb 5-1: config 7 interface 148 has no altsetting 0 [ 899.427019][ T14] usb 3-1: USB disconnect, device number 65 [ 899.439694][ T4324] usb 5-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 899.501722][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.514167][ T4324] usb 5-1: Product: syz [ 899.521016][ T4324] usb 5-1: Manufacturer: syz [ 899.526782][ T4324] usb 5-1: SerialNumber: syz [ 899.790966][T16878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3907'. [ 899.818053][ T4324] usb 5-1: USB disconnect, device number 34 [ 900.288989][ T4518] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 900.475778][ T4518] usb 1-1: Using ep0 maxpacket: 32 [ 900.484979][ T4518] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 900.493590][ T4518] usb 1-1: config 0 has no interface number 0 [ 900.500311][ T4518] usb 1-1: config 0 interface 184 has no altsetting 0 [ 900.510981][ T4518] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 900.522324][ T4518] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.531945][ T4518] usb 1-1: Product: syz [ 900.536789][ T4518] usb 1-1: Manufacturer: syz [ 900.541553][ T4518] usb 1-1: SerialNumber: syz [ 900.550271][ T4518] usb 1-1: config 0 descriptor?? [ 900.564857][ T4518] smsc75xx v1.0.0 [ 900.600040][ T4324] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 900.724386][ T22] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 900.785581][ T4324] usb 5-1: Using ep0 maxpacket: 8 [ 900.792709][ T4324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 900.852605][ T4324] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 900.889245][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.929507][ T4324] usb 5-1: config 0 descriptor?? [ 900.939423][ T22] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 900.963595][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.008155][ T22] usb 4-1: Product: syz [ 901.023118][ T22] usb 4-1: Manufacturer: syz [ 901.033133][ T22] usb 4-1: SerialNumber: syz [ 901.143955][ T4324] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 901.174422][ T4518] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 901.204514][ T4518] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 901.235170][ T4518] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 901.264386][ T4518] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 901.294136][ T4518] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 901.318359][ T22] rtl8150 4-1:1.0: couldn't reset the device [ 901.334472][ T22] rtl8150: probe of 4-1:1.0 failed with error -5 [ 901.345602][ T4518] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 901.367295][ T22] usb 4-1: USB disconnect, device number 24 [ 901.375179][ T4518] smsc75xx: probe of 1-1:0.184 failed with error -61 [ 901.444598][T16916] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3919'. [ 901.843142][ T22] usb 5-1: USB disconnect, device number 35 [ 902.174493][ T14] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 902.375530][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 902.383226][ T14] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 902.411731][ T14] usb 3-1: config 0 interface 0 has no altsetting 0 [ 902.425906][ T14] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 902.439947][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.466357][ T14] usb 3-1: config 0 descriptor?? [ 902.936614][T16944] netlink: 'syz.4.3930': attribute type 13 has an invalid length. [ 902.961526][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 902.978184][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 902.992799][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 903.114057][ T4324] usb 1-1: USB disconnect, device number 14 [ 903.264616][ T14] corsair-cpro 0003:1B1C:0C10.0028: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 903.543101][T16966] netlink: 484 bytes leftover after parsing attributes in process `syz.3.3937'. [ 903.638397][T16969] device syzkaller0 entered promiscuous mode [ 903.673826][ T14] corsair-cpro: probe of 0003:1B1C:0C10.0028 failed with error -71 [ 903.732873][ T14] usb 3-1: USB disconnect, device number 66 [ 903.964345][ T22] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 904.078707][T16971] fido_id[16971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 904.193327][ T22] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 904.204991][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.213176][ T22] usb 1-1: Product: syz [ 904.220676][ T22] usb 1-1: Manufacturer: syz [ 904.226085][ T22] usb 1-1: SerialNumber: syz [ 904.496128][ T22] rtl8150 1-1:1.0: couldn't reset the device [ 904.531180][ T22] rtl8150: probe of 1-1:1.0 failed with error -5 [ 904.560165][ T22] usb 1-1: USB disconnect, device number 15 [ 904.635007][T16980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3943'. [ 904.731014][T16989] netlink: 'syz.4.3945': attribute type 13 has an invalid length. [ 904.747869][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 904.768488][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 904.801326][T16989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 905.085278][T16999] device syzkaller0 entered promiscuous mode [ 905.106984][T17002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3951'. [ 905.399363][T17013] device syzkaller0 entered promiscuous mode [ 905.424437][ T4518] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 905.624311][ T4518] usb 1-1: Using ep0 maxpacket: 32 [ 905.632594][ T4518] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 905.686570][ T4518] usb 1-1: config 0 interface 0 has no altsetting 0 [ 905.693308][ T4518] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 905.733771][ T4518] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.796575][ T4518] usb 1-1: config 0 descriptor?? [ 905.900813][T17023] netlink: 'syz.3.3960': attribute type 13 has an invalid length. [ 905.920851][T17023] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 905.932813][T17023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 905.943605][T17023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 906.267516][T17033] device syzkaller0 entered promiscuous mode [ 906.368499][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3965'. [ 906.574395][ T8885] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 906.588017][ T4518] corsair-cpro 0003:1B1C:0C10.0029: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 906.622505][T17045] device syzkaller0 entered promiscuous mode [ 906.773213][ T4518] corsair-cpro: probe of 0003:1B1C:0C10.0029 failed with error -61 [ 906.789234][ T8885] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 906.804101][T17050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3970'. [ 906.813461][ T8885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.822140][ T8885] usb 3-1: Product: syz [ 906.835310][ T8885] usb 3-1: Manufacturer: syz [ 906.852143][ T8885] usb 3-1: SerialNumber: syz [ 906.978431][ T4518] usb 1-1: USB disconnect, device number 16 [ 907.117172][ T8885] rtl8150 3-1:1.0: couldn't reset the device [ 907.132299][ T8885] rtl8150: probe of 3-1:1.0 failed with error -5 [ 907.155764][T17053] fido_id[17053]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 907.197970][ T8885] usb 3-1: USB disconnect, device number 67 [ 907.257103][T17063] netlink: 'syz.4.3975': attribute type 13 has an invalid length. [ 907.270363][T17063] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 907.281043][T17063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 907.291095][T17063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 907.619900][T17069] device syzkaller0 entered promiscuous mode [ 907.780970][T17071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3978'. [ 908.284383][ T8885] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 908.393697][T17090] netlink: 'syz.4.3987': attribute type 13 has an invalid length. [ 908.407109][T17090] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 908.442045][T17090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 908.467838][T17090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 908.511409][ T8885] usb 1-1: Using ep0 maxpacket: 16 [ 908.526233][ T8885] usb 1-1: unable to get BOS descriptor or descriptor too short [ 908.549521][ T8885] usb 1-1: config 7 has an invalid interface number: 106 but max is 3 [ 908.573473][ T8885] usb 