last executing test programs: 9m44.819162433s ago: executing program 2 (id=152): socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = msgget(0x2, 0x200) msgctl$IPC_RMID(r1, 0x0) getpid() msgget(0x2, 0x624) msgget(0x1, 0x240) msgget(0x3, 0x606) 9m44.179187309s ago: executing program 2 (id=153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7cff000000000000108a15df09", 0xf}], 0x2) 9m43.769661745s ago: executing program 2 (id=158): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xd, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 9m43.630535427s ago: executing program 2 (id=160): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x19e, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, &(0x7f0000000500)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r4, 0x4, r4}, 0x30) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6ea, &(0x7f0000000280)="$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") symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x140008c0, &(0x7f0000001840)={0xa, 0x0, 0x8001, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) close(r10) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f00000013c0)={0x0, 0x0, 0x8, 0x19, 0x200, &(0x7f0000001400)="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"}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') 9m42.386986597s ago: executing program 2 (id=161): socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = msgget(0x2, 0x200) msgctl$IPC_RMID(r1, 0x0) getpid() msgget(0x2, 0x624) msgget(0x1, 0x240) msgget(0x3, 0x606) 9m42.106999332s ago: executing program 2 (id=162): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 9m26.94239595s ago: executing program 32 (id=162): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 6m1.086957492s ago: executing program 0 (id=1327): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300020c0000002cbd7000fcdbdf250500060000a000000a00"], 0x60}, 0x1, 0x7}, 0x0) 6m0.861520152s ago: executing program 0 (id=1331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 5m58.61090283s ago: executing program 0 (id=1335): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000006000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xb6, 0x8, &(0x7f0000000500)="0000000005000000b827cfbd5b2557d124b36b1122d87ad5789be2659d3d11d5a092867f0775b46e8bb389f091ad5cfd8b12b027e3cada3ec7c00ccd27def234c9076871715addd92541449a294702886aff24169f8bd5de9dbe28c801507f35ba4a3f1c556f31e99832e92bdb8864775ab8224b4245ddbea80c49edb93e68f834584034ddf0e5d1c714880464ea558ef29dbac78eeb2bfc8339fbc7e66e89fc281af8045dee481af5abaa2ff953ebfb3df0a70872d0", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m58.38730455s ago: executing program 0 (id=1339): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000002000, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x40, 0x0) 5m58.16321121s ago: executing program 0 (id=1343): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, 0x0, 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e, 0xff00}}, @ip_tos_u8={{0x11, 0x29, 0x2}}, @ip_tos_u8={{0x11}}], 0x48}, 0xff00) 5m57.991778525s ago: executing program 0 (id=1344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 5m57.644388015s ago: executing program 33 (id=1344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 18.379868558s ago: executing program 5 (id=2157): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) syz_open_dev$vbi(0x0, 0x1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) recvfrom$ax25(r3, &(0x7f0000000300)=""/197, 0xc5, 0x12100, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @bcast, @null, @null]}, 0x48) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 17.402641304s ago: executing program 5 (id=2158): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$poke(0x5, 0x0, &(0x7f0000000080), 0xf5) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f00000005c0)={[0x8]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x3b94, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x6, 0xa, 0xffffffff, 0x2, 0x2, 0x3e7}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000040)={0xe, 0x4, 0xfa00, @ib_path={&(0x7f0000000380)=[{0x32, 0x0, [0x5c3, 0x7, 0x1, 0x800, 0x8, 0x101, 0xe3, 0x4, 0xcc, 0x4, 0xc, 0x1, 0x4, 0x5, 0xcc, 0x8]}, {0x20, 0x0, [0x8, 0x1, 0xd, 0x9, 0xdf0, 0x1, 0xfffffff8, 0xd, 0x6, 0xfbd, 0x5050bf1b, 0xb, 0x10, 0x3fc, 0x3ff, 0x1]}, {0x29, 0x0, [0x9, 0x4705, 0xffffffff, 0x2, 0xb462, 0x7, 0x3, 0x3, 0x84, 0xffffffff, 0x4, 0x1, 0x50000000, 0x4, 0x3]}], r8}}, 0x20) 10.020851986s ago: executing program 5 (id=2162): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000e54003000000000085100000fcffffff2500feff0000000085100000faffffff95000000000000001f5713c293a7d8840836e3860cae8acdacc42f1290d9d90bdfed385c4e31f22a65d3c24059fd69a9764cc082cc332223766cbb3edc4edf1cc618d59a79e9de2be0ef46a2790bf0450956c0a9cd77827016fb63abc24b32c242ffe5524953e44553beac7894ff25da0f7cf49dab5dbb85f712d2219822aa418ceccc3d45a2a37599fa28c6e61954c0f5f04722e7bd3a196e"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0xc, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'none\x00', 0x0, 0xfffffffc}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) madvise(&(0x7f0000773000/0x4000)=nil, 0x4000, 0xd) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000001c0)={0x42, @loopback, 0x4e20, 0x3, 'rr\x00', 0x8, 0x7, 0x47}, 0x2c) sendmsg$nl_route_sched(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40000}, 0x14}, 0x1, 0x2b1e}, 0x0) write$UHID_INPUT(r0, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) 10.001277987s ago: executing program 3 (id=2163): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r1 = socket(0x1, 0x803, 0x0) syz_open_dev$dri(&(0x7f0000000500), 0x7fffffff, 0x4040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000100045ffff0470000000200000000000", @ANYRES32=0x0, @ANYBLOB="000000000520040008001b00000000000800290044fa010008000d0000000080"], 0x38}}, 0x4000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x96eec000) socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0xfffffffffffffdf3, 0x101, 0x4002, 0x2, 0x8, 0xfca7}}, 0x11c) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)={0x44, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x20}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040841}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001041a00"/20, @ANYRES32=0x0, @ANYBLOB="7b1300000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000400b800010008000400d2080000"], 0x50}, 0x1, 0x0, 0x0, 0x24040890}, 0x44180) 9.009475105s ago: executing program 1 (id=2165): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000006000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x0, &(0x7f0000000500)="0000000005000000b827cfbd5b2557d1", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.558343525s ago: executing program 1 (id=2167): syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f00009a9000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 8.339301844s ago: executing program 3 (id=2168): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010000000000020002"], 0x0, 0x1a, 0x0, 0x1, 0x5}, 0x28) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 8.141223311s ago: executing program 1 (id=2169): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 8.100759635s ago: executing program 4 (id=2170): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x1007e, @loopback, 0x1}, 0x1c) r3 = syz_open_dev$cec(0x0, 0x0, 0x4000) ioctl$CEC_ADAP_G_PHYS_ADDR(r3, 0x80026101, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x1007e, @loopback, 0x1}, 0x1c) listen(r0, 0x0) listen(r1, 0x2) 7.987812195s ago: executing program 5 (id=2171): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7cff000000000000108a15df0953fdd7b0a35041b9ff1f1d4c2fe4b43eb7524d7ae1f89e1b78208123dc24725be8680999", 0x33}], 0x2) 7.880729785s ago: executing program 1 (id=2172): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000306"], 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x0, 0xfc}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040)={r4, 0xb}, 0x8) write$cgroup_int(r2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="05"], 0x10) close(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000500), &(0x7f0000000540)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) close(r5) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40088c0) 7.880565994s ago: executing program 4 (id=2173): openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x1cb8c0) r0 = getpid() syz_pidfd_open(r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r2, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0xa00, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 7.880279595s ago: executing program 3 (id=2174): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffff8) syz_open_dev$sg(0x0, 0x0, 0x5) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000009}, 0x0, 0x0) 7.456720922s ago: executing program 3 (id=2175): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = io_uring_setup(0xf09, &(0x7f0000000600)={0x0, 0xfb6e, 0x3890, 0x87, 0x400363}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x200080c0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000720000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac5500000000030006000000000002008e34000000000000000000000000020001000000000000000a1600000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) 6.825739647s ago: executing program 4 (id=2176): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r1 = socket(0x1, 0x803, 0x0) syz_open_dev$dri(&(0x7f0000000500), 0x7fffffff, 0x4040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000100045ffff0470000000200000000000", @ANYRES32=0x0, @ANYBLOB="000000000520040008001b00000000000800290044fa010008000d0000000080"], 0x38}}, 0x4000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x96eec000) socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0xfffffffffffffdf3, 0x101, 0x4002, 0x2, 0x8, 0xfca7}}, 0x11c) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)={0x44, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x20}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040841}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001041a00"/20, @ANYRES32=0x0, @ANYBLOB="7b1300000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000400b800010008000400d2080000"], 0x50}, 0x1, 0x0, 0x0, 0x24040890}, 0x44180) 5.135536387s ago: executing program 4 (id=2177): syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f00009a9000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 1.671226842s ago: executing program 4 (id=2178): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) syz_open_dev$vbi(0x0, 0x1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) recvfrom$ax25(r2, &(0x7f0000000300)=""/197, 0xc5, 0x12100, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @bcast, @null, @null]}, 0x48) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.597274899s ago: executing program 3 (id=2179): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000e54003000000000085100000fcffffff2500feff0000000085100000faffffff95000000000000001f5713c293a7d8840836e3860cae8acdacc42f1290d9d90bdfed385c4e31f22a65d3c24059fd69a9764cc082cc332223766cbb3edc4edf1cc618d59a79e9de2be0ef46a2790bf0450956c0a9cd77827016fb63abc24b32c242ffe5524953e44553beac7894ff25da0f7cf49dab5dbb85f712d2219822aa418ceccc3d45a2a37599fa28c6e61954c0f5f04722e7bd3a196e"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0xc, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'none\x00', 0x0, 0xfffffffc}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) madvise(&(0x7f0000773000/0x4000)=nil, 0x4000, 0xd) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000001c0)={0x42, @loopback, 0x4e20, 0x3, 'rr\x00', 0x8, 0x7, 0x47}, 0x2c) sendmsg$nl_route_sched(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40000}, 0x14}, 0x1, 0x2b1e}, 0x0) write$UHID_INPUT(r0, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) 1.58876817s ago: executing program 5 (id=2180): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40c}}, 0x0) 1.518842615s ago: executing program 1 (id=2181): r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) 1.2362054s ago: executing program 5 (id=2182): r0 = socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffe11, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_CMDTEST(r5, 0x8040640a, &(0x7f00000000c0)={0x1, 0x30000, 0xffffffff, 0x3, 0x10, 0x6, 0x40, 0x6, 0x80, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r7, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fadbdf2501000000140002007767310000000000000000000000000024000300a0cb879a47f5"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x3e, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = dup(r8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e21, 0x41d, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x2}, 0x81, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x10, 0x1, 0x24, 0x800}}, @mark={{0x10, 0x1, 0x51, 0x8}}], 0x20}, 0x80) 527.181563ms ago: executing program 1 (id=2183): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 412.911753ms ago: executing program 3 (id=2184): openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x1cb8c0) r0 = getpid() syz_pidfd_open(r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r2, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0xa00, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 0s ago: executing program 4 (id=2185): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.653: couldn't read orphan inode 15 (err -117) [ 235.624370][ T8061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 235.987016][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 236.051464][ T8071] batadv_slave_0: entered promiscuous mode [ 237.556325][ T5835] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 237.784880][ T5835] usb 5-1: Using ep0 maxpacket: 32 [ 237.814822][ T5835] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 237.848254][ T5835] usb 5-1: config 0 has no interface number 0 [ 237.895118][ T5835] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 237.933016][ T5835] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 237.947987][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.972101][ T5835] usb 5-1: Product: syz [ 237.992817][ T5835] usb 5-1: Manufacturer: syz [ 238.023057][ T5835] usb 5-1: SerialNumber: syz [ 238.059718][ T5835] usb 5-1: config 0 descriptor?? [ 238.079119][ T8091] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 238.806960][ T8091] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 239.684368][ T5835] asix 5-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 226 [ 239.856528][ T8124] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 241.206235][ T786] usb 5-1: USB disconnect, device number 7 [ 241.449547][ T8151] loop4: detected capacity change from 0 to 512 [ 241.541809][ T8151] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.680: inode has both inline data and extents flags [ 241.555315][ T5835] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 241.651683][ T8151] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.680: couldn't read orphan inode 15 (err -117) [ 241.717211][ T8151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 241.756791][ T5835] usb 1-1: device descriptor read/64, error -71 [ 242.186353][ T5835] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 242.369330][ T5835] usb 1-1: device descriptor read/64, error -71 [ 242.504302][ T5835] usb usb1-port1: attempt power cycle [ 242.810395][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 242.882633][ T6543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 242.927804][ T5835] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 242.994303][ T5835] usb 1-1: device descriptor read/8, error -71 [ 243.282657][ T5835] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 243.340250][ T5835] usb 1-1: device descriptor read/8, error -71 [ 243.519518][ T5835] usb usb1-port1: unable to enumerate USB device [ 244.196239][ T8184] hsr0: entered promiscuous mode [ 244.302695][ T8184] hsr0: left promiscuous mode [ 245.138474][ T8198] netlink: 'syz.0.692': attribute type 1 has an invalid length. [ 245.656287][ T5816] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 245.782230][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.705'. [ 