1-1: config 7 has an invalid interface number: 182 but max is 3 [ 908.592169][ T8885] usb 1-1: config 7 has an invalid interface number: 148 but max is 3 [ 908.638964][ T8885] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 908.668854][ T8885] usb 1-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 908.683306][ T8885] usb 1-1: config 7 has no interface number 0 [ 908.693073][ T8885] usb 1-1: config 7 has no interface number 1 [ 908.699543][ T8885] usb 1-1: config 7 has no interface number 2 [ 908.706106][ T8885] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 908.717992][ T8885] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 908.729131][ T8885] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 908.740491][ T8885] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 908.753213][ T8885] usb 1-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 908.766762][ T8885] usb 1-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 908.778962][ T8885] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 908.791515][ T8885] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 908.802626][ T8885] usb 1-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 908.817825][ T8885] usb 1-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 908.828764][ T8885] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 908.840500][ T8885] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 908.853660][ T8885] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 908.870991][ T8885] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 908.888123][ T8885] usb 1-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 908.907145][ T8885] usb 1-1: config 7 interface 106 has no altsetting 0 [ 908.914013][ T8885] usb 1-1: config 7 interface 182 has no altsetting 0 [ 908.922365][ T8885] usb 1-1: config 7 interface 148 has no altsetting 0 [ 908.946890][ T8885] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 908.964330][ T8885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.972427][ T8885] usb 1-1: Product: syz [ 908.979826][ T8885] usb 1-1: Manufacturer: syz [ 908.985497][ T8885] usb 1-1: SerialNumber: syz [ 909.062720][T17103] device syzkaller0 entered promiscuous mode [ 909.329492][ T8885] usb 1-1: USB disconnect, device number 17 [ 909.434644][ T22] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 909.571361][T17109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3994'. [ 909.639088][ T22] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 909.664764][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.672902][ T22] usb 2-1: Product: syz [ 909.700827][ T22] usb 2-1: Manufacturer: syz [ 909.707199][ T22] usb 2-1: SerialNumber: syz [ 910.006942][ T22] rtl8150 2-1:1.0: couldn't reset the device [ 910.017547][ T22] rtl8150: probe of 2-1:1.0 failed with error -5 [ 910.048859][ T22] usb 2-1: USB disconnect, device number 46 [ 910.137993][T17126] netlink: 'syz.0.4001': attribute type 13 has an invalid length. [ 910.187818][T17126] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 910.215097][T17126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 910.230784][T17126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 910.324058][T17130] netlink: 'syz.2.4002': attribute type 1 has an invalid length. [ 910.347458][T17130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 910.369712][T17134] bond1: (slave gretap1): making interface the new active one [ 910.379481][T17134] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 910.389314][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 910.725801][T17148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4008'. [ 911.108584][T17156] device syzkaller0 entered promiscuous mode [ 914.512206][T17169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4014'. [ 914.538624][T17181] netlink: 'syz.4.4018': attribute type 13 has an invalid length. [ 914.578894][T17181] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 914.588932][T17181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 914.640613][T17181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 914.787606][T17198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4021'. [ 915.284493][ T4324] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 915.344475][ T125] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 915.478579][ T4324] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 915.494354][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.514350][ T4324] usb 4-1: Product: syz [ 915.518618][ T4324] usb 4-1: Manufacturer: syz [ 915.523261][ T4324] usb 4-1: SerialNumber: syz [ 915.544321][ T125] usb 2-1: Using ep0 maxpacket: 32 [ 915.554059][ T125] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 915.573036][ T125] usb 2-1: config 0 interface 0 has no altsetting 0 [ 915.580325][ T125] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 915.596872][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.616827][ T125] usb 2-1: config 0 descriptor?? [ 915.792525][ T4324] rtl8150 4-1:1.0: couldn't reset the device [ 915.806919][ T4324] rtl8150: probe of 4-1:1.0 failed with error -5 [ 915.858046][ T4324] usb 4-1: USB disconnect, device number 25 [ 916.207056][T17227] device syzkaller0 entered promiscuous mode [ 916.288209][T17231] netlink: 'syz.0.4033': attribute type 13 has an invalid length. [ 916.302146][T17231] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 916.313109][T17231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 916.350157][T17231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 916.398541][ T125] corsair-cpro 0003:1B1C:0C10.002A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 916.615794][ T125] corsair-cpro: probe of 0003:1B1C:0C10.002A failed with error -61 [ 916.852648][ T4325] usb 2-1: USB disconnect, device number 47 [ 916.945734][T17253] device syzkaller0 entered promiscuous mode [ 917.011699][T17245] fido_id[17245]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 917.094693][ T14] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 917.243867][T17262] device syzkaller0 entered promiscuous mode [ 917.294394][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 917.303115][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 917.339764][ T14] usb 1-1: config 7 has an invalid interface number: 106 but max is 3 [ 917.349884][ T14] usb 1-1: config 7 has an invalid interface number: 182 but max is 3 [ 917.358312][ T14] usb 1-1: config 7 has an invalid interface number: 148 but max is 3 [ 917.367014][ T14] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 917.377444][ T14] usb 1-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 917.386830][ T14] usb 1-1: config 7 has no interface number 0 [ 917.393120][ T14] usb 1-1: config 7 has no interface number 1 [ 917.399450][ T14] usb 1-1: config 7 has no interface number 2 [ 917.405845][ T14] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 917.420927][ T14] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 917.432089][ T14] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 917.447068][ T14] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 917.459510][ T14] usb 1-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 917.478773][ T14] usb 1-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 917.490886][ T14] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 917.507386][ T14] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 917.520935][ T14] usb 1-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 917.539752][ T14] usb 1-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 917.550621][ T14] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 917.561754][ T14] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 917.587882][ T14] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 917.598971][ T14] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 917.609867][ T14] usb 1-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 917.623810][ T14] usb 1-1: config 7 interface 106 has no altsetting 0 [ 917.631635][ T14] usb 1-1: config 7 interface 182 has no altsetting 0 [ 917.640493][ T14] usb 1-1: config 7 interface 148 has no altsetting 0 [ 917.660370][ T14] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 917.669581][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.678658][ T14] usb 1-1: Product: syz [ 917.682904][ T14] usb 1-1: Manufacturer: syz [ 917.687663][ T14] usb 1-1: SerialNumber: syz [ 917.920204][T17267] device syzkaller0 entered promiscuous mode [ 918.042004][ T14] usb 1-1: USB disconnect, device number 18 [ 918.313471][T17275] netlink: 'syz.3.4048': attribute type 13 has an invalid length. [ 918.336437][T17275] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 918.367421][T17275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 918.384546][T17275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 918.760476][T17288] device syzkaller0 entered promiscuous mode [ 918.815578][ T4325] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 919.022243][ T4325] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 919.036781][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.054281][ T4325] usb 5-1: Product: syz [ 919.058592][ T4325] usb 5-1: Manufacturer: syz [ 919.063338][ T4325] usb 5-1: SerialNumber: syz [ 919.315931][ T4325] rtl8150 5-1:1.0: couldn't reset the device [ 919.334917][ T4325] rtl8150: probe of 5-1:1.0 failed with error -5 [ 919.384450][ T4325] usb 5-1: USB disconnect, device number 36 [ 919.870940][T17310] device syzkaller0 entered promiscuous mode [ 923.302862][T17316] netlink: 'syz.4.4061': attribute type 13 has an invalid length. [ 923.315000][T17316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 923.324943][T17316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 923.332542][T17316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 923.682936][T17361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4069'. [ 923.780107][T17364] device syzkaller0 entered promiscuous mode [ 924.364300][ T8885] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 924.578512][ T8885] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 924.602603][ T8885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.613653][ T8885] usb 1-1: Product: syz [ 924.621469][ T8885] usb 1-1: Manufacturer: syz [ 924.629777][ T8885] usb 1-1: SerialNumber: syz [ 924.762525][T17392] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.4079'. [ 924.891642][ T8885] rtl8150 1-1:1.0: couldn't reset the device [ 924.916186][ T8885] rtl8150: probe of 1-1:1.0 failed with error -5 [ 924.925471][T17394] device syzkaller0 entered promiscuous mode [ 924.973538][ T8885] usb 1-1: USB disconnect, device number 19 [ 925.327834][T17400] device syzkaller0 entered promiscuous mode [ 925.473271][T17403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4084'. [ 926.356924][T17423] device syzkaller0 entered promiscuous mode [ 926.775514][T17438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4097'. [ 926.847933][T17440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4098'. [ 927.822470][T17462] device syzkaller0 entered promiscuous mode [ 929.572122][T17500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4119'. [ 929.645034][T17502] Driver unsupported XDP return value 0 on prog (id 177) dev N/A, expect packet loss! [ 930.168678][ T8885] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 930.364269][ T8885] usb 1-1: Using ep0 maxpacket: 16 [ 930.371814][ T8885] usb 1-1: unable to get BOS descriptor or descriptor too short [ 930.412128][ T8885] usb 1-1: config 7 has an invalid interface number: 106 but max is 3 [ 930.471595][ T8885] usb 1-1: config 7 has an invalid interface number: 182 but max is 3 [ 930.480329][ T8885] usb 1-1: config 7 has an invalid interface number: 148 but max is 3 [ 930.515388][ T8885] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 930.554307][ T8885] usb 1-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 930.573594][ T8885] usb 1-1: config 7 has no interface number 0 [ 930.596379][ T8885] usb 1-1: config 7 has no interface number 1 [ 930.604850][ T8885] usb 1-1: config 7 has no interface number 2 [ 930.611049][ T8885] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 930.632877][T17529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4133'. [ 930.663988][ T8885] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 930.686331][ T8885] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 930.709472][ T8885] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 930.733146][ T8885] usb 1-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 930.757888][ T8885] usb 1-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 930.781920][ T8885] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 930.807629][ T8885] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 930.832221][ T8885] usb 1-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 930.862315][ T8885] usb 1-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 930.883403][ T8885] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 930.910840][ T8885] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 930.950916][ T8885] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 931.012158][ T8885] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 931.061094][ T8885] usb 1-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 931.084553][ T8885] usb 1-1: config 7 interface 106 has no altsetting 0 [ 931.091555][ T8885] usb 1-1: config 7 interface 182 has no altsetting 0 [ 931.101071][ T8885] usb 1-1: config 7 interface 148 has no altsetting 0 [ 931.117427][ T8885] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 931.126879][ T8885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.135664][ T8885] usb 1-1: Product: syz [ 931.140376][ T8885] usb 1-1: Manufacturer: syz [ 931.145761][ T8885] usb 1-1: SerialNumber: syz [ 931.460125][ T8885] usb 1-1: USB disconnect, device number 20 [ 931.722912][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.730713][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.255994][T17571] device syzkaller0 entered promiscuous mode [ 932.519505][T17579] device syzkaller0 entered promiscuous mode [ 932.534390][ T125] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 932.547174][T17579] tc action pedit offset must be on 32 bit boundaries [ 932.744408][ T125] usb 3-1: Using ep0 maxpacket: 32 [ 932.760338][ T125] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 932.799107][ T125] usb 3-1: config 0 has no interface number 0 [ 932.854338][ T125] usb 3-1: config 0 interface 184 has no altsetting 0 [ 932.878027][ T125] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 932.901549][ T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.912841][ T125] usb 3-1: Product: syz [ 932.917566][ T125] usb 3-1: Manufacturer: syz [ 932.922245][ T125] usb 3-1: SerialNumber: syz [ 932.938302][ T125] usb 3-1: config 0 descriptor?? [ 932.965529][ T125] smsc75xx v1.0.0 [ 932.973941][T17587] device syzkaller0 entered promiscuous mode [ 933.358557][ T22] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 933.554357][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 933.568252][ T125] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 933.590952][ T22] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 933.612418][ T125] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 933.624653][ T22] usb 1-1: config 0 interface 0 has no altsetting 0 [ 933.631459][ T22] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 933.662441][ T125] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 933.690007][ T125] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 933.700289][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.709601][ T125] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 933.728599][ T22] usb 1-1: config 0 descriptor?? [ 933.733975][ T125] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 933.750693][ T125] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 933.995583][T17621] netlink: 'syz.1.4165': attribute type 10 has an invalid length. [ 934.060070][T17621] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.075710][T17621] bond0: (slave team0): Enslaving as an active interface with an up link [ 934.218544][T17626] device syzkaller0 entered promiscuous mode [ 934.513183][ T22] corsair-cpro 0003:1B1C:0C10.002B: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 934.926427][ T22] corsair-cpro: probe of 0003:1B1C:0C10.002B failed with error -110 [ 934.956758][ T22] usb 1-1: USB disconnect, device number 21 [ 935.092123][T17653] fido_id[17653]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 935.258450][ T22] usb 3-1: USB disconnect, device number 68 [ 935.398817][T17664] tipc: Enabling of bearer