245.794142][ T8225] netlink: 104 bytes leftover after parsing attributes in process `syz.3.705'. [ 245.826189][ T5816] usb 5-1: device descriptor read/64, error -71 [ 245.962591][ T8227] netlink: 'syz.1.706': attribute type 1 has an invalid length. [ 246.096048][ T5816] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 246.266485][ T5816] usb 5-1: device descriptor read/64, error -71 [ 246.386289][ T5816] usb usb5-port1: attempt power cycle [ 246.672521][ T8255] netlink: 'syz.3.718': attribute type 1 has an invalid length. [ 246.806154][ T5816] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 246.897673][ T5816] usb 5-1: device descriptor read/8, error -71 [ 247.176793][ T5816] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 247.220291][ T5816] usb 5-1: device descriptor read/8, error -71 [ 247.346414][ T5816] usb usb5-port1: unable to enumerate USB device [ 247.405344][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.728'. [ 247.431477][ T8278] vlan2: entered promiscuous mode [ 247.441693][ T8278] syz_tun: entered promiscuous mode [ 247.506288][ T8283] netlink: 36 bytes leftover after parsing attributes in process `syz.3.730'. [ 247.524970][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 247.845402][ T8291] netlink: 'syz.3.734': attribute type 1 has an invalid length. [ 248.281376][ T8308] tipc: Enabled bearer , priority 0 [ 248.296186][ T8307] tipc: Disabling bearer [ 248.603277][ T8319] loop4: detected capacity change from 0 to 1024 [ 249.437677][ T8339] IPVS: Scheduler module ip_vs_sip not found [ 249.454750][ T8344] tipc: Enabled bearer , priority 0 [ 249.482652][ T8342] tipc: Disabling bearer [ 249.516432][ T786] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 249.716262][ T786] usb 4-1: device descriptor read/64, error -71 [ 249.797175][ T8354] loop1: detected capacity change from 0 to 1024 [ 250.198200][ T786] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 250.266043][ T5835] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 250.358651][ T786] usb 4-1: device descriptor read/64, error -71 [ 250.466279][ T5835] usb 5-1: Using ep0 maxpacket: 32 [ 250.480982][ T5835] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 250.490990][ T786] usb usb4-port1: attempt power cycle [ 250.500284][ T5835] usb 5-1: config 0 has no interface number 0 [ 250.530166][ T5835] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 250.565109][ T5835] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 250.609935][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.620609][ T5835] usb 5-1: Product: syz [ 250.624835][ T5835] usb 5-1: Manufacturer: syz [ 250.634482][ T5835] usb 5-1: SerialNumber: syz [ 250.634875][ T8373] tipc: Enabled bearer , priority 0 [ 250.643858][ T5835] usb 5-1: config 0 descriptor?? [ 250.660530][ T8355] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 250.719491][ T8372] tipc: Disabling bearer [ 250.912323][ T8355] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 250.936193][ T786] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 251.002212][ T786] usb 4-1: device descriptor read/8, error -71 [ 251.287528][ T786] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 251.329236][ T786] usb 4-1: device descriptor read/8, error -71 [ 251.401012][ T8384] loop0: detected capacity change from 0 to 1024 [ 251.447119][ T786] usb usb4-port1: unable to enumerate USB device [ 251.761041][ T5835] asix 5-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 226 [ 252.115781][ T8393] syzkaller0: entered promiscuous mode [ 252.132274][ T8393] syzkaller0: entered allmulticast mode [ 253.093796][ T787] usb 5-1: USB disconnect, device number 12 [ 254.079692][ T787] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 254.258771][ T787] usb 2-1: device descriptor read/64, error -71 [ 254.557765][ T787] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 254.737090][ T787] usb 2-1: device descriptor read/64, error -71 [ 254.879935][ T787] usb usb2-port1: attempt power cycle [ 255.286916][ T787] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 255.347857][ T787] usb 2-1: device descriptor read/8, error -71 [ 255.546536][ T8443] ip6gre1: entered promiscuous mode [ 255.551874][ T8443] ip6gre1: entered allmulticast mode [ 255.830626][ T787] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 255.868294][ T787] usb 2-1: device descriptor read/8, error -71 [ 255.964746][ T8455] netlink: 'syz.4.795': attribute type 1 has an invalid length. [ 255.988197][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 255.997813][ T787] usb usb2-port1: unable to enumerate USB device [ 256.250657][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.258393][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.304812][ T8498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.811'. [ 257.364577][ T8498] netlink: 104 bytes leftover after parsing attributes in process `syz.0.811'. [ 257.736426][ T8510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.816'. [ 258.044481][ T8516] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 258.120212][ T8529] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.821'. [ 258.325138][ T8533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'. [ 258.356962][ T8533] netlink: 104 bytes leftover after parsing attributes in process `syz.3.822'. [ 258.508012][ T8539] syzkaller0: entered promiscuous mode [ 258.516256][ T8539] syzkaller0: entered allmulticast mode [ 258.663193][ T8549] loop1: detected capacity change from 0 to 512 [ 258.717109][ T8549] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.827: inode has both inline data and extents flags [ 258.799560][ T8549] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.827: couldn't read orphan inode 15 (err -117) [ 258.897980][ T8549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 259.648135][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 259.888837][ T8569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.834'. [ 259.957049][ T8569] netlink: 104 bytes leftover after parsing attributes in process `syz.3.834'. [ 260.158659][ T8580] netlink: 136 bytes leftover after parsing attributes in process `syz.3.839'. [ 260.169811][ T8580] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 260.233241][ T8577] syzkaller0: entered promiscuous mode [ 260.283952][ T8577] syzkaller0: entered allmulticast mode [ 260.646922][ T5816] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 260.823743][ T5816] usb 4-1: device descriptor read/64, error -71 [ 260.968080][ T8607] syzkaller0: entered promiscuous mode [ 260.973775][ T8607] syzkaller0: entered allmulticast mode [ 261.106757][ T5816] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 261.203253][ T8613] __nla_validate_parse: 2 callbacks suppressed [ 261.203270][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.855'. [ 261.258711][ T8615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'. [ 261.269134][ T5816] usb 4-1: device descriptor read/64, error -71 [ 261.280108][ T8615] netlink: 104 bytes leftover after parsing attributes in process `syz.1.856'. [ 261.387134][ T5816] usb usb4-port1: attempt power cycle [ 261.674094][ T8629] syzkaller0: entered promiscuous mode [ 261.683622][ T8629] syzkaller0: entered allmulticast mode [ 261.705315][ T8627] syzkaller0: entered promiscuous mode [ 261.712342][ T8627] syzkaller0: entered allmulticast mode [ 261.721637][ T8627] 0: reclassify loop, rule prio 0, protocol 700 [ 261.818281][ T5816] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 261.870950][ T5816] usb 4-1: device descriptor read/8, error -71 [ 261.882556][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 261.929317][ T8635] netlink: 104 bytes leftover after parsing attributes in process `syz.1.865'. [ 262.146839][ T5816] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 262.188898][ T8640] netlink: 'syz.1.867': attribute type 33 has an invalid length. [ 262.204130][ T5816] usb 4-1: device descriptor read/8, error -71 [ 262.231538][ T8640] netlink: 152 bytes leftover after parsing attributes in process `syz.1.867'. [ 262.293446][ T8640] netlink: 14 bytes leftover after parsing attributes in process `syz.1.867'. [ 262.336288][ T5816] usb usb4-port1: unable to enumerate USB device [ 262.766708][ T8661] loop4: detected capacity change from 0 to 512 [ 262.823060][ T8661] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.874: inode has both inline data and extents flags [ 262.853294][ T8661] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.874: couldn't read orphan inode 15 (err -117) [ 262.916121][ T8661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 263.495526][ T8676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.876'. [ 263.541803][ T6543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 263.596085][ T8676] netlink: 104 bytes leftover after parsing attributes in process `syz.0.876'. [ 264.385307][ T8706] netlink: 104 bytes leftover after parsing attributes in process `syz.0.887'. [ 264.496078][ T787] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 264.618907][ T8710] syzkaller1: entered promiscuous mode [ 264.624592][ T8710] syzkaller1: entered allmulticast mode [ 264.685128][ T787] usb 5-1: device descriptor read/64, error -71 [ 264.986208][ T787] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 265.086309][ T6081] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 265.109876][ T8726] syzkaller0: entered promiscuous mode [ 265.115395][ T8726] syzkaller0: entered allmulticast mode [ 265.146113][ T787] usb 5-1: device descriptor read/64, error -71 [ 265.265032][ T6081] usb 2-1: device descriptor read/64, error -71 [ 265.272714][ T787] usb usb5-port1: attempt power cycle [ 265.549021][ T6081] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 265.686707][ T787] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 265.717467][ T6081] usb 2-1: device descriptor read/64, error -71 [ 265.724897][ T787] usb 5-1: device descriptor read/8, error -71 [ 265.855117][ T6081] usb usb2-port1: attempt power cycle [ 266.016080][ T787] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 266.061662][ T787] usb 5-1: device descriptor read/8, error -71 [ 266.200000][ T787] usb usb5-port1: unable to enumerate USB device [ 266.278463][ T6081] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 266.333854][ T6081] usb 2-1: device descriptor read/8, error -71 [ 266.618896][ T6081] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 266.670403][ T6081] usb 2-1: device descriptor read/8, error -71 [ 266.797240][ T6081] usb usb2-port1: unable to enumerate USB device [ 267.590593][ T8735] netlink: 104 bytes leftover after parsing attributes in process `syz.0.897'. [ 268.150620][ T8753] syzkaller0: entered promiscuous mode [ 268.158002][ T8753] syzkaller0: entered allmulticast mode [ 268.236385][ T5835] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 268.381789][ T8759] syzkaller0: entered promiscuous mode [ 268.387443][ T8759] syzkaller0: entered allmulticast mode [ 268.396120][ T5835] usb 1-1: device descriptor read/64, error -71 [ 268.668397][ T5835] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 268.834349][ T5835] usb 1-1: device descriptor read/64, error -71 [ 268.905437][ T8763] netlink: 104 bytes leftover after parsing attributes in process `syz.1.907'. [ 268.973179][ T5835] usb usb1-port1: attempt power cycle [ 269.014207][ T8765] loop1: detected capacity change from 0 to 512 [ 269.076843][ T8765] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.908: inode has both inline data and extents flags [ 269.092691][ T8765] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.908: couldn't read orphan inode 15 (err -117) [ 269.107222][ T8765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 269.386889][ T5835] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 269.443662][ T5835] usb 1-1: device descriptor read/8, error -71 [ 269.716249][ T5835] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 269.749523][ T5835] usb 1-1: device descriptor read/8, error -71 [ 269.896183][ T5835] usb usb1-port1: unable to enumerate USB device [ 270.120107][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 271.725108][ T8800] netlink: 'syz.3.915': attribute type 1 has an invalid length. [ 271.826362][ T5788] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 271.925894][ T8806] netlink: 104 bytes leftover after parsing attributes in process `syz.3.916'. [ 272.018008][ T5788] usb 5-1: no configurations [ 272.022917][ T5788] usb 5-1: can't read configurations, error -22 [ 272.178800][ T5788] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 272.210032][ T8812] syzkaller0: entered promiscuous mode [ 272.215655][ T8812] syzkaller0: entered allmulticast mode [ 272.374336][ T5788] usb 5-1: no configurations [ 272.388836][ T5788] usb 5-1: can't read configurations, error -22 [ 272.395526][ T5788] usb usb5-port1: attempt power cycle [ 272.832709][ T5788] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 272.872389][ T5788] usb 5-1: no configurations [ 272.879294][ T5788] usb 5-1: can't read configurations, error -22 [ 273.046178][ T5788] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 273.082441][ T5788] usb 5-1: no configurations [ 273.087727][ T5788] usb 5-1: can't read configurations, error -22 [ 273.099088][ T5788] usb usb5-port1: unable to enumerate USB device [ 274.670291][ T8793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.845635][ T8840] netlink: 104 bytes leftover after parsing attributes in process `syz.1.926'. [ 275.546394][ T787] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 275.600431][ T8874] tipc: Enabled bearer , priority 0 [ 275.621601][ T8874] syzkaller0: entered promiscuous mode [ 275.627801][ T8874] syzkaller0: entered allmulticast mode [ 275.644598][ T8874] tipc: Resetting bearer [ 275.658972][ T8873] tipc: Resetting bearer [ 275.694824][ T8873] tipc: Disabling bearer [ 275.778294][ T787] usb 4-1: no configurations [ 275.782979][ T787] usb 4-1: can't read configurations, error -22 [ 275.946184][ T787] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 276.167695][ T787] usb 4-1: no configurations [ 276.172382][ T787] usb 4-1: can't read configurations, error -22 [ 276.177322][ T8892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.943'. [ 276.196309][ T787] usb usb4-port1: attempt power cycle [ 276.554247][ T8906] tipc: Enabled bearer , priority 0 [ 276.587213][ T8906] syzkaller0: entered promiscuous mode [ 276.592756][ T8906] syzkaller0: entered allmulticast mode [ 276.606251][ T787] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 276.634875][ T8906] tipc: Resetting bearer [ 276.658633][ T787] usb 4-1: no configurations [ 276.663302][ T787] usb 4-1: can't read configurations, error -22 [ 276.666210][ T8905] tipc: Resetting bearer [ 276.699790][ T8905] tipc: Disabling bearer [ 276.826428][ T787] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 276.862741][ T787] usb 4-1: no configurations [ 276.871648][ T787] usb 4-1: can't read configurations, error -22 [ 276.884230][ T787] usb usb4-port1: unable to enumerate USB device [ 277.252636][ T8926] syzkaller0: entered promiscuous mode [ 277.263627][ T8926] syzkaller0: entered allmulticast mode [ 277.558059][ T8934] tipc: Enabled bearer , priority 0 [ 277.580238][ T8934] syzkaller0: entered promiscuous mode [ 277.592058][ T8934] syzkaller0: entered allmulticast mode [ 277.624198][ T8934] tipc: Resetting bearer [ 277.635296][ T8933] tipc: Resetting bearer [ 277.677953][ T8933] tipc: Disabling bearer [ 278.010910][ T8953] netlink: 136 bytes leftover after parsing attributes in process `syz.4.968'. [ 278.038906][ T8953] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 278.468120][ T8965] tipc: Enabled bearer , priority 0 [ 278.481569][ T8965] syzkaller0: entered promiscuous mode [ 278.489211][ T8965] syzkaller0: entered allmulticast mode [ 278.516888][ T8965] tipc: Resetting bearer [ 278.537485][ T8964] tipc: Resetting bearer [ 278.560749][ T8964] tipc: Disabling bearer [ 279.063838][ T8985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.984'. [ 279.194805][ T8986] syzkaller0: entered promiscuous mode [ 279.206145][ T8986] syzkaller0: entered allmulticast mode [ 279.212164][ T6084] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 279.409710][ T6084] usb 1-1: no configurations [ 279.426326][ T6084] usb 1-1: can't read configurations, error -22 [ 279.577465][ T6084] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 279.585431][ T9004] tipc: Enabled bearer , priority 0 [ 279.610843][ T9004] syzkaller0: entered promiscuous mode [ 279.622739][ T9004] syzkaller0: entered allmulticast mode [ 279.654171][ T9004] tipc: Resetting bearer [ 279.671199][ T9003] tipc: Resetting bearer [ 279.694153][ T9003] tipc: Disabling bearer [ 279.786890][ T6084] usb 1-1: no configurations [ 279.791576][ T6084] usb 1-1: can't read configurations, error -22 [ 279.799567][ T6084] usb usb1-port1: attempt power cycle [ 279.833496][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.991'. [ 279.864947][ T9011] netlink: 104 bytes leftover after parsing attributes in process `syz.1.991'. [ 280.073707][ T9015] veth1_vlan: left allmulticast mode [ 280.084414][ T9015] team0: Port device macvlan1 removed [ 280.216235][ T6084] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 280.259330][ T6084] usb 1-1: no configurations [ 280.264093][ T6084] usb 1-1: can't read configurations, error -22 [ 280.426356][ T6084] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 280.471961][ T6084] usb 1-1: no configurations [ 280.486551][ T6084] usb 1-1: can't read configurations, error -22 [ 280.507381][ T6084] usb usb1-port1: unable to enumerate USB device [ 280.865300][ T9040] tipc: Enabled bearer , priority 0 [ 280.877560][ T9040] syzkaller0: entered promiscuous mode [ 280.883259][ T9040] syzkaller0: entered allmulticast mode [ 280.927044][ T9040] tipc: Resetting bearer [ 280.956760][ T9039] tipc: Resetting bearer [ 281.000722][ T9039] tipc: Disabling bearer [ 281.681677][ T9053] netlink: 'syz.3.1005': attribute type 1 has an invalid length. [ 281.719829][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1001'. [ 282.496090][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1011'. [ 283.406081][ T5788] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 283.456252][ T786] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 283.599417][ T5788] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.620564][ T5788] usb 5-1: config 0 has no interfaces? [ 283.639343][ T5788] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 283.656434][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 283.666478][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.688802][ T786] usb 2-1: config 0 has no interfaces? [ 283.697575][ T5788] usb 5-1: config 0 descriptor?? [ 283.704694][ T786] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 283.730059][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.738448][ T786] usb 2-1: Product: syz [ 283.743080][ T786] usb 2-1: Manufacturer: syz [ 283.756444][ T786] usb 2-1: SerialNumber: syz [ 283.770350][ T786] usb 2-1: config 0 descriptor?? [ 283.940312][ T9112] syzkaller0: entered promiscuous mode [ 283.946447][ T9112] syzkaller0: entered allmulticast mode [ 286.163839][ T9127] tipc: Enabling of bearer rejected, failed to enable media [ 286.174483][ T787] usb 5-1: USB disconnect, device number 21 [ 286.195480][ T786] usb 2-1: USB disconnect, device number 22 [ 286.626411][ T9150] syzkaller0: entered promiscuous mode [ 286.632409][ T9150] syzkaller0: entered allmulticast mode [ 286.829358][ T9156] syz_tun: entered allmulticast mode [ 286.891384][ T9156] bridge_slave_0: left allmulticast mode [ 286.903397][ T9156] bridge_slave_0: left promiscuous mode [ 286.909647][ T9156] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.921158][ T9156] bridge_slave_1: left allmulticast mode [ 286.927592][ T9156] bridge_slave_1: left promiscuous mode [ 286.934760][ T9156] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.950737][ T9156] bond0: (slave bond_slave_0): Releasing backup interface [ 286.965670][ T9156] bond0: (slave bond_slave_1): Releasing backup interface [ 287.006168][ T9156] team0: Port device team_slave_0 removed [ 287.024716][ T9156] team0: Port device team_slave_1 removed [ 287.035241][ T9156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.044919][ T9156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.059780][ T9156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.343311][ T9168] tipc: Enabled bearer , priority 0 [ 287.352100][ T9168] syzkaller0: entered promiscuous mode [ 287.358216][ T9168] syzkaller0: entered allmulticast mode [ 287.441715][ T9169] syzkaller0: entered promiscuous mode [ 287.456256][ T9169] syzkaller0: entered allmulticast mode [ 287.485544][ T9167] tipc: Resetting bearer [ 287.539834][ T9167] tipc: Disabling bearer [ 288.208278][ T787] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 288.416197][ T787] usb 5-1: Using ep0 maxpacket: 16 [ 288.424715][ T787] usb 5-1: config 0 has no interfaces? [ 288.465630][ T787] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 288.478933][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.492110][ T787] usb 5-1: Product: syz [ 288.496802][ T787] usb 5-1: Manufacturer: syz [ 288.501648][ T787] usb 5-1: SerialNumber: syz [ 288.512846][ T787] usb 5-1: config 0 descriptor?? [ 290.029646][ T786] usb 5-1: USB disconnect, device number 22 [ 290.143042][ T9198] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1045'. [ 290.167290][ T9198] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 290.833549][ T9217] syzkaller0: entered promiscuous mode [ 290.847736][ T9217] syzkaller0: entered allmulticast mode [ 293.646347][ T786] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 293.846110][ T786] usb 4-1: Using ep0 maxpacket: 16 [ 293.867475][ T786] usb 4-1: config 0 has no interfaces? [ 293.904357][ T786] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 293.931475][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.946909][ T786] usb 4-1: Product: syz [ 293.951453][ T786] usb 4-1: Manufacturer: syz [ 293.966369][ T786] usb 4-1: SerialNumber: syz [ 293.984727][ T786] usb 4-1: config 0 descriptor?? [ 294.118653][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1069'. [ 294.149703][ T9262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.235451][ T9258] syzkaller0: entered promiscuous mode [ 294.241414][ T9258] syzkaller0: entered allmulticast mode [ 294.261339][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1069'. [ 294.283548][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'. [ 294.322612][ T9262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.351028][ T9262] bond1: (slave bond0): Enslaving as an active interface with a down link [ 294.579622][ T9276] loop0: detected capacity change from 0 to 1024 [ 294.630656][ T9276] hfsplus: failed to load root directory [ 296.744204][ T8] usb 4-1: USB disconnect, device number 31 [ 296.960048][ T9293] hsr0: entered promiscuous mode [ 297.569157][ T9313] syzkaller0: entered promiscuous mode [ 297.580315][ T9313] syzkaller0: entered allmulticast mode [ 299.624758][ T9323] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1087'. [ 299.642785][ T9323] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 300.487483][ T9352] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1099'. [ 300.500486][ T9352] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 300.652576][ T9354] syzkaller0: entered promiscuous mode [ 300.662005][ T9354] syzkaller0: entered allmulticast mode [ 302.982202][ T9369] loop1: detected capacity change from 0 to 1024 [ 303.043784][ T9369] hfsplus: failed to load root directory [ 303.915739][ T9394] syzkaller0: entered promiscuous mode [ 303.944485][ T9394] syzkaller0: entered allmulticast mode [ 306.322142][ T9416] tipc: Enabling of bearer rejected, failed to enable media [ 306.552874][ T9436] tipc: Enabling of bearer rejected, failed to enable media [ 306.741624][ T9447] loop1: detected capacity change from 0 to 1024 [ 306.798570][ T9447] hfsplus: failed to load root directory [ 307.212165][ T9459] syzkaller0: entered promiscuous mode [ 307.254210][ T9459] syzkaller0: entered allmulticast mode [ 309.945541][ T9496] loop3: detected capacity change from 0 to 1024 [ 310.045351][ T9502] tipc: Enabling of bearer rejected, failed to enable media [ 310.972568][ T9512] loop0: detected capacity change from 0 to 1024 [ 311.016632][ T9512] hfsplus: failed to load root directory [ 311.408224][ T9522] syzkaller0: entered promiscuous mode [ 311.419461][ T9522] syzkaller0: entered allmulticast mode [ 311.884387][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 313.788751][ T9555] tipc: Enabling of bearer rejected, failed to enable media [ 313.863869][ T9561] loop3: detected capacity change from 0 to 1024 [ 314.694730][ T9573] syzkaller0: entered promiscuous mode [ 314.718784][ T9573] syzkaller0: entered allmulticast mode [ 315.275050][ T9580] loop4: detected capacity change from 0 to 1024 [ 315.328655][ T9580] hfsplus: failed to load root directory [ 315.765849][ T9590] syzkaller0: entered promiscuous mode [ 315.787993][ T9590] syzkaller0: entered allmulticast mode [ 317.701335][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.708075][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.298550][ T9598] syzkaller0: entered promiscuous mode [ 318.304604][ T9598] syzkaller0: entered allmulticast mode [ 318.951215][ T9627] loop0: detected capacity change from 0 to 1024 [ 318.978524][ T9627] hfsplus: failed to load root directory [ 319.247861][ T9639] syzkaller0: entered promiscuous mode [ 319.262996][ T9639] syzkaller0: entered allmulticast mode [ 321.397055][ T9643] syzkaller0: entered promiscuous mode [ 321.402734][ T9643] syzkaller0: entered allmulticast mode [ 322.017697][ T9677] loop0: detected capacity change from 0 to 1024 [ 322.114953][ T9677] hfsplus: failed to load root directory [ 322.259808][ T9687] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1181'. [ 322.282128][ T9687] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 322.435286][ T9690] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1182'. [ 322.450972][ T9690] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1182'. [ 322.467160][ T9690] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1182'. [ 322.481670][ T9693] syzkaller0: entered promiscuous mode [ 322.504270][ T9693] syzkaller0: entered allmulticast mode [ 323.029928][ T9709] syzkaller0: entered promiscuous mode [ 323.035481][ T9709] syzkaller0: entered allmulticast mode [ 323.127391][ T9717] netlink: 'syz.0.1192': attribute type 29 has an invalid length. [ 325.399978][ T9717] netlink: 'syz.0.1192': attribute type 29 has an invalid length. [ 325.659961][ T9744] loop0: detected capacity change from 0 to 1024 [ 325.665202][ T9748] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1201'. [ 325.693565][ T9744] hfsplus: failed to load root directory [ 326.248277][ T9763] syzkaller0: entered promiscuous mode [ 326.255137][ T9763] syzkaller0: entered allmulticast mode [ 326.453104][ T5788] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 326.676105][ T5788] usb 5-1: Using ep0 maxpacket: 32 [ 326.693171][ T5788] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 326.713231][ T5788] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.736353][ T5788] usb 5-1: config 0 has no interface number 0 [ 326.762860][ T5788] usb 5-1: config 0 interface 188 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 326.799147][ T5788] usb 5-1: config 0 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.868514][ T5788] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 326.902020][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.920705][ T5788] usb 5-1: Product: syz [ 326.924941][ T5788] usb 5-1: Manufacturer: syz [ 326.946075][ T5788] usb 5-1: SerialNumber: syz [ 326.957584][ T5788] usb 5-1: config 0 descriptor?? [ 326.988827][ T5788] asix: probe of 5-1:0.188 failed with error -22 [ 329.219697][ T6084] usb 5-1: USB disconnect, device number 23 [ 330.339101][ T9796] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1213'. [ 330.825158][ T9808] loop4: detected capacity change from 0 to 1024 [ 330.880432][ T9808] hfsplus: failed to load root directory [ 330.905308][ T9812] loop0: detected capacity change from 0 to 512 [ 330.942610][ T9812] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.1219: inode has both inline data and extents flags [ 330.992029][ T9812] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.1219: couldn't read orphan inode 15 (err -117) [ 331.018342][ T9812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 331.763604][ T9822] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1221'. [ 331.826140][ T9822] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 332.128082][ T9825] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1222'. [ 332.385082][ T9830] netlink: 824 bytes leftover after parsing attributes in process `syz.4.1224'. [ 332.573927][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1225'. [ 332.754819][ T9839] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1227'. [ 332.773787][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 332.808969][ T9839] hsr_slave_0: left promiscuous mode [ 332.841211][ T9839] hsr_slave_1: left promiscuous mode [ 332.997718][ T9846] loop0: detected capacity change from 0 to 1024 [ 333.061219][ T9846] hfsplus: failed to load root directory [ 333.322995][ T9854] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1232'. [ 333.921035][ T9869] loop0: detected capacity change from 0 to 512 [ 333.991229][ T9869] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.1237: inode has both inline data and extents flags [ 334.040624][ T9869] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.1237: couldn't read orphan inode 15 (err -117) [ 334.094252][ T9869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 334.126502][ T9876] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1236'. [ 334.171470][ T9876] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1236'. [ 334.204075][ T9876] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1236'. [ 335.134660][ T9891] loop3: detected capacity change from 0 to 1024 [ 336.497694][ T9902] loop3: detected capacity change from 0 to 1024 [ 336.580930][ T9902] hfsplus: failed to load root directory [ 336.802823][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 336.931311][ T9906] __nla_validate_parse: 2 callbacks suppressed [ 336.931329][ T9906] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1246'. [ 336.935473][ T9908] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1247'. [ 336.938371][ T9906] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 336.983011][ T9908] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1247'. [ 336.997898][ T9909] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1247'. [ 337.390551][ T9918] tipc: Enabled bearer , priority 0 [ 337.411229][ T9918] tipc: Resetting bearer [ 337.443472][ T9913] kvm: emulating exchange as write [ 337.443929][ T9917] tipc: Disabling bearer [ 337.732010][ T9925] loop3: detected capacity change from 0 to 1024 [ 339.586212][ T5835] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 339.788924][ T5835] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.824525][ T5835] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 339.843279][ T9952] loop3: detected capacity change from 0 to 1024 [ 339.850554][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.889285][ T5835] usb 2-1: config 0 descriptor?? [ 339.899833][ T5835] pwc: Askey VC010 type 2 USB webcam detected. [ 340.364615][ T5835] pwc: recv_control_msg error -32 req 02 val 2b00 [ 340.469439][ T5835] pwc: recv_control_msg error -32 req 02 val 2700 [ 340.593636][ T5835] pwc: recv_control_msg error -32 req 02 val 2c00 [ 340.693236][ T5835] pwc: recv_control_msg error -32 req 04 val 1000 [ 340.727540][ T5835] pwc: recv_control_msg error -32 req 04 val 1300 [ 340.759095][ T5835] pwc: recv_control_msg error -32 req 04 val 1400 [ 340.802979][ T5835] pwc: recv_control_msg error -32 req 02 val 2000 [ 340.831987][ T5835] pwc: recv_control_msg error -71 req 02 val 2100 [ 340.881150][ T5835] pwc: recv_control_msg error -71 req 04 val 1500 [ 340.936946][ T5835] pwc: recv_control_msg error -71 req 02 val 2500 [ 340.979236][ T5835] pwc: recv_control_msg error -71 req 02 val 2400 [ 340.999188][ T5835] pwc: recv_control_msg error -71 req 02 val 2600 [ 341.027846][ T5835] pwc: recv_control_msg error -71 req 02 