rejected, failed to enable media [ 935.551211][T17669] netlink: 'syz.1.4181': attribute type 13 has an invalid length. [ 935.564142][T17669] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 935.579302][T17669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 935.589761][T17669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 935.632784][T17671] qfq: no options [ 935.727372][T17674] device syzkaller0 entered promiscuous mode [ 936.541355][T17700] tipc: Enabling of bearer rejected, failed to enable media [ 936.752412][T17705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4194'. [ 937.012520][T17714] device syzkaller0 entered promiscuous mode [ 937.530250][T17732] tipc: Enabling of bearer rejected, failed to enable media [ 937.564962][T17736] netlink: 'syz.1.4206': attribute type 10 has an invalid length. [ 937.922517][T17746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4207'. [ 938.353878][T17770] tipc: Enabling of bearer rejected, failed to enable media [ 939.059499][T17782] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4225'. [ 939.282145][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4230'. [ 939.455064][T17806] device syzkaller0 entered promiscuous mode [ 939.980831][T17828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4241'. [ 941.174874][T17844] device syzkaller0 entered promiscuous mode [ 941.530771][T17851] device syzkaller0 entered promiscuous mode [ 941.787744][T17857] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4252'. [ 941.864712][T17858] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.4252'. [ 942.342451][T17800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 942.546732][T17860] tipc: Enabled bearer , priority 0 [ 942.592982][T17860] device syzkaller0 entered promiscuous mode [ 942.612158][T17860] tipc: Resetting bearer [ 942.634108][T17859] tipc: Resetting bearer [ 945.632361][T17859] tipc: Disabling bearer [ 945.642440][T17868] device syzkaller0 entered promiscuous mode [ 945.770144][ T4325] tipc: Node number set to 3820358101 [ 945.915909][T17900] device syzkaller0 entered promiscuous mode [ 946.077213][T17905] device syzkaller0 entered promiscuous mode [ 946.097259][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.239101][T17911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4265'. [ 946.552793][T17933] device syzkaller0 entered promiscuous mode [ 946.981615][T17945] device syzkaller0 entered promiscuous mode [ 947.107468][T17949] device syzkaller0 entered promiscuous mode [ 949.020439][T17907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 949.414283][T17980] device syzkaller0 entered promiscuous mode [ 949.512503][T17982] device syzkaller0 entered promiscuous mode [ 949.980788][T17997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4299'. [ 950.014562][ T22] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 950.208613][ T22] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 950.218037][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.226487][ T22] usb 1-1: Product: syz [ 950.230822][ T22] usb 1-1: Manufacturer: syz [ 950.236111][ T22] usb 1-1: SerialNumber: syz [ 950.442339][T18017] device syzkaller0 entered promiscuous mode [ 950.485945][ T22] rtl8150 1-1:1.0: couldn't reset the device [ 950.492237][ T22] rtl8150: probe of 1-1:1.0 failed with error -5 [ 950.517276][ T22] usb 1-1: USB disconnect, device number 22 [ 950.649872][T18022] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4306'. [ 951.410382][ T14] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 951.604273][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 951.613023][ T14] usb 2-1: unable to get BOS descriptor or descriptor too short [ 951.631024][ T14] usb 2-1: config 7 has an invalid interface number: 106 but max is 3 [ 951.655494][ T14] usb 2-1: config 7 has an invalid interface number: 182 but max is 3 [ 951.665318][ T14] usb 2-1: config 7 has an invalid interface number: 148 but max is 3 [ 951.673570][ T14] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 951.683960][ T14] usb 2-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 951.698939][ T14] usb 2-1: config 7 has no interface number 0 [ 951.705530][ T14] usb 2-1: config 7 has no interface number 1 [ 951.711760][ T14] usb 2-1: config 7 has no interface number 2 [ 951.720927][ T14] usb 2-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 951.732425][ T14] usb 2-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 951.743776][ T14] usb 2-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 951.755069][ T14] usb 2-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 951.769985][ T14] usb 2-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 951.783909][ T14] usb 2-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 951.801147][ T14] usb 2-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 951.813104][ T14] usb 2-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 951.826943][ T14] usb 2-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 951.838931][ T14] usb 2-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 951.850063][ T14] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 951.861344][ T14] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 951.872581][ T14] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 951.883734][ T14] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 951.895003][ T14] usb 2-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 951.908671][ T14] usb 2-1: config 7 interface 106 has no altsetting 0 [ 951.915980][ T14] usb 2-1: config 7 interface 182 has no altsetting 0 [ 951.923473][ T14] usb 2-1: config 7 interface 148 has no altsetting 0 [ 951.966292][ T14] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 951.975537][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.983727][ T14] usb 2-1: Product: syz [ 951.988441][ T14] usb 2-1: Manufacturer: syz [ 951.993119][ T14] usb 2-1: SerialNumber: syz [ 952.418214][ T8885] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 952.605636][ T8885] usb 4-1: Using ep0 maxpacket: 32 [ 952.616779][ T8885] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 952.637117][ T8885] usb 4-1: config 0 interface 0 has no altsetting 0 [ 952.649900][ T8885] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 952.663343][ T8885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.682990][ T8885] usb 4-1: config 0 descriptor?? [ 953.099474][T18003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 953.171489][ T14] usb 2-1: USB disconnect, device number 48 [ 953.462480][ T8885] corsair-cpro 0003:1B1C:0C10.002C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 953.638761][T18074] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4325'. [ 953.681018][ T8885] corsair-cpro: probe of 0003:1B1C:0C10.002C failed with error -71 [ 953.882965][ T8885] usb 4-1: USB disconnect, device number 26 [ 953.994264][ T4325] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 954.026643][T18076] fido_id[18076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 954.189431][ T4325] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 954.199481][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.209634][ T4325] usb 5-1: Product: syz [ 954.213888][ T4325] usb 5-1: Manufacturer: syz [ 954.223266][ T4325] usb 5-1: SerialNumber: syz [ 954.351398][T18089] device syzkaller0 entered promiscuous mode [ 954.531776][ T4325] rtl8150 5-1:1.0: couldn't reset the device [ 954.562941][ T4325] rtl8150: probe of 5-1:1.0 failed with error -5 [ 954.599674][ T4325] usb 5-1: USB disconnect, device number 37 [ 954.875896][T18106] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4337'. [ 954.877074][T18107] device syzkaller0 entered promiscuous mode [ 955.479605][T18129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4347'. [ 955.734451][ T14] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 955.934299][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 955.941667][ T14] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 955.988066][ T14] usb 5-1: config 0 interface 0 has no altsetting 0 [ 956.014695][ T14] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 956.043194][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.089041][ T14] usb 5-1: config 0 descriptor?? [ 956.300294][T18156] device syzkaller0 entered promiscuous mode [ 956.319189][T18155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4359'. [ 956.406935][T18158] tipc: Enabling of bearer rejected, failed to enable media [ 956.424506][ T8885] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 956.620432][ T8885] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 956.630606][ T8885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.639899][ T8885] usb 4-1: Product: syz [ 956.650008][ T8885] usb 4-1: Manufacturer: syz [ 956.657005][ T8885] usb 4-1: SerialNumber: syz [ 956.782692][T18162] device syzkaller0 entered promiscuous mode [ 956.920725][ T14] corsair-cpro 0003:1B1C:0C10.002D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 956.978391][ T8885] rtl8150 4-1:1.0: couldn't reset the device [ 957.014762][ T8885] rtl8150: probe of 4-1:1.0 failed with error -5 [ 957.071435][ T8885] usb 4-1: USB disconnect, device number 27 [ 957.129371][ T14] corsair-cpro: probe of 0003:1B1C:0C10.002D failed with error -71 [ 957.307184][ T4324] usb 5-1: USB disconnect, device number 38 [ 957.573514][T18192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4372'. [ 957.667519][T18182] fido_id[18182]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 957.894302][T18203] tipc: Enabling of bearer rejected, failed to enable media [ 958.431314][ T4324] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 958.450786][T18223] device syzkaller0 entered promiscuous mode [ 958.640959][ T4324] usb 2-1: Using ep0 maxpacket: 16 [ 958.650658][ T4324] usb 2-1: unable to get BOS descriptor or descriptor too short [ 958.671133][ T4324] usb 2-1: config 7 has an invalid interface number: 106 but max is 3 [ 958.694788][ T4324] usb 2-1: config 7 has an invalid interface number: 182 but max is 3 [ 958.723444][ T4324] usb 2-1: config 7 has an invalid interface number: 148 but max is 3 [ 958.745699][ T4324] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 958.784973][ T4324] usb 2-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 958.812631][ T4324] usb 2-1: config 7 has no interface number 0 [ 958.825204][ T4324] usb 2-1: config 7 has no interface number 1 [ 958.831547][ T4324] usb 2-1: config 7 has no interface number 2 [ 958.845773][ T4324] usb 2-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 958.861336][ T4324] usb 2-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 958.873743][ T4324] usb 2-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 958.889010][ T4324] usb 2-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 958.900393][ T4324] usb 2-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 958.919497][ T4324] usb 2-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 958.930827][ T4324] usb 2-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 958.942402][ T4324] usb 2-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 958.953659][ T4324] usb 2-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 958.969005][ T4324] usb 2-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 958.980060][ T4324] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 958.991293][ T4324] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 959.002341][ T4324] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 959.013179][ T4324] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 959.026858][ T4324] usb 2-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 959.040370][ T4324] usb 2-1: config 7 interface 106 has no altsetting 0 [ 959.047516][ T4324] usb 2-1: config 7 interface 182 has no altsetting 0 [ 959.054655][ T4324] usb 2-1: config 7 interface 148 has no altsetting 0 [ 959.066002][ T4324] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 959.075330][ T4324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.083532][ T4324] usb 2-1: Product: syz [ 959.088271][ T4324] usb 2-1: Manufacturer: syz [ 959.093456][ T4324] usb 2-1: SerialNumber: syz [ 959.222346][T18234] device syzkaller0 entered promiscuous mode [ 959.292562][T18237] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 959.322216][T18237] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 959.366477][T18237] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 959.412618][ T4324] usb 2-1: USB disconnect, device number 49 [ 959.430073][T18237] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 959.464520][T18237] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 959.523384][T18237] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 959.543658][T18237] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 959.574398][T18237] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 959.582424][T18237] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 959.644357][T18237] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 959.645136][ T8885] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 959.915096][ T8885] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 959.943483][ T8885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.017030][ T8885] usb 5-1: Product: syz [ 960.021382][ T8885] usb 5-1: Manufacturer: syz [ 960.055481][T18257] tipc: Enabling of bearer rejected, failed to enable media [ 960.065672][ T8885] usb 5-1: SerialNumber: syz [ 960.130138][T18260] netlink: 'syz.1.4391': attribute type 3 has an invalid length. [ 960.365980][ T8885] rtl8150 5-1:1.0: couldn't reset the device [ 960.372223][ T8885] rtl8150: probe of 5-1:1.0 failed with error -5 [ 960.412332][ T8885] usb 5-1: USB disconnect, device number 39 [ 960.682673][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4398'. [ 960.851859][T18280] device syzkaller0 entered promiscuous mode [ 961.421042][T18301] device syzkaller0 entered promiscuous mode [ 962.420868][T18329] device syzkaller0 entered promiscuous mode [ 962.894271][ T8885] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 962.924381][ T4518] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 963.061211][T18349] device syzkaller0 entered promiscuous mode [ 963.074649][ T8885] usb 5-1: Using ep0 maxpacket: 32 [ 963.090005][ T8885] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 963.140725][ T8885] usb 5-1: config 0 interface 0 has no altsetting 0 [ 963.148414][ T4518] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 963.159857][ T4518] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.168434][ T8885] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 963.168469][ T8885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.187602][ T4518] usb 1-1: Product: syz [ 963.191859][ T4518] usb 1-1: Manufacturer: syz [ 963.196904][ T4518] usb 1-1: SerialNumber: syz [ 963.201381][ T8885] usb 5-1: config 0 descriptor?? [ 963.450870][ T4518] rtl8150 1-1:1.0: couldn't reset the device [ 963.465721][ T4518] rtl8150: probe of 1-1:1.0 failed with error -5 [ 963.477474][ T4518] usb 1-1: USB disconnect, device number 23 [ 963.694941][T18363] device syzkaller0 entered promiscuous mode [ 963.995475][ T8885] corsair-cpro 0003:1B1C:0C10.002E: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 964.193927][ T8885] corsair-cpro: probe of 0003:1B1C:0C10.002E failed with error -71 [ 964.396009][ T8885] usb 5-1: USB disconnect, device number 40 [ 964.655183][T18381] fido_id[18381]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 964.830115][T18398] device syzkaller0 entered promiscuous mode [ 965.222304][T18406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4447'. [ 965.424546][ T4325] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 965.625751][ T4325] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 965.668858][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.718946][ T4325] usb 2-1: Product: syz [ 965.737826][ T4325] usb 2-1: Manufacturer: syz [ 965.755953][ T4325] usb 2-1: SerialNumber: syz [ 966.096324][ T4325] rtl8150 2-1:1.0: couldn't reset the device [ 966.108193][ T4325] rtl8150: probe of 2-1:1.0 failed with error -5 [ 966.143295][T18424] device syzkaller0 entered promiscuous mode [ 966.151056][ T4325] usb 2-1: USB disconnect, device number 50 [ 966.654963][T18434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4460'. [ 966.709995][T18436] tipc: Enabling of bearer rejected, failed to enable media [ 966.774372][ T4325] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 966.974274][ T4325] usb 4-1: Using ep0 maxpacket: 8 [ 966.981873][ T4325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 967.024590][ T4325] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 