val 2900 [ 341.039845][ T5835] pwc: recv_control_msg error -71 req 02 val 2800 [ 341.060153][ T5835] pwc: recv_control_msg error -71 req 04 val 1100 [ 341.075061][ T5835] pwc: recv_control_msg error -71 req 04 val 1200 [ 341.103883][ T5835] pwc: Registered as video103. [ 341.127975][ T5835] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 341.205184][ T5835] usb 2-1: USB disconnect, device number 23 [ 341.725062][ T9972] tipc: Enabling of bearer rejected, failed to enable media [ 342.423954][ T9989] netlink: 'syz.0.1276': attribute type 21 has an invalid length. [ 342.449356][ T9989] netlink: 'syz.0.1276': attribute type 2 has an invalid length. [ 342.473345][ T9989] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.1276'. [ 342.900816][T10001] tipc: Enabling of bearer rejected, failed to enable media [ 344.016015][ T5835] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 344.223932][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 344.248839][ T5835] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 344.276996][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.296503][ T5835] usb 4-1: config 0 has no interface number 0 [ 344.302799][ T5835] usb 4-1: config 0 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.338870][ T5835] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 344.348342][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.375985][ T5835] usb 4-1: Product: syz [ 344.396185][ T5835] usb 4-1: Manufacturer: syz [ 344.400876][ T5835] usb 4-1: SerialNumber: syz [ 344.437975][ T5835] usb 4-1: config 0 descriptor?? [ 344.468598][ T5835] asix: probe of 4-1:0.188 failed with error -22 [ 344.671760][T10049] syzkaller0: entered promiscuous mode [ 344.677799][T10049] syzkaller0: entered allmulticast mode [ 346.773418][ T786] usb 4-1: USB disconnect, device number 32 [ 347.257603][T10082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1313'. [ 347.337834][T10086] syzkaller0: entered promiscuous mode [ 347.343467][T10086] syzkaller0: entered allmulticast mode [ 347.874896][T10099] syzkaller0: entered promiscuous mode [ 347.880539][T10099] syzkaller0: entered allmulticast mode [ 348.253926][T10109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1325'. [ 351.263866][T10158] syzkaller0: entered promiscuous mode [ 351.271002][T10158] syzkaller0: entered allmulticast mode [ 351.296032][ T5768] syz_tun (unregistering): left allmulticast mode [ 352.254870][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 352.282039][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 352.307426][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 352.319167][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 352.336042][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 352.351553][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.972116][T10163] syzkaller0: entered promiscuous mode [ 353.978032][T10163] syzkaller0: entered allmulticast mode [ 354.004416][ T3461] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.153744][ T3461] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.393010][ T3461] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.420631][ T5082] Bluetooth: hci0: command tx timeout [ 354.514820][ T3461] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.533828][T10189] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 354.894271][ T3461] tipc: Left network mode [ 354.900654][T10173] chnl_net:caif_netlink_parms(): no params data found [ 355.014775][T10204] syzkaller0: entered promiscuous mode [ 355.020801][T10204] syzkaller0: entered allmulticast mode [ 356.493024][ T5082] Bluetooth: hci0: command tx timeout [ 357.489958][T10207] syzkaller0: entered promiscuous mode [ 357.495477][T10207] syzkaller0: entered allmulticast mode [ 357.779620][T10240] process 'syz.4.1365' launched '/dev/fd/7' with NULL argv: empty string added [ 357.941375][T10244] loop4: detected capacity change from 0 to 512 [ 357.993421][T10173] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.007209][T10173] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.014962][T10173] bridge_slave_0: entered allmulticast mode [ 358.023158][T10173] bridge_slave_0: entered promiscuous mode [ 358.029403][T10244] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.1367: inode has both inline data and extents flags [ 358.097169][T10244] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.1367: couldn't read orphan inode 15 (err -117) [ 358.150576][T10244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 358.479210][T10173] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.490774][T10173] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.659323][ T5781] Bluetooth: hci0: command tx timeout [ 358.803269][T10173] bridge_slave_1: entered allmulticast mode [ 358.883026][T10173] bridge_slave_1: entered promiscuous mode [ 359.040148][ T6543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 359.061517][T10173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.098353][T10173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.170439][T10242] block nbd3: shutting down sockets [ 359.705472][T10173] team0: Port device team_slave_0 added [ 359.754050][T10173] team0: Port device team_slave_1 added [ 360.377008][T10173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.392816][T10293] input: syz1 as /devices/virtual/input/input14 [ 360.408870][T10173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.463295][T10173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.542076][T10286] syzkaller0: entered promiscuous mode [ 360.554126][T10286] syzkaller0: entered allmulticast mode [ 360.569428][T10173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.597834][T10173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.630009][T10173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.726322][ T5082] Bluetooth: hci0: command tx timeout [ 360.826049][ T3461] hsr_slave_0: left promiscuous mode [ 360.833094][ T3461] hsr_slave_1: left promiscuous mode [ 360.948239][ T3461] veth1_macvtap: left promiscuous mode [ 360.956338][ T3461] veth0_macvtap: left promiscuous mode [ 360.972360][ T3461] veth1_vlan: left promiscuous mode [ 360.982132][T10300] loop4: detected capacity change from 0 to 512 [ 360.983562][ T3461] veth0_vlan: left promiscuous mode [ 361.033921][T10300] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.1377: inode has both inline data and extents flags [ 361.132678][T10300] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.1377: couldn't read orphan inode 15 (err -117) [ 361.192198][T10300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 361.999878][ T6543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 362.250419][ T3461] bond1 (unregistering): (slave bond0): Releasing active interface [ 362.273546][ T3461] bond1 (unregistering): Released all slaves [ 363.750233][ T3461] bond0 (unregistering): Released all slaves [ 363.883381][T10315] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1381'. [ 363.998051][T10173] hsr_slave_0: entered promiscuous mode [ 364.026489][T10173] hsr_slave_1: entered promiscuous mode [ 364.471007][T10336] syzkaller0: entered promiscuous mode [ 364.497306][T10336] syzkaller0: entered allmulticast mode [ 364.732089][T10351] loop4: detected capacity change from 0 to 512 [ 364.777867][T10351] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.1387: inode has both inline data and extents flags [ 364.828180][T10351] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.1387: couldn't read orphan inode 15 (err -117) [ 364.866412][T10351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 364.963434][T10357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1388'. [ 365.846143][ T5082] Bluetooth: hci4: command 0x0406 tx timeout [ 366.478143][ T6543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 366.981560][ T5788] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 367.166055][ T5788] usb 5-1: Using ep0 maxpacket: 16 [ 367.175061][ T5788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 367.200431][ T5788] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 367.210342][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.222373][ T5788] usb 5-1: Product: syz [ 367.226705][ T5788] usb 5-1: Manufacturer: syz [ 367.231489][ T5788] usb 5-1: SerialNumber: syz [ 367.246562][ T5788] usb 5-1: config 0 descriptor?? [ 367.259187][ T5788] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 367.268646][ T5788] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 367.900188][ T5788] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 368.402761][ T5788] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 368.437342][ T5788] em28xx 5-1:0.0: board has no eeprom [ 368.674542][T10357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1388'. [ 368.684522][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1388'. [ 368.766290][ T5788] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 368.774211][ T5788] em28xx 5-1:0.0: dvb set to bulk mode. [ 368.842599][ T6084] em28xx 5-1:0.0: Binding DVB extension [ 368.894592][ T5788] usb 5-1: USB disconnect, device number 24 [ 368.907215][ T5788] em28xx 5-1:0.0: Disconnecting em28xx [ 369.073802][ T6084] em28xx 5-1:0.0: Registering input extension [ 369.097362][ T5788] em28xx 5-1:0.0: Closing input extension [ 369.172584][ T5788] em28xx 5-1:0.0: Freeing device [ 369.255624][T10375] syzkaller0: entered promiscuous mode [ 369.275518][T10375] syzkaller0: entered allmulticast mode [ 369.312837][T10173] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 369.790680][T10393] loop1: detected capacity change from 0 to 512 [ 369.849970][T10393] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.1396: inode has both inline data and extents flags [ 369.911780][T10393] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.1396: couldn't read orphan inode 15 (err -117) [ 369.927741][T10393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 370.763064][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 371.139583][ T5788] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 371.337871][ T5788] usb 2-1: Using ep0 maxpacket: 32 [ 371.347005][ T5788] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 371.356593][ T5788] usb 2-1: config 0 has no interface number 0 [ 371.363225][ T5788] usb 2-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 371.374066][ T5788] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 371.388240][ T5788] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 371.398145][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.406926][ T5788] usb 2-1: Product: syz [ 371.411154][ T5788] usb 2-1: Manufacturer: syz [ 371.416238][ T5788] usb 2-1: SerialNumber: syz [ 371.440585][ T5788] usb 2-1: config 0 descriptor?? [ 371.453214][ T5788] asix: probe of 2-1:0.188 failed with error -22 [ 372.625596][T10173] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 372.679304][T10173] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 372.729345][T10173] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 372.967741][T10411] syzkaller0: entered promiscuous mode [ 372.973677][T10411] syzkaller0: entered allmulticast mode [ 373.912433][ T5816] usb 2-1: USB disconnect, device number 24 [ 373.921700][T10428] Bluetooth: MGMT ver 1.22 [ 376.076391][T10173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.131085][T10173] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.189316][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.196551][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.228471][ T8188] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.235843][ T8188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.511764][T10451] syzkaller0: entered promiscuous mode [ 376.523552][T10451] syzkaller0: entered allmulticast mode [ 377.561148][T10480] fuse: Bad value for 'fd' [ 379.135910][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.142609][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.354904][T10472] batman_adv: batadv0: Adding interface: dummy0 [ 379.361896][T10472] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.392089][T10472] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 379.681777][T10173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.346135][ T6081] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 380.383985][T10173] veth0_vlan: entered promiscuous mode [ 380.405675][T10173] veth1_vlan: entered promiscuous mode [ 380.468196][T10173] veth0_macvtap: entered promiscuous mode [ 380.483014][T10173] veth1_macvtap: entered promiscuous mode [ 380.536132][ T6081] usb 4-1: Using ep0 maxpacket: 8 [ 380.548687][ T6081] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 380.562643][ T6081] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.571658][T10173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.594203][ T6081] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 380.594545][T10173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.618338][T10173] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.634106][T10173] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.634609][ T6081] usb 4-1: config 0 has no interface number 0 [ 380.651055][T10173] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.652325][ T6081] usb 4-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 380.670964][ T6081] usb 4-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping [ 380.689679][T10173] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.700025][ T6081] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.772352][ T6081] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 380.783691][ T6081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.826924][ T6081] usb 4-1: Product: syz [ 380.831269][ T6081] usb 4-1: Manufacturer: syz [ 380.843562][ T6081] usb 4-1: SerialNumber: syz [ 380.880874][ T6081] usb 4-1: config 0 descriptor?? [ 380.906535][T10516] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 380.953890][ T6081] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 380.971602][ T4789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.003423][ T4789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.059419][ T6081] snd-usb-audio: probe of 4-1:0.151 failed with error -2 [ 381.097833][T10533] syzkaller0: entered promiscuous mode [ 381.100325][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.108899][T10533] syzkaller0: entered allmulticast mode [ 381.177019][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.178515][ T8] usb 4-1: USB disconnect, device number 33 [ 381.203901][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.933405][T10561] 9pnet_virtio: no channels available for device syz [ 384.995155][T10575] binder: 10573:10575 ioctl 8008f511 2000000003c0 returned -22 [ 385.169495][T10579] syzkaller0: entered promiscuous mode [ 385.175815][T10579] syzkaller0: entered allmulticast mode [ 388.842488][T10598] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 388.861360][T10598] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 389.491886][ T5781] Bluetooth: hci0: unexpected event 0x14 length: 20 > 6 [ 390.793057][T10656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1449'. [ 391.180882][T10662] syzkaller0: entered promiscuous mode [ 391.189394][T10662] syzkaller0: entered allmulticast mode [ 392.165391][T10618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.918810][T10683] tipc: Enabling of bearer rejected, failed to enable media [ 394.245030][T10709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1458'. [ 394.976786][T10728] syzkaller0: entered promiscuous mode [ 394.982529][T10728] syzkaller0: entered allmulticast mode [ 395.065479][T10730] tipc: Enabling of bearer rejected, failed to enable media [ 395.195325][T10737] syzkaller0: entered promiscuous mode [ 395.205573][T10737] syzkaller0: entered allmulticast mode [ 398.425637][T10763] loop1: detected capacity change from 0 to 512 [ 398.468328][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1472'. [ 398.502491][T10763] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.1474: inode has both inline data and extents flags [ 398.577918][T10763] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.1474: couldn't read orphan inode 15 (err -117) [ 398.595234][T10763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 