967.034684][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.088487][ T4325] usb 4-1: config 0 descriptor?? [ 967.299655][ T4325] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 967.330833][T18453] device syzkaller0 entered promiscuous mode [ 967.570391][ T22] usb 4-1: USB disconnect, device number 28 [ 967.625345][ T4325] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 967.814326][ T4325] usb 5-1: Using ep0 maxpacket: 32 [ 967.836168][ T4325] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 967.844544][ T4325] usb 5-1: config 0 has no interface number 0 [ 967.851051][ T4325] usb 5-1: config 0 interface 184 has no altsetting 0 [ 967.906144][ T4325] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 967.924279][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.932376][ T4325] usb 5-1: Product: syz [ 967.943383][ T4325] usb 5-1: Manufacturer: syz [ 967.948883][ T4325] usb 5-1: SerialNumber: syz [ 967.976065][ T4325] usb 5-1: config 0 descriptor?? [ 968.011302][ T4325] smsc75xx v1.0.0 [ 968.067520][T18465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4473'. [ 968.264382][ T8885] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 968.468275][ T8885] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 968.495780][ T8885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.518925][ T8885] usb 3-1: Product: syz [ 968.538449][ T8885] usb 3-1: Manufacturer: syz [ 968.552364][ T8885] usb 3-1: SerialNumber: syz [ 968.589832][ T4325] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 968.614398][ T4325] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 968.825499][ T8885] rtl8150 3-1:1.0: couldn't reset the device [ 968.832299][ T4325] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 968.845951][ T8885] rtl8150: probe of 3-1:1.0 failed with error -5 [ 968.872936][ T8885] usb 3-1: USB disconnect, device number 69 [ 968.881912][ T4325] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 968.926167][ T4325] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 968.945828][T18483] device syzkaller0 entered promiscuous mode [ 968.957505][ T4325] smsc75xx: probe of 5-1:0.184 failed with error -32 [ 969.025568][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.304557][ T125] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 969.504395][ T125] usb 2-1: Using ep0 maxpacket: 8 [ 969.511628][ T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 969.551641][ T125] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 969.563233][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.591747][ T125] usb 2-1: config 0 descriptor?? [ 969.805896][ T125] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 970.023741][ T125] usb 2-1: USB disconnect, device number 51 [ 970.469941][ T22] usb 5-1: USB disconnect, device number 41 [ 971.104446][ T4324] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 971.303663][ T4324] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 971.321070][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.329675][ T4324] usb 4-1: Product: syz [ 971.333993][ T4324] usb 4-1: Manufacturer: syz [ 971.345568][ T4324] usb 4-1: SerialNumber: syz [ 971.594504][ T4324] rtl8150 4-1:1.0: couldn't reset the device [ 971.600735][ T4324] rtl8150: probe of 4-1:1.0 failed with error -5 [ 971.632166][ T4324] usb 4-1: USB disconnect, device number 29 [ 972.104487][ T4325] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 972.296614][ T4325] usb 1-1: Using ep0 maxpacket: 8 [ 972.308563][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 972.325145][ T4325] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 972.338475][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.351627][ T4325] usb 1-1: config 0 descriptor?? [ 972.563679][ T4325] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 972.614393][ T22] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 972.640567][T18583] device syzkaller0 entered promiscuous mode [ 972.801400][ T8885] usb 1-1: USB disconnect, device number 24 [ 972.804997][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 972.816529][ T22] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 972.825207][ T22] usb 4-1: config 0 has no interface number 0 [ 972.831740][ T22] usb 4-1: config 0 interface 184 has no altsetting 0 [ 972.851240][ T22] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 972.875609][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.914311][ T22] usb 4-1: Product: syz [ 972.918904][ T22] usb 4-1: Manufacturer: syz [ 972.923566][ T22] usb 4-1: SerialNumber: syz [ 972.940816][ T22] usb 4-1: config 0 descriptor?? [ 972.952841][ T22] smsc75xx v1.0.0 [ 973.313884][T18600] netlink: 264 bytes leftover after parsing attributes in process `syz.0.4515'. [ 973.427929][T18527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 973.468592][T18602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4516'. [ 973.571211][ T22] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 973.612839][ T22] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 973.834659][ T4325] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 973.847487][ T22] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 973.894801][ T22] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 973.924290][ T22] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 973.944705][ T22] smsc75xx: probe of 4-1:0.184 failed with error -61 [ 974.060549][T18612] device syzkaller0 entered promiscuous mode [ 974.074567][ T4325] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 974.111590][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.140656][ T4325] usb 2-1: Product: syz [ 974.176514][ T4325] usb 2-1: Manufacturer: syz [ 974.200019][ T4325] usb 2-1: SerialNumber: syz [ 974.243586][T18618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4522'. [ 974.374468][ T8885] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 974.482447][ T4325] rtl8150 2-1:1.0: couldn't reset the device [ 974.505254][ T4325] rtl8150: probe of 2-1:1.0 failed with error -5 [ 974.541346][T18627] Bluetooth: MGMT ver 1.22 [ 974.570814][ T4325] usb 2-1: USB disconnect, device number 52 [ 974.574557][ T8885] usb 3-1: Using ep0 maxpacket: 8 [ 974.593494][ T8885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 974.608480][ T8885] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 974.624422][ T8885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.643653][ T8885] usb 3-1: config 0 descriptor?? [ 974.865219][ T8885] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 975.183500][T18648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4530'. [ 975.211887][ T4325] usb 3-1: USB disconnect, device number 70 [ 975.392238][ T22] usb 4-1: USB disconnect, device number 30 [ 975.519102][T18656] device syzkaller0 entered promiscuous mode [ 975.750166][ T4324] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 975.954637][ T4324] usb 1-1: Using ep0 maxpacket: 16 [ 975.963343][ T4324] usb 1-1: unable to get BOS descriptor or descriptor too short [ 975.972685][ T4324] usb 1-1: config 7 has an invalid interface number: 106 but max is 3 [ 975.981066][ T4324] usb 1-1: config 7 has an invalid interface number: 182 but max is 3 [ 975.990803][ T4324] usb 1-1: config 7 has an invalid interface number: 148 but max is 3 [ 975.999214][ T4324] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 976.009659][ T4324] usb 1-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 976.020406][ T4324] usb 1-1: config 7 has no interface number 0 [ 976.028481][ T4324] usb 1-1: config 7 has no interface number 1 [ 976.035174][ T4324] usb 1-1: config 7 has no interface number 2 [ 976.041352][ T4324] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 976.052575][ T4324] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 976.063492][ T4324] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 976.075348][ T4324] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 976.086615][ T4324] usb 1-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 976.100574][ T4324] usb 1-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 976.111954][ T4324] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 976.123089][ T4324] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 976.134962][ T4324] usb 1-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 976.147727][ T4324] usb 1-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 976.158950][ T4324] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 976.169871][ T4324] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 976.181087][ T4324] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 976.197748][ T4324] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 976.209719][ T4324] usb 1-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 976.228808][ T4324] usb 1-1: config 7 interface 106 has no altsetting 0 [ 976.237332][ T4324] usb 1-1: config 7 interface 182 has no altsetting 0 [ 976.250708][ T4324] usb 1-1: config 7 interface 148 has no altsetting 0 [ 976.282942][ T4324] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 976.299699][ T4324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.313495][ T4324] usb 1-1: Product: syz [ 976.318078][ T4324] usb 1-1: Manufacturer: syz [ 976.322828][ T4324] usb 1-1: SerialNumber: syz [ 976.564478][ T4518] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 976.768145][ T4518] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 976.781250][ T4518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.802988][ T4518] usb 4-1: Product: syz [ 976.808698][ T4518] usb 4-1: Manufacturer: syz [ 976.813404][ T4518] usb 4-1: SerialNumber: syz [ 977.070952][ T4518] rtl8150 4-1:1.0: couldn't reset the device [ 977.080851][ T4518] rtl8150: probe of 4-1:1.0 failed with error -5 [ 977.109224][ T4518] usb 4-1: USB disconnect, device number 31 [ 977.184505][ T7] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 977.374422][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 977.381873][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 977.393372][ T7] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 977.402717][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.413871][ T7] usb 3-1: config 0 descriptor?? [ 977.626723][ T7] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 977.881683][T18636] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 977.901427][ T4518] usb 3-1: USB disconnect, device number 71 [ 977.962010][T18686] device syzkaller0 entered promiscuous mode [ 978.079247][ T4324] usb 1-1: USB disconnect, device number 25 [ 978.923257][T18715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4557'. [ 979.167422][T18720] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4558'. [ 979.250342][T18722] device syzkaller0 entered promiscuous mode [ 979.370110][ T4321] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 979.512781][T18726] tipc: Enabling of bearer rejected, failed to enable media [ 979.569924][ T4321] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 979.623463][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.652803][ T4321] usb 2-1: Product: syz [ 979.663108][ T4321] usb 2-1: Manufacturer: syz [ 979.669284][ T4321] usb 2-1: SerialNumber: syz [ 979.982938][ T4321] rtl8150 2-1:1.0: couldn't reset the device [ 979.989775][ T4321] rtl8150: probe of 2-1:1.0 failed with error -5 [ 980.032728][ T4321] usb 2-1: USB disconnect, device number 53 [ 980.269837][T18751] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4570'. [ 980.379660][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4571'. [ 980.668323][T18759] device syzkaller0 entered promiscuous mode [ 980.862411][T18763] tipc: Enabling of bearer rejected, failed to enable media [ 981.212989][T18783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4581'. [ 981.392250][T18791] (unnamed net_device) (uninitialized): up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 981.440278][T18791] (unnamed net_device) (uninitialized): down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 981.556049][T18793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4588'. [ 981.725777][T18790] device syzkaller0 entered promiscuous mode [ 981.825146][ T4518] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 982.009621][T18806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4591'. [ 982.040741][ T4518] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 982.059358][ T4518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.089879][ T4518] usb 4-1: Product: syz [ 982.110662][ T4518] usb 4-1: Manufacturer: syz [ 982.122654][ T4518] usb 4-1: SerialNumber: syz [ 982.458259][ T4518] rtl8150 4-1:1.0: couldn't reset the device [ 982.476522][ T4518] rtl8150: probe of 4-1:1.0 failed with error -5 [ 982.523689][ T4518] usb 4-1: USB disconnect, device number 32 [ 984.917866][T18806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 984.933920][T18807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 985.323882][T18841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4598'. [ 985.535902][T18849] device syzkaller0 entered promiscuous mode [ 985.848828][T18861] device syzkaller0 entered promiscuous mode [ 985.973095][T18864] device syzkaller0 entered promiscuous mode [ 986.317484][ T125] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 986.528930][ T125] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 986.544118][ T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.566582][ T125] usb 3-1: Product: syz [ 986.583474][ T125] usb 3-1: Manufacturer: syz [ 986.593691][ T125] usb 3-1: SerialNumber: syz [ 986.614056][T18881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4615'. [ 986.888358][T18886] device syzkaller0 entered promiscuous mode [ 986.897100][ T125] rtl8150 3-1:1.0: couldn't reset the device [ 986.908950][ T125] rtl8150: probe of 3-1:1.0 failed with error -5 [ 986.941854][ T125] usb 3-1: USB disconnect, device number 72 [ 987.033720][T18890] device syzkaller0 entered promiscuous mode [ 987.260964][T18898] ------------[ cut here ]------------ [ 987.267228][T18898] WARNING: CPU: 0 PID: 18898 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x139/0x160 [ 987.277633][T18898] Modules linked in: [ 987.281584][T18898] CPU: 0 PID: 18898 Comm: syz.4.4620 Not tainted syzkaller #0 [ 987.289256][T18898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 987.299510][T18898] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 987.305715][T18898] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2c ed 6f f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 57 e0 1e f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 987.325456][T18898] RSP: 0018:ffffc9001427ed68 EFLAGS: 00010283 [ 987.331587][T18898] RAX: ffffffff886394f9 RBX: ffffc9001427ee78 RCX: 0000000000080000 [ 987.339666][T18898] RDX: ffffc9001160b000 RSI: 0000000000006e01 RDI: 0000000000006e02 [ 987.347743][T18898] RBP: 0000000000000000 R08: ffffffff90af9417 R09: 1ffffffff215f282 [ 987.355912][T18898] R10: dffffc0000000000 R11: fffffbfff215f283 R12: 18ab7c0ea7ea3270 [ 987.363948][T18898] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 987.372068][T18898] FS: 00007f50b79f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 987.381119][T18898] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 987.387809][T18898] CR2: 00007f7c6494da08 CR3: 000000006f853000 CR4: 00000000003526f0 [ 987.395903][T18898] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 987.403939][T18898] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 987.412288][T18898] Call Trace: [ 987.415655][T18898] [ 987.418640][T18898] taprio_change+0x40d9/0x5490 [ 987.423500][T18898] ? taprio_destroy+0x4b0/0x4b0 [ 987.428470][T18898] ? qdisc_create+0x7eb/0x10b0 [ 987.433395][T18898] ? ____sys_sendmsg+0x5be/0x970 [ 987.438491][T18898] ? memset+0x1e/0x40 [ 987.442621][T18898] ? fifo_init+0x3f6/0x6d0 [ 987.447164][T18898] ? qdisc_peek_head+0x40/0x40 [ 987.452176][T18898] ? qdisc_alloc+0x77a/0xa50 [ 987.456883][T18898] ? rcu_is_watching+0x11/0xa0 [ 987.461733][T18898] ? taprio_peek+0x590/0x590 [ 987.466515][T18898] qdisc_create+0x7eb/0x10b0 [ 987.471188][T18898] ? qdisc_notify+0x370/0x370 [ 987.476115][T18898] ? lockdep_rtnl_is_held+0x22/0x30 [ 987.481504][T18898] ? qdisc_lookup+0x366/0x6c0 [ 987.486343][T18898] tc_modify_qdisc+0xb5f/0x1d10 [ 987.491463][T18898] ? qdisc_offload_query_caps+0x150/0x150 [ 987.497600][T18898] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 987.502800][T18898] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 987.508028][T18898] ? qdisc_offload_query_caps+0x150/0x150 [ 987.513919][T18898] rtnetlink_rcv_msg+0x87c/0xfc0 [ 987.518989][T18898] ? rtnetlink_bind+0x80/0x80 [ 987.523757][T18898] ? __local_bh_enable_ip+0x136/0x1c0 [ 987.529246][T18898] ? lockdep_hardirqs_on+0x94/0x140 [ 