399.479518][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 399.570309][T10781] syzkaller0: entered promiscuous mode [ 399.593190][T10781] syzkaller0: entered allmulticast mode [ 401.381538][T10767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.016394][T10834] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1485'. [ 402.416570][T10838] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.393998][T10838] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.880080][T10838] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.133115][T10838] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.500189][T10838] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.575612][T10838] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.773055][T10838] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.816085][T10838] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.928636][T10892] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1495'. [ 407.459551][T10899] syzkaller0: entered promiscuous mode [ 407.473568][T10899] syzkaller0: entered allmulticast mode [ 408.423554][T10881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.959651][T10916] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1504'. [ 411.178950][T10926] netlink: 'syz.5.1508': attribute type 1 has an invalid length. [ 411.940428][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1514'. [ 412.195509][T10954] 9pnet_virtio: no channels available for device syz [ 412.828784][T10967] syzkaller0: entered promiscuous mode [ 412.858276][T10967] syzkaller0: entered allmulticast mode [ 413.447861][ T5844] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 413.656667][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 413.666464][ T5844] usb 5-1: config 0 has no interfaces? [ 413.691495][ T5844] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 413.726150][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.744644][ T5844] usb 5-1: Product: syz [ 413.760959][ T5844] usb 5-1: Manufacturer: syz [ 413.774515][ T5844] usb 5-1: SerialNumber: syz [ 413.789225][ T5844] usb 5-1: config 0 descriptor?? [ 413.830009][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1523'. [ 416.582860][ T8] usb 5-1: USB disconnect, device number 25 [ 416.734226][T11015] tipc: Enabled bearer , priority 0 [ 416.767139][T11015] tipc: Resetting bearer [ 416.817178][T11011] tipc: Disabling bearer [ 416.913162][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1532'. [ 416.996095][ T5816] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 417.202198][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 417.212857][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 417.229533][ T5816] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 417.245612][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.264465][ T5816] usb 4-1: Product: syz [ 417.270419][ T5816] usb 4-1: Manufacturer: syz [ 417.279619][ T5816] usb 4-1: SerialNumber: syz [ 417.307811][ T5816] usb 4-1: config 0 descriptor?? [ 417.333465][ T5816] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 417.348787][ T5816] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 417.813927][T11046] syzkaller0: entered promiscuous mode [ 417.831395][T11046] syzkaller0: entered allmulticast mode [ 417.958881][ T5816] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 418.406064][ T5816] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 418.444152][ T5816] em28xx 4-1:0.0: board has no eeprom [ 418.746381][ T5816] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 418.773887][ T5816] em28xx 4-1:0.0: dvb set to bulk mode. [ 418.787093][ T8] em28xx 4-1:0.0: Binding DVB extension [ 418.816047][ T5816] usb 4-1: USB disconnect, device number 34 [ 418.867970][ T5816] em28xx 4-1:0.0: Disconnecting em28xx [ 418.993109][ T8] em28xx 4-1:0.0: Registering input extension [ 419.010022][ T5816] em28xx 4-1:0.0: Closing input extension [ 419.088564][ T5816] em28xx 4-1:0.0: Freeing device [ 420.166841][T11073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1540'. [ 422.254231][T11053] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1538'. [ 422.398006][T11085] syzkaller0: entered promiscuous mode [ 422.403568][T11085] syzkaller0: entered allmulticast mode [ 423.658927][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1550'. [ 426.486278][ T8] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 426.692285][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 426.712080][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 426.725578][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 426.735052][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.743204][ T8] usb 4-1: Product: syz [ 426.749982][ T8] usb 4-1: Manufacturer: syz [ 426.754633][ T8] usb 4-1: SerialNumber: syz [ 426.775207][ T8] usb 4-1: config 0 descriptor?? [ 426.791145][ T8] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 426.801880][ T8] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 427.415203][ T8] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 427.495240][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1559'. [ 428.058236][ T8] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 428.172794][ T8] em28xx 4-1:0.0: board has no eeprom [ 428.404104][T11178] syzkaller0: entered promiscuous mode [ 428.414959][T11178] syzkaller0: entered allmulticast mode [ 428.556842][ T8] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 428.565061][ T8] em28xx 4-1:0.0: dvb set to bulk mode. [ 428.593185][ T787] em28xx 4-1:0.0: Binding DVB extension [ 428.616619][ T8] usb 4-1: USB disconnect, device number 35 [ 428.642966][ T8] em28xx 4-1:0.0: Disconnecting em28xx [ 428.748693][ T787] em28xx 4-1:0.0: Registering input extension [ 428.762810][ T8] em28xx 4-1:0.0: Closing input extension [ 428.776343][T11183] syzkaller0: entered promiscuous mode [ 428.782941][T11183] syzkaller0: entered allmulticast mode [ 428.800447][ T8] em28xx 4-1:0.0: Freeing device [ 429.888539][T11197] syzkaller0: entered promiscuous mode [ 429.894725][T11197] syzkaller0: entered allmulticast mode [ 429.998079][T11195] syzkaller0: entered promiscuous mode [ 430.027907][T11195] syzkaller0: entered allmulticast mode [ 430.185586][T11209] loop1: detected capacity change from 0 to 512 [ 430.237903][T11209] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.1574: inode has both inline data and extents flags [ 430.371465][T11209] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.1574: couldn't read orphan inode 15 (err -117) [ 430.419275][T11209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 431.873731][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 433.486163][ T5788] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 433.686092][ T5788] usb 4-1: Using ep0 maxpacket: 16 [ 433.694539][ T5788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 433.714304][ T5788] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 433.733008][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.741495][ T5788] usb 4-1: Product: syz [ 433.745707][ T5788] usb 4-1: Manufacturer: syz [ 433.750870][ T5788] usb 4-1: SerialNumber: syz [ 433.758675][ T5788] usb 4-1: config 0 descriptor?? [ 433.769283][ T5788] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 433.778671][ T5788] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 434.411690][ T5788] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 434.850444][ T5788] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 434.859000][ T5788] em28xx 4-1:0.0: board has no eeprom [ 435.146315][ T5788] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 435.154237][ T5788] em28xx 4-1:0.0: dvb set to bulk mode. [ 435.164066][ T5835] em28xx 4-1:0.0: Binding DVB extension [ 435.196894][ T5788] usb 4-1: USB disconnect, device number 36 [ 435.225054][ T5788] em28xx 4-1:0.0: Disconnecting em28xx [ 435.249501][ T5835] em28xx 4-1:0.0: Registering input extension [ 435.260479][ T5788] em28xx 4-1:0.0: Closing input extension [ 435.304492][ T5788] em28xx 4-1:0.0: Freeing device [ 435.504016][T11264] overlayfs: upper fs does not support file handles, falling back to index=off. [ 435.787881][T11270] syzkaller0: entered promiscuous mode [ 435.797391][T11270] syzkaller0: entered allmulticast mode [ 437.305108][T11299] syzkaller0: entered promiscuous mode [ 437.311271][T11299] syzkaller0: entered allmulticast mode [ 437.571492][ T5788] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 437.849005][ T5788] usb 5-1: Using ep0 maxpacket: 16 [ 437.930404][ T5788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 438.067923][ T5788] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 438.176395][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.202779][ T5788] usb 5-1: Product: syz [ 438.221470][ T5788] usb 5-1: Manufacturer: syz [ 438.238804][ T5788] usb 5-1: SerialNumber: syz [ 438.283641][ T5788] usb 5-1: config 0 descriptor?? [ 438.300489][ T5788] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 438.328339][ T5788] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 438.352208][T11309] syzkaller0: entered promiscuous mode [ 438.357919][T11309] syzkaller0: entered allmulticast mode [ 439.726470][ T5788] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 439.766616][ T5781] block nbd5: Receive control failed (result -32) [ 439.808623][T11315] block nbd5: shutting down sockets [ 440.175415][ T5788] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 440.225983][ T5788] em28xx 5-1:0.0: board has no eeprom [ 440.536018][ T5788] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 440.576567][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.586041][ T5788] em28xx 5-1:0.0: dvb set to bulk mode. [ 440.586718][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.601931][ T5835] em28xx 5-1:0.0: Binding DVB extension [ 440.641825][ T5788] usb 5-1: USB disconnect, device number 26 [ 440.700293][ T5788] em28xx 5-1:0.0: Disconnecting em28xx [ 440.756909][ T5835] em28xx 5-1:0.0: Registering input extension [ 440.834600][ T5788] em28xx 5-1:0.0: Closing input extension [ 440.862537][ T5788] em28xx 5-1:0.0: Freeing device [ 441.145542][T11353] syzkaller0: entered promiscuous mode [ 441.167767][T11353] syzkaller0: entered allmulticast mode [ 442.278968][T11357] syzkaller0: entered promiscuous mode [ 442.316075][T11357] syzkaller0: entered allmulticast mode [ 447.732525][T11384] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1612'. [ 448.910118][T11399] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 449.271496][T11407] syzkaller0: entered promiscuous mode [ 449.320051][T11407] syzkaller0: entered allmulticast mode [ 449.416224][ T5788] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 449.606003][ T5788] usb 6-1: Using ep0 maxpacket: 16 [ 449.623904][ T5788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 449.667592][ T5788] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 449.700323][ T5788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.736006][ T5788] usb 6-1: Product: syz [ 449.740242][ T5788] usb 6-1: Manufacturer: syz [ 449.766162][ T5788] usb 6-1: SerialNumber: syz [ 449.797926][ T5788] usb 6-1: config 0 descriptor?? [ 449.818334][ T5788] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 449.846063][ T5788] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 450.325598][T11423] syzkaller0: entered promiscuous mode [ 450.331811][T11423] syzkaller0: entered allmulticast mode [ 450.448603][ T5788] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 451.709169][T11437] syzkaller0: entered promiscuous mode [ 451.727632][T11437] syzkaller0: entered allmulticast mode [ 451.733636][T11438] loop4: detected capacity change from 0 to 512 [ 451.782851][T11438] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.1627: inode has both inline data and extents flags [ 451.855282][T11438] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.1627: couldn't read orphan inode 15 (err -117) [ 451.900757][T11438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 451.926168][ T5788] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 451.935722][ T5788] em28xx 6-1:0.0: board has no eeprom [ 452.116332][ T5788] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 452.140825][ T5788] em28xx 6-1:0.0: dvb set to bulk mode. [ 452.186202][ T5835] em28xx 6-1:0.0: Binding DVB extension [ 452.245355][ T5788] usb 6-1: USB disconnect, device number 2 [ 452.265498][ T5788] em28xx 6-1:0.0: Disconnecting em28xx [ 452.667903][ T5835] em28xx 6-1:0.0: Registering input extension [ 452.676483][ T5788] em28xx 6-1:0.0: Closing input extension [ 452.721036][ T5788] em28xx 6-1:0.0: Freeing device [ 452.818065][ T6543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 452.852247][T11452] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1628'. [ 453.483426][T11459] syzkaller0: entered promiscuous mode [ 453.565415][T11459] syzkaller0: entered allmulticast mode [ 454.346174][ T5781] block nbd4: Receive control failed (result -32) [ 454.356618][T11468] block nbd4: shutting down sockets [ 456.810931][T11494] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1638'. [ 456.820742][T11494] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 456.857941][T11492] syzkaller0: entered promiscuous mode [ 456.884716][T11492] syzkaller0: entered allmulticast mode [ 457.624583][T11512] syzkaller0: entered promiscuous mode [ 457.632651][T11512] syzkaller0: entered allmulticast mode [ 457.786012][ T5788] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 457.841567][T11514] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1643'. [ 457.986488][ T5788] usb 4-1: Using ep0 maxpacket: 32 [ 457.999273][ T5788] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 458.022624][ T5788] usb 4-1: config 0 has no interface number 0 [ 458.048194][ T5788] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 458.080293][ T5788] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 458.101327][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.134883][ T5788] usb 4-1: Product: syz [ 458.139577][ T5788] usb 4-1: Manufacturer: syz [ 458.145815][ T5788] usb 4-1: SerialNumber: syz [ 458.202902][ T5788] usb 4-1: config 0 descriptor?? [ 458.236431][T11511] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 458.378237][T11521] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1644'. [ 458.491394][T11511] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 458.719080][ T5788] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 458.748344][ T5788] asix: probe of 4-1:0.188 failed with error -61 [ 460.520819][ T6081] usb 4-1: USB disconnect, device number 37 [ 460.620707][T11536] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1647'. [ 460.663951][T11539] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1648'. [ 460.673477][T11539] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 460.844843][T11541] syzkaller0: entered promiscuous mode [ 460.866251][T11541] syzkaller0: entered allmulticast mode [ 460.880003][ T5781] block nbd4: Receive control failed (result -32) [ 460.887503][T11531] block nbd4: shutting down sockets [ 461.691011][T11555] syzkaller0: entered promiscuous mode [ 461.696939][T11555] syzkaller0: entered allmulticast mode [ 461.804856][ T5781] Bluetooth: Wrong link type (-71) [ 463.890767][T11568] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1657'. [ 463.916279][T11568] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 464.034912][T11571] syzkaller0: entered promiscuous mode [ 464.041118][T11571] syzkaller0: entered allmulticast mode [ 464.053033][T11572] syzkaller0: entered promiscuous mode [ 464.061037][T11572] syzkaller0: entered allmulticast mode [ 464.417179][T11577] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1661'. [ 464.462970][T11579] syzkaller0: entered promiscuous mode [ 464.486084][T11579] syzkaller0: entered allmulticast mode [ 466.673356][T11596] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1667'. [ 466.684576][T11596] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 467.517562][T11601] syzkaller0: entered promiscuous mode [ 467.542321][T11601] syzkaller0: entered allmulticast mode [ 467.823976][T11605] syzkaller0: entered promiscuous mode [ 467.831400][T11605] syzkaller0: entered allmulticast mode [ 467.975650][T11608] syzkaller0: entered promiscuous mode [ 468.024068][T11608] syzkaller0: entered allmulticast mode [ 468.291301][T11615] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1674'. [ 469.387518][T11623] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1676'. [ 469.426399][T11623] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 470.509678][T11630] 9pnet_virtio: no channels available for device syz [ 471.595767][T11642] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1681'. [ 472.086201][ T786] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 472.936014][ T786] usb 5-1: Using ep0 maxpacket: 32 [ 473.009035][ T786] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 473.067385][ T786] usb 5-1: config 0 has no interface number 0 [ 473.073583][ T786] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 473.140436][ T786] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 473.181009][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.202179][ T786] usb 5-1: Product: syz [ 473.224785][ T786] usb 5-1: Manufacturer: syz [ 473.230479][ T786] usb 5-1: SerialNumber: syz [ 473.246287][ T786] usb 5-1: config 0 descriptor?? [ 473.247952][T11650] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 473.470103][T11650] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 474.228024][ T786] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 474.289909][ T786] asix: probe of 5-1:0.188 failed with error -61 [ 476.161298][ T5816] usb 5-1: USB disconnect, device number 27 [ 476.888769][T11695] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1692'. [ 477.521985][T11703] syzkaller0: entered promiscuous mode [ 477.536382][T11703] syzkaller0: entered allmulticast mode [ 478.495233][T11321] Bluetooth: hci0: command 0x0406 tx timeout [ 481.249916][T11726] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1697'. [ 481.888686][ T786] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 482.311311][ T786] usb 6-1: Using ep0 maxpacket: 32 [ 482.499475][ T786] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 482.725503][ T786] usb 6-1: config 0 has no interface number 0 [ 482.917444][ T786] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 483.291077][ T786] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 483.452142][ T786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.460946][ T786] usb 6-1: Product: syz [ 483.465161][ T786] usb 6-1: Manufacturer: syz [ 483.470870][ T786] usb 6-1: SerialNumber: syz [ 483.481714][ T786] usb 6-1: config 0 descriptor?? [ 483.496648][T11744] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 483.775149][T11744] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 483.926810][T11761] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1705'. [ 484.232790][ T786] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 484.267508][ T786] asix: probe of 6-1:0.188 failed with error -32 [ 484.513015][T11766] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1707'. [ 485.356957][ T5844] usb 6-1: USB disconnect, device number 3 [ 485.478320][T11772] syzkaller0: entered promiscuous mode [ 485.501286][T11772] syzkaller0: entered allmulticast mode [ 485.681968][T11778] Bluetooth: MGMT ver 1.22 [ 487.696130][ T786] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 487.876074][ T786] usb 2-1: Using ep0 maxpacket: 32 [ 487.889984][ T786] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 487.902795][ T786] usb 2-1: config 0 has no interface number 0 [ 487.909609][ T786] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 487.926736][ T786] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 487.936971][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.945020][ T786] usb 2-1: Product: syz [ 487.950756][ T786] usb 2-1: Manufacturer: syz [ 487.955411][ T786] usb 2-1: SerialNumber: syz [ 487.963276][ T786] usb 2-1: config 0 descriptor?? [ 487.974611][T11809] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 488.189630][T11809] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 488.623396][ T786] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 488.635035][ T786] asix: probe of 2-1:0.188 failed with error -32 [ 488.789971][T11802] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1716'. [ 490.523498][ T5844] usb 2-1: USB disconnect, device number 25 [ 490.599766][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 491.017937][T11846] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1726'. [ 491.039895][T11846] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1726'. [ 491.079259][T11846] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.260816][T11858] syzkaller0: entered promiscuous mode [ 492.310721][T11858] syzkaller0: entered allmulticast mode [ 494.316089][ T5844] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 494.337662][T11876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1733'. [ 494.505917][ T5844] usb 2-1: Using ep0 maxpacket: 32 [ 494.532308][ T5844] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 494.556492][ T5844] usb 2-1: config 0 has no interface number 0 [ 494.583053][ T5844] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 494.620129][ T5844] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 494.640791][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.709773][ T5844] usb 2-1: Product: syz [ 494.766295][ T5844] usb 2-1: Manufacturer: syz [ 496.676581][ T5844] usb 2-1: SerialNumber: syz [ 496.717341][ T5844] usb 2-1: config 0 descriptor?? [ 496.750135][T11873] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 496.901939][ T5844] asix: probe of 2-1:0.188 failed with error -71 [ 496.952934][ T5844] usb 2-1: USB disconnect, device number 26 [ 501.393419][T11913] overlayfs: failed to decode file handle (len=6, type=196856, flags=0, err=-22) [ 501.504260][T11916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1742'. [ 501.931652][T11923] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1745'. [ 502.314596][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.330898][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.402675][T11923] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 505.551290][T11958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1753'. [ 505.766308][ T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 505.809058][T11960] netlink: 'syz.5.1754': attribute type 2 has an invalid length. [ 505.966049][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 505.984581][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 506.047550][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 506.092141][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.115894][ T8] usb 2-1: Product: syz [ 506.121106][ T8] usb 2-1: Manufacturer: syz [ 506.142055][ T8] usb 2-1: SerialNumber: syz [ 506.150172][T11963] 9pnet_virtio: no channels available for device syz [ 506.197065][ T8] usb 2-1: config 0 descriptor?? [ 506.208779][T11960] netlink: 496 bytes leftover after parsing attributes in process `syz.5.1754'. [ 506.229799][ T8] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 506.268548][ T8] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 507.155509][ T8] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 507.804293][ T8] em28xx 2-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 507.848835][ T8] em28xx 2-1:0.0: board has no eeprom [ 508.096060][ T8] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 508.137233][ T8] em28xx 2-1:0.0: dvb set to bulk mode. [ 508.159361][T11933] em28xx 2-1:0.0: Binding DVB extension [ 508.188600][ T8] usb 2-1: USB disconnect, device number 27 [ 508.235757][ T8] em28xx 2-1:0.0: Disconnecting em28xx [ 508.697283][T11933] em28xx 2-1:0.0: Registering input extension [ 508.705257][ T8] em28xx 2-1:0.0: Closing input extension [ 508.735432][ T8] em28xx 2-1:0.0: Freeing device [ 508.991027][T11979] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 509.015221][T11979] block nbd5: NBD_DISCONNECT [ 510.855295][T12008] 9pnet_fd: Insufficient options for proto=fd [ 513.927846][T12050] 9pnet_fd: Insufficient options for proto=fd [ 517.575934][ T6084] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 517.764409][T12093] 9pnet_fd: Insufficient options for proto=fd [ 517.775770][ T6084] usb 6-1: Using ep0 maxpacket: 16 [ 517.827679][ T6084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 517.876088][ T6084] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 517.921408][ T6084] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.945020][ T6084] usb 6-1: Product: syz [ 517.963688][ T6084] usb 6-1: Manufacturer: syz [ 517.992865][ T6084] usb 6-1: SerialNumber: syz [ 518.004915][ T6084] usb 6-1: config 0 descriptor?? [ 518.050201][ T6084] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 518.070675][ T6084] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 519.028646][ T6084] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 519.416273][T12106] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1788'. [ 520.346293][ T6084] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 520.388518][ T6084] em28xx 6-1:0.0: board has no eeprom [ 521.300042][ T6084] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 521.308046][ T6084] em28xx 6-1:0.0: dvb set to bulk mode. [ 521.313776][ T786] em28xx 6-1:0.0: Binding DVB extension [ 521.325048][ T6084] usb 6-1: USB disconnect, device number 4 [ 521.345375][ T6084] em28xx 6-1:0.0: Disconnecting em28xx [ 521.407224][ T786] em28xx 6-1:0.0: Registering input extension [ 521.417513][ T6084] em28xx 6-1:0.0: Closing input extension [ 521.483022][ T6084] em28xx 6-1:0.0: Freeing device [ 522.606451][T12142] 9pnet_fd: Insufficient options for proto=fd [ 523.892336][ T8] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 524.416462][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 524.463787][ T8] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 524.486698][T12157] syzkaller0: entered promiscuous mode [ 524.502545][ T8] usb 2-1: config 0 has no interface number 0 [ 524.513547][T12157] syzkaller0: entered allmulticast mode [ 524.519519][ T8] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 524.573298][ T8] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 524.611729][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.722927][ T8] usb 2-1: Product: syz [ 524.741906][ T8] usb 2-1: Manufacturer: syz [ 524.832475][ T8] usb 2-1: SerialNumber: syz [ 524.896721][ T8] usb 2-1: config 0 descriptor?? [ 524.976329][T12149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 525.261701][T12149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 525.744733][ T8] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 525.785372][ T8] asix: probe of 2-1:0.188 failed with error -61 [ 527.019070][ T8] usb 2-1: USB disconnect, device number 28 [ 527.998947][ T8] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 528.225484][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.236498][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.247079][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 528.260581][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 528.269958][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.282838][ T8] usb 2-1: config 0 descriptor?? [ 528.743326][ T8] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 528.753523][ T8] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 528.764966][ T8] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 528.772897][ T8] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 528.783296][ T8] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 528.796520][ T8] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 528.809562][ T8] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 528.817616][ T8] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 528.825446][ T8] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 528.843980][ T8] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 528.851464][ T8] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 528.859505][ T8] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 528.867367][ T8] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 528.875157][ T8] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 528.882616][ T8] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 528.899178][ T8] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 528.962955][ T8] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 529.057836][ T786] usb 2-1: USB disconnect, device number 29 [ 529.079897][T12190] fido_id[12190]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:047F:FFFF.0005/report_descriptor': No such device [ 529.402075][T12167] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1804'. [ 530.870130][T12209] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 531.849446][T12217] syzkaller0: entered promiscuous mode [ 531.855126][T12217] syzkaller0: entered allmulticast mode [ 538.599719][ T5844] IPVS: starting estimator thread 0... [ 538.779933][T12294] IPVS: using max 17 ests per chain, 40800 per kthread [ 540.627452][T12309] syzkaller0: entered promiscuous mode [ 540.652413][T12309] syzkaller0: entered allmulticast mode [ 541.083117][T12315] syzkaller0: entered promiscuous mode [ 541.151924][T12315] syzkaller0: entered allmulticast mode [ 544.852794][ T5781] block nbd3: Receive control failed (result -32) [ 544.868852][T12360] block nbd3: shutting down sockets [ 546.631598][T12370] syzkaller0: entered promiscuous mode [ 546.885959][T12370] syzkaller0: entered allmulticast mode [ 546.918215][T12375] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1855'. [ 546.948866][T12375] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 548.817279][T12410] syzkaller0: entered promiscuous mode [ 548.855536][T12410] syzkaller0: entered allmulticast mode [ 549.002708][ T5781] block nbd4: Receive control failed (result -32) [ 549.010800][T12405] block nbd4: shutting down sockets [ 554.031611][ T8] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 554.227773][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 554.243284][ T8] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 554.261184][ T8] usb 5-1: config 0 has no interface number 0 [ 554.273832][ T8] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 554.330719][ T8] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 554.350086][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.376796][ T8] usb 5-1: Product: syz [ 554.389013][ T8] usb 5-1: Manufacturer: syz [ 554.407539][ T8] usb 5-1: SerialNumber: syz [ 554.434197][ T8] usb 5-1: config 0 descriptor?? [ 554.448723][T12463] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 555.105765][T12463] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 555.141914][ T5781] block nbd5: Receive control failed (result -32) [ 555.149802][T12483] block nbd5: shutting down sockets [ 555.955801][ T8] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 555.996440][ T8] asix: probe of 5-1:0.188 failed with error -61 [ 556.252880][T12498] syzkaller0: entered promiscuous mode [ 556.258789][T12498] syzkaller0: entered allmulticast mode [ 557.195883][ T8] usb 5-1: USB disconnect, device number 28 [ 559.246381][T12527] syzkaller0: entered promiscuous mode [ 559.258630][T12527] syzkaller0: entered allmulticast mode [ 561.263859][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1893'. [ 563.434925][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.444069][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.846472][T12589] tipc: Enabling of bearer rejected, failed to enable media [ 568.463198][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1902'. [ 568.544940][T12619] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1903'. [ 568.555239][T12619] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 568.862467][T12626] syzkaller0: entered promiscuous mode [ 568.869182][T12626] syzkaller0: entered allmulticast mode [ 568.987420][T12629] tipc: Enabling of bearer rejected, failed to enable media [ 569.245946][T12629] syzkaller0: entered promiscuous mode [ 569.253043][T12629] syzkaller0: entered allmulticast mode [ 575.784527][T12664] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1914'. [ 575.795845][T12664] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 578.519604][T12715] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 578.526747][T12715] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 