987.534603][T18898] ? __local_bh_enable_ip+0x136/0x1c0 [ 987.540038][T18898] ? _local_bh_enable+0xa0/0xa0 [ 987.545004][T18898] ? __dev_queue_xmit+0x26b/0x37c0 [ 987.550182][T18898] ? __dev_queue_xmit+0x26b/0x37c0 [ 987.555413][T18898] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 987.560704][T18898] ? __dev_queue_xmit+0x26b/0x37c0 [ 987.566051][T18898] ? ref_tracker_free+0x68c/0x840 [ 987.571244][T18898] ? __copy_skb_header+0x3ba/0x4f0 [ 987.576500][T18898] ? refcount_inc+0x70/0x70 [ 987.581078][T18898] ? memcpy+0x3c/0x60 [ 987.585219][T18898] ? __copy_skb_header+0x3ba/0x4f0 [ 987.590414][T18898] ? __skb_clone+0x480/0x790 [ 987.595253][T18898] netlink_rcv_skb+0x1fb/0x450 [ 987.600304][T18898] ? rtnetlink_bind+0x80/0x80 [ 987.605137][T18898] ? netlink_ack+0x1170/0x1170 [ 987.609994][T18898] ? netlink_deliver_tap+0x2e/0x1b0 [ 987.615367][T18898] netlink_unicast+0x74d/0x8d0 [ 987.620272][T18898] netlink_sendmsg+0x8ad/0xbd0 [ 987.625382][T18898] ? netlink_getsockopt+0x550/0x550 [ 987.630691][T18898] ? aa_sock_msg_perm+0x94/0x150 [ 987.636129][T18898] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 987.641484][T18898] ? security_socket_sendmsg+0x7c/0xa0 [ 987.647119][T18898] ? netlink_getsockopt+0x550/0x550 [ 987.652448][T18898] ____sys_sendmsg+0x5be/0x970 [ 987.657809][T18898] ? __sys_sendmsg_sock+0x30/0x30 [ 987.663000][T18898] ? __import_iovec+0x315/0x500 [ 987.668000][T18898] ? import_iovec+0x6f/0xa0 [ 987.672590][T18898] ___sys_sendmsg+0x2a2/0x360 [ 987.677409][T18898] ? try_to_wake_up+0x6ae/0x1080 [ 987.682424][T18898] ? __sys_sendmsg+0x290/0x290 [ 987.687400][T18898] __se_sys_sendmsg+0x1bb/0x2a0 [ 987.692338][T18898] ? __x64_sys_sendmsg+0x80/0x80 [ 987.697443][T18898] ? lockdep_hardirqs_on+0x94/0x140 [ 987.702720][T18898] do_syscall_64+0x4c/0xa0 [ 987.707285][T18898] ? clear_bhb_loop+0x60/0xb0 [ 987.712057][T18898] ? clear_bhb_loop+0x60/0xb0 [ 987.716889][T18898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 987.722849][T18898] RIP: 0033:0x7f50b979cdd9 [ 987.727404][T18898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.747402][T18898] RSP: 002b:00007f50b79f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 987.755959][T18898] RAX: ffffffffffffffda RBX: 00007f50b9a16090 RCX: 00007f50b979cdd9 [ 987.764002][T18898] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000008 [ 987.772110][T18898] RBP: 00007f50b9832d69 R08: 0000000000000000 R09: 0000000000000000 [ 987.780192][T18898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.788356][T18898] R13: 00007f50b9a16128 R14: 00007f50b9a16090 R15: 00007ffe703de7d8 [ 987.796463][T18898] [ 987.799539][T18898] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 987.806873][T18898] CPU: 0 PID: 18898 Comm: syz.4.4620 Not tainted syzkaller #0 [ 987.814394][T18898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 987.824502][T18898] Call Trace: [ 987.827959][T18898] [ 987.830961][T18898] dump_stack_lvl+0x188/0x24e [ 987.835706][T18898] ? memcpy+0x3c/0x60 [ 987.839742][T18898] ? show_regs_print_info+0x12/0x12 [ 987.845009][T18898] ? load_image+0x400/0x400 [ 987.849670][T18898] panic+0x2e5/0x730 [ 987.853626][T18898] ? bpf_jit_dump+0xd0/0xd0 [ 987.858287][T18898] __warn+0x2f8/0x4f0 [ 987.862361][T18898] ? taprio_get_start_time+0x139/0x160 [ 987.867892][T18898] ? taprio_get_start_time+0x139/0x160 [ 987.873448][T18898] report_bug+0x2ba/0x4f0 [ 987.877848][T18898] ? taprio_get_start_time+0x139/0x160 [ 987.883381][T18898] handle_bug+0x3a/0x70 [ 987.887616][T18898] exc_invalid_op+0x16/0x40 [ 987.892188][T18898] asm_exc_invalid_op+0x16/0x20 [ 987.897106][T18898] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 987.903282][T18898] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2c ed 6f f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 57 e0 1e f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 987.923125][T18898] RSP: 0018:ffffc9001427ed68 EFLAGS: 00010283 [ 987.929258][T18898] RAX: ffffffff886394f9 RBX: ffffc9001427ee78 RCX: 0000000000080000 [ 987.937307][T18898] RDX: ffffc9001160b000 RSI: 0000000000006e01 RDI: 0000000000006e02 [ 987.945342][T18898] RBP: 0000000000000000 R08: ffffffff90af9417 R09: 1ffffffff215f282 [ 987.953460][T18898] R10: dffffc0000000000 R11: fffffbfff215f283 R12: 18ab7c0ea7ea3270 [ 987.961503][T18898] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 987.969628][T18898] ? taprio_get_start_time+0x139/0x160 [ 987.975174][T18898] ? taprio_get_start_time+0x139/0x160 [ 987.980707][T18898] taprio_change+0x40d9/0x5490 [ 987.985553][T18898] ? taprio_destroy+0x4b0/0x4b0 [ 987.990462][T18898] ? qdisc_create+0x7eb/0x10b0 [ 987.995286][T18898] ? ____sys_sendmsg+0x5be/0x970 [ 988.000382][T18898] ? memset+0x1e/0x40 [ 988.004417][T18898] ? fifo_init+0x3f6/0x6d0 [ 988.008900][T18898] ? qdisc_peek_head+0x40/0x40 [ 988.013723][T18898] ? qdisc_alloc+0x77a/0xa50 [ 988.018378][T18898] ? rcu_is_watching+0x11/0xa0 [ 988.023224][T18898] ? taprio_peek+0x590/0x590 [ 988.027881][T18898] qdisc_create+0x7eb/0x10b0 [ 988.032547][T18898] ? qdisc_notify+0x370/0x370 [ 988.037287][T18898] ? lockdep_rtnl_is_held+0x22/0x30 [ 988.042548][T18898] ? qdisc_lookup+0x366/0x6c0 [ 988.047306][T18898] tc_modify_qdisc+0xb5f/0x1d10 [ 988.052244][T18898] ? qdisc_offload_query_caps+0x150/0x150 [ 988.058056][T18898] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 988.063249][T18898] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 988.068420][T18898] ? qdisc_offload_query_caps+0x150/0x150 [ 988.074203][T18898] rtnetlink_rcv_msg+0x87c/0xfc0 [ 988.079234][T18898] ? rtnetlink_bind+0x80/0x80 [ 988.083980][T18898] ? __local_bh_enable_ip+0x136/0x1c0 [ 988.089406][T18898] ? lockdep_hardirqs_on+0x94/0x140 [ 988.094659][T18898] ? __local_bh_enable_ip+0x136/0x1c0 [ 988.100093][T18898] ? _local_bh_enable+0xa0/0xa0 [ 988.105017][T18898] ? __dev_queue_xmit+0x26b/0x37c0 [ 988.110264][T18898] ? __dev_queue_xmit+0x26b/0x37c0 [ 988.115430][T18898] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 988.120699][T18898] ? __dev_queue_xmit+0x26b/0x37c0 [ 988.126010][T18898] ? ref_tracker_free+0x68c/0x840 [ 988.131100][T18898] ? __copy_skb_header+0x3ba/0x4f0 [ 988.136459][T18898] ? refcount_inc+0x70/0x70 [ 988.141020][T18898] ? memcpy+0x3c/0x60 [ 988.145062][T18898] ? __copy_skb_header+0x3ba/0x4f0 [ 988.150248][T18898] ? __skb_clone+0x480/0x790 [ 988.154930][T18898] netlink_rcv_skb+0x1fb/0x450 [ 988.160198][T18898] ? rtnetlink_bind+0x80/0x80 [ 988.164942][T18898] ? netlink_ack+0x1170/0x1170 [ 988.169785][T18898] ? netlink_deliver_tap+0x2e/0x1b0 [ 988.175227][T18898] netlink_unicast+0x74d/0x8d0 [ 988.180109][T18898] netlink_sendmsg+0x8ad/0xbd0 [ 988.184955][T18898] ? netlink_getsockopt+0x550/0x550 [ 988.190219][T18898] ? aa_sock_msg_perm+0x94/0x150 [ 988.195303][T18898] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 988.200647][T18898] ? security_socket_sendmsg+0x7c/0xa0 [ 988.206275][T18898] ? netlink_getsockopt+0x550/0x550 [ 988.211545][T18898] ____sys_sendmsg+0x5be/0x970 [ 988.216384][T18898] ? __sys_sendmsg_sock+0x30/0x30 [ 988.221488][T18898] ? __import_iovec+0x315/0x500 [ 988.226405][T18898] ? import_iovec+0x6f/0xa0 [ 988.231140][T18898] ___sys_sendmsg+0x2a2/0x360 [ 988.235889][T18898] ? try_to_wake_up+0x6ae/0x1080 [ 988.240906][T18898] ? __sys_sendmsg+0x290/0x290 [ 988.245808][T18898] __se_sys_sendmsg+0x1bb/0x2a0 [ 988.250814][T18898] ? __x64_sys_sendmsg+0x80/0x80 [ 988.255835][T18898] ? lockdep_hardirqs_on+0x94/0x140 [ 988.261115][T18898] do_syscall_64+0x4c/0xa0 [ 988.265591][T18898] ? clear_bhb_loop+0x60/0xb0 [ 988.270349][T18898] ? clear_bhb_loop+0x60/0xb0 [ 988.275091][T18898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 988.281048][T18898] RIP: 0033:0x7f50b979cdd9 [ 988.285514][T18898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.305531][T18898] RSP: 002b:00007f50b79f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 988.314002][T18898] RAX: ffffffffffffffda RBX: 00007f50b9a16090 RCX: 00007f50b979cdd9 [ 988.322042][T18898] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000008 [ 988.330074][T18898] RBP: 00007f50b9832d69 R08: 0000000000000000 R09: 0000000000000000 [ 988.338221][T18898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 988.346245][T18898] R13: 00007f50b9a16128 R14: 00007f50b9a16090 R15: 00007ffe703de7d8 [ 988.354298][T18898] [ 988.358022][T18898] Kernel Offset: disabled [ 988.362490][T18898] Rebooting in 86400 seconds..