578.540239][T12715] vhci_hcd vhci_hcd.0: Device attached [ 578.563689][T12717] vhci_hcd: connection closed [ 578.664317][ T12] vhci_hcd: stop threads [ 578.674892][T12714] tipc: Enabling of bearer rejected, failed to enable media [ 578.719843][ T12] vhci_hcd: release socket [ 578.773871][ T12] vhci_hcd: disconnect device [ 578.808755][ T5788] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 578.916315][T12714] syzkaller0: entered promiscuous mode [ 578.970205][T12714] syzkaller0: entered allmulticast mode [ 582.920392][T12726] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1927'. [ 582.929787][T12726] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 583.054167][T12732] syzkaller0: entered promiscuous mode [ 583.077721][T12732] syzkaller0: entered allmulticast mode [ 583.897551][ T5788] vhci_hcd: vhci_device speed not set [ 586.982036][T12794] tipc: Enabling of bearer rejected, failed to enable media [ 587.186145][T12794] syzkaller0: entered promiscuous mode [ 587.195421][T12794] syzkaller0: entered allmulticast mode [ 587.231992][T12799] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1942'. [ 587.263247][T12799] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 592.482578][T12842] Bluetooth: hci0: invalid len left 7, exp >= 86 [ 592.966867][T12851] tipc: Enabling of bearer rejected, failed to enable media [ 593.009459][T12851] syzkaller0: entered promiscuous mode [ 593.015029][T12851] syzkaller0: entered allmulticast mode [ 593.101682][ T5835] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 593.151646][ T6084] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 593.303679][ T5835] usb 2-1: Using ep0 maxpacket: 16 [ 593.330030][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.341638][ T6084] usb 5-1: Using ep0 maxpacket: 32 [ 593.348836][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.381936][ T6084] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 593.392702][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 593.406219][ T5835] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 593.419693][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.432461][ T6084] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 593.453696][ T6084] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 593.465448][ T5835] usb 2-1: config 0 descriptor?? [ 593.476156][ T6084] usb 5-1: Product: syz [ 593.480400][ T6084] usb 5-1: Manufacturer: syz [ 593.501170][ T6084] usb 5-1: SerialNumber: syz [ 593.512040][ T6084] usb 5-1: config 0 descriptor?? [ 593.518354][T12849] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 593.907743][ T5835] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 593.915050][ T5835] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 593.922749][ T5835] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 593.930112][ T5835] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 593.949118][ T5835] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 593.995990][ T5835] input: HID 0955:7214 Haptics as /devices/virtual/input/input23 [ 594.118642][T12846] random: crng reseeded on system resumption [ 594.129106][ T5835] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 594.155382][ T5835] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 595.005106][ T5835] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 595.019371][T11449] usb 2-1: USB disconnect, device number 30 [ 595.047994][ T5835] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 595.074243][ T5835] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 595.109310][ T5835] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 595.936377][T11449] usb 5-1: USB disconnect, device number 29 [ 597.477103][T12878] Bluetooth: hci0: invalid len left 7, exp >= 86 [ 599.189680][T12893] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1969'. [ 599.234107][T12893] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1969'. [ 599.327987][T12897] overlayfs: failed to resolve './file0': -2 [ 599.808613][T12906] 9pnet_virtio: no channels available for device syz [ 600.409195][T12912] Bluetooth: hci0: invalid len left 7, exp >= 86 [ 600.657812][ T787] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 600.977737][ T787] usb 5-1: Using ep0 maxpacket: 32 [ 601.006694][ T787] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 601.038824][T12921] tipc: Enabling of bearer rejected, failed to enable media [ 601.045659][ T787] usb 5-1: config 0 has no interface number 0 [ 601.089088][ T787] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 601.142769][ T787] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 601.181994][T12921] syzkaller0: entered promiscuous mode [ 601.188304][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.207523][ T787] usb 5-1: Product: syz [ 601.210904][T12921] syzkaller0: entered allmulticast mode [ 601.225056][ T787] usb 5-1: Manufacturer: syz [ 601.254669][ T787] usb 5-1: SerialNumber: syz [ 601.292436][ T787] usb 5-1: config 0 descriptor?? [ 601.338036][T12915] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 601.583544][T12915] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 602.038658][T12935] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 602.045265][T12935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 602.147010][T12935] vhci_hcd vhci_hcd.0: Device attached [ 602.448076][ T5835] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 602.459908][ T787] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 602.500560][ T787] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 602.556257][T12936] vhci_hcd: connection reset by peer [ 602.572074][ T2949] vhci_hcd: stop threads [ 602.576370][ T2949] vhci_hcd: release socket [ 602.597172][ T787] asix: probe of 5-1:0.188 failed with error -32 [ 602.638435][ T2949] vhci_hcd: disconnect device [ 603.531841][ T5844] usb 5-1: USB disconnect, device number 30 [ 603.669266][T12944] overlayfs: failed to resolve './file0': -2 [ 604.164505][T12954] Bluetooth: hci0: unsupported parameter 255 [ 604.175707][T12954] Bluetooth: hci0: unsupported parameter 255 [ 605.435526][ T6084] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 605.635337][ T6084] usb 2-1: Using ep0 maxpacket: 32 [ 605.642918][ T6084] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 605.651995][ T6084] usb 2-1: config 0 has no interface number 0 [ 605.665352][ T6084] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 605.691004][ T6084] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 605.716866][ T6084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.731229][ T6084] usb 2-1: Product: syz [ 605.735871][ T6084] usb 2-1: Manufacturer: syz [ 605.755359][ T6084] usb 2-1: SerialNumber: syz [ 605.766654][ T6084] usb 2-1: config 0 descriptor?? [ 605.794238][T12963] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 606.044017][T12963] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 606.909772][ T6084] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 606.930622][ T6084] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 606.942129][ T6084] asix: probe of 2-1:0.188 failed with error -32 [ 607.816422][ T5835] vhci_hcd: vhci_device speed not set [ 608.873451][ T6084] usb 2-1: USB disconnect, device number 31 [ 610.703472][T13017] tipc: Enabling of bearer rejected, failed to enable media [ 610.942082][T13017] syzkaller0: entered promiscuous mode [ 610.963668][T13017] syzkaller0: entered allmulticast mode [ 611.932241][ T5835] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 612.135492][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 612.154652][ T5835] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 612.167884][ T5835] usb 2-1: config 0 has no interface number 0 [ 612.174786][ T5835] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 612.193846][ T5835] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 612.205362][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.217720][ T5835] usb 2-1: Product: syz [ 612.223080][ T5835] usb 2-1: Manufacturer: syz [ 612.228622][ T5835] usb 2-1: SerialNumber: syz [ 612.277007][ T5835] usb 2-1: config 0 descriptor?? [ 612.286194][T13045] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 612.513080][T13045] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 613.369474][ T5835] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 613.380115][ T5835] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 613.390947][ T5835] asix: probe of 2-1:0.188 failed with error -32 [ 614.721538][ T5835] usb 2-1: USB disconnect, device number 32 [ 615.333889][ T5844] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 615.425722][T13076] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 615.465566][T13076] block nbd3: NBD_DISCONNECT [ 615.599891][ T5844] usb 6-1: Using ep0 maxpacket: 16 [ 615.643974][ T5844] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.650083][ T5844] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 615.650104][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.650117][ T5844] usb 6-1: Product: syz [ 615.650127][ T5844] usb 6-1: Manufacturer: syz [ 615.650136][ T5844] usb 6-1: SerialNumber: syz [ 615.712158][ T5844] usb 6-1: config 0 descriptor?? [ 616.819768][ T5844] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 616.893401][T13092] tipc: Enabling of bearer rejected, failed to enable media [ 616.957503][T13092] syzkaller0: entered promiscuous mode [ 616.963338][T13092] syzkaller0: entered allmulticast mode [ 617.039575][ T5844] usb 2-1: Using ep0 maxpacket: 32 [ 617.059423][ T5844] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 617.073702][ T5844] usb 2-1: config 0 has no interface number 0 [ 617.095727][ T5844] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 617.140368][ T5844] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 617.154922][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.163634][ T5844] usb 2-1: Product: syz [ 617.177392][ T5844] usb 2-1: Manufacturer: syz [ 617.182114][ T5844] usb 2-1: SerialNumber: syz [ 617.210627][ T5844] usb 2-1: config 0 descriptor?? [ 617.216233][T13089] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 617.433255][T13089] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 618.280706][ T5844] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 618.292456][ T5844] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 618.303223][ T5844] asix: probe of 2-1:0.188 failed with error -32 [ 618.923495][ T5844] usb 6-1: USB disconnect, device number 5 [ 619.544604][ T5835] usb 2-1: USB disconnect, device number 33 [ 622.817128][ T8] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 623.106547][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 623.115750][ T8] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 623.124462][ T8] usb 5-1: config 0 has no interface number 0 [ 623.130921][ T8] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 623.144780][ T8] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 623.154869][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.174976][ T8] usb 5-1: Product: syz [ 623.235943][ T8] usb 5-1: Manufacturer: syz [ 623.266464][ T8] usb 5-1: SerialNumber: syz [ 623.328755][ T8] usb 5-1: config 0 descriptor?? [ 623.377062][T13161] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 623.417085][T13168] tipc: Enabling of bearer rejected, failed to enable media [ 623.628312][T13168] syzkaller0: entered promiscuous mode [ 623.635025][T13168] syzkaller0: entered allmulticast mode [ 623.673458][T13161] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 624.526431][ T8] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 624.563747][ T8] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 624.646113][ T8] asix: probe of 5-1:0.188 failed with error -61 [ 624.849135][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.861533][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.848324][ T5835] usb 5-1: USB disconnect, device number 31 [ 631.211640][T13218] random: crng reseeded on system resumption [ 631.802285][ T5816] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 632.002601][ T6084] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 632.211958][ T6084] usb 6-1: Using ep0 maxpacket: 16 [ 632.232121][ T5816] usb 5-1: Using ep0 maxpacket: 32 [ 632.248974][ T5816] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 632.261890][ T5816] usb 5-1: config 0 has no interface number 0 [ 632.270192][ T5816] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 632.289905][ T5816] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 632.306899][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.319981][ T5816] usb 5-1: Product: syz [ 632.326746][ T5816] usb 5-1: Manufacturer: syz [ 632.332401][ T5816] usb 5-1: SerialNumber: syz [ 632.346793][ T5816] usb 5-1: config 0 descriptor?? [ 632.360623][T13220] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 632.398189][ T6084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.410875][ T6084] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.432095][ T6084] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 632.452748][ T6084] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 632.462030][ T6084] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.472918][ T6084] usb 6-1: config 0 descriptor?? [ 632.590909][T13220] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 632.756604][T13242] syzkaller0: entered promiscuous mode [ 632.762603][T13242] syzkaller0: entered allmulticast mode [ 632.931997][ T6084] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 632.953369][ T6084] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 632.980821][ T6084] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 633.011231][ T6084] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 633.028728][ T6084] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 633.057838][ T6084] input: HID 0955:7214 Haptics as /devices/virtual/input/input24 [ 633.151377][ T6084] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 633.187538][ T6084] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 633.283573][ T5788] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 633.301091][ T6084] usb 6-1: USB disconnect, device number 6 [ 633.315074][ T5788] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 633.351055][ T5788] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 633.380110][ T5788] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 633.430794][ T5816] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 633.443601][ T5816] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 633.457333][ T5816] asix: probe of 5-1:0.188 failed with error -61 [ 634.697250][ T5844] usb 5-1: USB disconnect, device number 32 [ 635.326452][ T5844] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 635.543974][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 635.553066][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.580051][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.606808][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 635.637066][ T5844] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 635.658658][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.679017][ T5844] usb 5-1: config 0 descriptor?? [ 636.109243][ T5844] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 636.122304][ T5844] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 636.129537][ T5844] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 636.138005][ T5844] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 636.145148][ T5844] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 636.156699][ T5844] input: HID 0955:7214 Haptics as /devices/virtual/input/input25 [ 636.224222][ T5844] shield 0003:0955:7214.0008: Registered Thunderstrike controller [ 636.234746][ T5844] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 636.301785][T13271] random: crng reseeded on system resumption [ 636.745961][T13279] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2062'. [ 636.780443][T13279] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 637.205836][ T8] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 637.217460][ T5816] usb 5-1: USB disconnect, device number 33 [ 637.248016][ T8] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 637.279785][ T8] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 637.291615][ T8] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 637.619466][ T6084] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 637.989347][ T6084] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 638.017912][ T6084] usb 6-1: config 0 has no interface number 0 [ 638.058216][ T6084] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 638.116746][ T6084] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 638.133398][ T6084] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.145124][ T6084] usb 6-1: Product: syz [ 638.152715][ T6084] usb 6-1: Manufacturer: syz [ 638.157586][ T6084] usb 6-1: SerialNumber: syz [ 638.173775][ T6084] usb 6-1: config 0 descriptor?? [ 638.206371][ T6084] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 638.726965][T13301] syzkaller0: entered promiscuous mode [ 638.733645][T13301] syzkaller0: entered allmulticast mode [ 639.513929][ C1] usb 6-1: yurex_control_callback - control failed: -2 [ 639.633811][ T6084] usb 6-1: USB disconnect, device number 7 [ 639.666465][ T6084] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 642.295680][T13324] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2071'. [ 642.305683][T13324] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 642.643356][T13336] overlayfs: missing 'lowerdir' [ 643.027120][ T5788] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 643.226499][ T5788] usb 5-1: Using ep0 maxpacket: 32 [ 643.250626][ T5788] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 643.353299][ T5788] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 643.365890][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 643.378835][ T5788] usb 5-1: Product: syz [ 643.383377][ T5788] usb 5-1: Manufacturer: syz [ 643.389461][ T5788] usb 5-1: SerialNumber: syz [ 643.422954][ T5788] usb 5-1: config 0 descriptor?? [ 643.430568][T13341] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 643.442039][T13351] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2080'. [ 643.482573][T13351] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 644.077099][T13355] syzkaller0: entered promiscuous mode [ 644.101738][T13355] syzkaller0: entered allmulticast mode [ 645.808120][ T5835] usb 5-1: USB disconnect, device number 34 [ 648.934086][T13387] overlayfs: missing 'lowerdir' [ 649.211361][T13394] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2089'. [ 649.222490][T13394] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 649.313671][ T5816] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 649.483504][ T6084] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 649.733366][ T6084] usb 4-1: Using ep0 maxpacket: 32 [ 649.733642][ T5816] usb 5-1: Using ep0 maxpacket: 16 [ 650.020937][ T6084] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 650.097552][ T6084] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 650.125446][ T6084] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 650.157097][ T5816] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.169192][ T6084] usb 4-1: Product: syz [ 650.174179][ T5816] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 650.195084][ T5816] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 650.214337][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.249588][ T5816] usb 5-1: Product: syz [ 650.263228][ T5816] usb 5-1: Manufacturer: syz [ 650.280374][ T5816] usb 5-1: SerialNumber: syz [ 650.311694][ T6084] usb 4-1: Manufacturer: syz [ 650.358688][ T6084] usb 4-1: SerialNumber: syz [ 650.383933][ T6084] usb 4-1: config 0 descriptor?? [ 650.393513][ T5816] usb 5-1: config 0 descriptor?? [ 650.410365][T13396] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 651.619333][T13418] syzkaller0: entered promiscuous mode [ 651.628516][T13418] syzkaller0: entered allmulticast mode [ 652.150332][T11449] usb 5-1: USB disconnect, device number 35 [ 652.345282][ T5844] usb 4-1: USB disconnect, device number 38 [ 652.940907][T13438] overlayfs: missing 'lowerdir' [ 653.072122][T11449] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 653.281593][T11449] usb 4-1: Using ep0 maxpacket: 16 [ 653.303217][T11449] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.314873][T11449] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.325002][T11449] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 653.338476][T11449] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 653.348191][T11449] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.359327][T11449] usb 4-1: config 0 descriptor?? [ 653.815357][T11449] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 653.835705][T11449] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 653.844614][T11449] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 653.872801][T11449] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 653.893342][T11449] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 653.929861][T11449] input: HID 0955:7214 Haptics as /devices/virtual/input/input26 [ 653.992008][T11449] shield 0003:0955:7214.0009: Registered Thunderstrike controller [ 654.000212][T11449] shield 0003:0955:7214.0009: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 654.012259][T13435] random: crng reseeded on system resumption [ 654.527885][ T6084] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 654.539441][ T5788] usb 4-1: USB disconnect, device number 39 [ 654.605464][ T6084] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 654.635923][ T6084] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 654.651846][ T6084] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 658.357439][T13440] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2099'. [ 658.377779][T13440] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 663.460285][T13454] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.786801][ T5816] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 663.817748][T13454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.853092][T13454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.996159][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 664.003001][ T5816] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 664.028379][ T5816] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 664.037746][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.046521][ T5816] usb 2-1: Product: syz [ 664.050776][ T5816] usb 2-1: Manufacturer: syz [ 664.055502][ T5816] usb 2-1: SerialNumber: syz [ 664.063018][ T5816] usb 2-1: config 0 descriptor?? [ 664.231679][T13454] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.240726][T13454] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.250531][T13454] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.259622][T13454] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.421011][T13480] syzkaller0: entered promiscuous mode [ 664.426882][T13480] syzkaller0: entered allmulticast mode [ 665.538306][ T5788] IPVS: starting estimator thread 0... [ 665.757598][T13517] IPVS: using max 18 ests per chain, 43200 per kthread [ 667.241327][ T5788] usb 2-1: USB disconnect, device number 34 [ 676.806799][T13572] syzkaller0: entered promiscuous mode [ 676.812980][T13572] syzkaller0: entered allmulticast mode [ 685.695287][ T5788] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 685.885175][ T5788] usb 4-1: Using ep0 maxpacket: 32 [ 685.895690][ T5788] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 685.904734][ T5788] usb 4-1: config 0 has no interface number 0 [ 685.914928][ T5788] usb 4-1: config 0 interface 12 has no altsetting 0 [ 685.925930][ T5788] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 685.942085][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.969704][ T5788] usb 4-1: Product: syz [ 685.978547][ T5788] usb 4-1: Manufacturer: syz [ 685.983291][ T5788] usb 4-1: SerialNumber: syz [ 686.009942][ T5788] usb 4-1: config 0 descriptor?? [ 686.038223][ T5788] f81534 4-1:0.12: required endpoints missing [ 686.253897][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.262558][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.381594][T13623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.411571][T13623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.484110][T13623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.510625][T13623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.568813][ T5788] usb 4-1: USB disconnect, device number 40 [ 688.523007][T13645] syzkaller0: entered promiscuous mode [ 688.533675][T13645] syzkaller0: entered allmulticast mode [ 694.018261][ T28] audit: type=1326 audit(1771917449.083:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.5.2158" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd6af9c629 code=0x0 [ 699.191342][T13674] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 699.201071][T13674] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 699.210897][T13674] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 701.768652][T13725] syzkaller0: entered promiscuous mode [ 701.774914][T13725] syzkaller0: entered allmulticast mode [ 708.685586][T13774] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 708.747248][T13774] macvlan2: entered promiscuous mode [ 708.756086][T13774] bridge0: entered promiscuous mode [ 709.592326][T13784] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2185'. [ 709.601955][T13784] ------------[ cut here ]------------ [ 709.607570][T13784] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 709.702843][T13784] WARNING: CPU: 0 PID: 13784 at net/sched/cls_u32.c:855 u32_change+0x1c5a/0x24f0 [ 709.712245][T13784] Modules linked in: [ 709.716398][T13784] CPU: 0 PID: 13784 Comm: syz.4.2185 Not tainted syzkaller #0 [ 709.724347][T13784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 709.734892][T13784] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 709.740375][T13784] Code: f8 eb 59 e8 a8 a0 d9 f8 c6 05 51 12 c8 05 01 b9 10 00 00 00 48 c7 c7 e0 40 c7 8b 4c 89 f6 48 c7 c2 60 41 c7 8b e8 16 62 a3 f8 <0f> 0b e9 86 f0 ff ff e8 7a a0 d9 f8 eb 24 e8 73 a0 d9 f8 c6 05 f3 [ 709.760331][T13784] RSP: 0018:ffffc900038aed40 EFLAGS: 00010246 [ 709.766652][T13784] RAX: 83b9d1c11f002800 RBX: ffff88804d23d800 RCX: 0000000000080000 [ 709.774822][T13784] RDX: ffffc900198cc000 RSI: 0000000000007815 RDI: 0000000000007816 [ 709.782935][T13784] RBP: ffffc900038aeef8 R08: ffffc900038ae947 R09: 1ffff92000715d28 [ 709.791046][T13784] R10: dffffc0000000000 R11: fffff52000715d29 R12: ffff88804d23d000 [ 709.799315][T13784] R13: ffff88804d23d0e8 R14: 0000000000000020 R15: ffff8880798a9d40 [ 709.807536][T13784] FS: 00007fe115cba6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 709.816912][T13784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 709.823670][T13784] CR2: 00007fe115b4da08 CR3: 0000000068320000 CR4: 00000000003526f0 [ 709.831759][T13784] Call Trace: [ 709.835157][T13784] [ 709.838179][T13784] ? tc_new_tfilter+0x8c6/0x1640 [ 709.843363][T13784] ? u32_get+0x370/0x370 [ 709.847746][T13784] tc_new_tfilter+0xe4f/0x1640 [ 709.852890][T13784] ? tcf_proto_signal_destroying+0x240/0x240 [ 709.859026][T13784] ? rcu_read_unlock+0x8c/0xa0 [ 709.863897][T13784] ? tcf_proto_signal_destroying+0x240/0x240 [ 709.869954][T13784] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 709.875326][T13784] ? tcf_proto_signal_destroying+0x240/0x240 [ 709.881382][T13784] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 709.886475][T13784] ? lockdep_hardirqs_on+0x98/0x150 [ 709.891812][T13784] ? rtnetlink_bind+0x80/0x80 [ 709.896608][T13784] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 709.902647][T13784] ? __dev_queue_xmit+0x26b/0x36b0 [ 709.907872][T13784] ? lock_chain_count+0x20/0x20 [ 709.912771][T13784] ? __local_bh_enable_ip+0x13a/0x1c0 [ 709.918256][T13784] ? lockdep_hardirqs_on+0x98/0x150 [ 709.923559][T13784] ? __local_bh_enable_ip+0x13a/0x1c0 [ 709.929035][T13784] ? _local_bh_enable+0xa0/0xa0 [ 709.933991][T13784] ? __dev_queue_xmit+0x26b/0x36b0 [ 709.939141][T13784] ? __dev_queue_xmit+0x26b/0x36b0 [ 709.944333][T13784] ? __dev_queue_xmit+0x124f/0x36b0 [ 709.949654][T13784] ? __dev_queue_xmit+0x26b/0x36b0 [ 709.954851][T13784] ? ref_tracker_free+0x690/0x840 [ 709.959917][T13784] netlink_rcv_skb+0x241/0x4d0 [ 709.964803][T13784] ? rtnetlink_bind+0x80/0x80 [ 709.969505][T13784] ? netlink_ack+0x1180/0x1180 [ 709.974412][T13784] ? __lock_acquire+0x7d40/0x7d40 [ 709.979481][T13784] ? netlink_deliver_tap+0x2e/0x1b0 [ 709.984734][T13784] netlink_unicast+0x751/0x8d0 [ 709.989544][T13784] netlink_sendmsg+0x8d0/0xbf0 [ 709.994427][T13784] ? netlink_getsockopt+0x590/0x590 [ 709.999641][T13784] ? aa_sock_msg_perm+0x94/0x150 [ 710.004676][T13784] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 710.009989][T13784] ? security_socket_sendmsg+0x80/0xa0 [ 710.015493][T13784] ? netlink_getsockopt+0x590/0x590 [ 710.020748][T13784] ____sys_sendmsg+0x5ba/0x960 [ 710.025572][T13784] ? __asan_memset+0x22/0x40 [ 710.030187][T13784] ? __sys_sendmsg_sock+0x30/0x30 [ 710.035255][T13784] ? __import_iovec+0x5f2/0x850 [ 710.040125][T13784] ? import_iovec+0x73/0xa0 [ 710.044711][T13784] ___sys_sendmsg+0x2a6/0x360 [ 710.049564][T13784] ? __sys_sendmsg+0x2a0/0x2a0 [ 710.054413][T13784] __sys_sendmmsg+0x2ca/0x510 [ 710.059107][T13784] ? __ia32_sys_sendmsg+0x90/0x90 [ 710.064211][T13784] ? __ia32_sys_get_robust_list+0x110/0x110 [ 710.070162][T13784] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 710.076245][T13784] ? lock_chain_count+0x20/0x20 [ 710.081115][T13784] __x64_sys_sendmmsg+0xa0/0xb0 [ 710.086191][T13784] do_syscall_64+0x55/0xa0 [ 710.090650][T13784] ? clear_bhb_loop+0x40/0x90 [ 710.095371][T13784] ? clear_bhb_loop+0x40/0x90 [ 710.100409][T13784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 710.106426][T13784] RIP: 0033:0x7fe114d9c629 [ 710.110933][T13784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.131050][T13784] RSP: 002b:00007fe115cba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 710.139656][T13784] RAX: ffffffffffffffda RBX: 00007fe115015fa0 RCX: 00007fe114d9c629 [ 710.147700][T13784] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 710.155806][T13784] RBP: 00007fe114e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 710.163878][T13784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.171949][T13784] R13: 00007fe115016038 R14: 00007fe115015fa0 R15: 00007ffd2035bdd8 [ 710.179968][T13784] [ 710.183132][T13784] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 710.190516][T13784] CPU: 0 PID: 13784 Comm: syz.4.2185 Not tainted syzkaller #0 [ 710.197970][T13784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 710.208031][T13784] Call Trace: [ 710.211312][T13784] [ 710.214303][T13784] dump_stack_lvl+0x18c/0x250 [ 710.219030][T13784] ? show_regs_print_info+0x20/0x20 [ 710.224250][T13784] ? load_image+0x400/0x400 [ 710.228778][T13784] panic+0x2dc/0x730 [ 710.232808][T13784] ? bpf_jit_dump+0xd0/0xd0 [ 710.237341][T13784] __warn+0x2e0/0x470 [ 710.241335][T13784] ? u32_change+0x1c5a/0x24f0 [ 710.246026][T13784] ? u32_change+0x1c5a/0x24f0 [ 710.250717][T13784] report_bug+0x2be/0x4f0 [ 710.255064][T13784] ? u32_change+0x1c5a/0x24f0 [ 710.259753][T13784] ? u32_change+0x1c5a/0x24f0 [ 710.264528][T13784] ? u32_change+0x1c5c/0x24f0 [ 710.269223][T13784] handle_bug+0xcf/0x120 [ 710.273486][T13784] exc_invalid_op+0x1a/0x50 [ 710.278010][T13784] asm_exc_invalid_op+0x1a/0x20 [ 710.282873][T13784] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 710.288172][T13784] Code: f8 eb 59 e8 a8 a0 d9 f8 c6 05 51 12 c8 05 01 b9 10 00 00 00 48 c7 c7 e0 40 c7 8b 4c 89 f6 48 c7 c2 60 41 c7 8b e8 16 62 a3 f8 <0f> 0b e9 86 f0 ff ff e8 7a a0 d9 f8 eb 24 e8 73 a0 d9 f8 c6 05 f3 [ 710.307916][T13784] RSP: 0018:ffffc900038aed40 EFLAGS: 00010246 [ 710.314104][T13784] RAX: 83b9d1c11f002800 RBX: ffff88804d23d800 RCX: 0000000000080000 [ 710.322100][T13784] RDX: ffffc900198cc000 RSI: 0000000000007815 RDI: 0000000000007816 [ 710.330113][T13784] RBP: ffffc900038aeef8 R08: ffffc900038ae947 R09: 1ffff92000715d28 [ 710.338102][T13784] R10: dffffc0000000000 R11: fffff52000715d29 R12: ffff88804d23d000 [ 710.346083][T13784] R13: ffff88804d23d0e8 R14: 0000000000000020 R15: ffff8880798a9d40 [ 710.354182][T13784] ? tc_new_tfilter+0x8c6/0x1640 [ 710.359252][T13784] ? u32_get+0x370/0x370 [ 710.363531][T13784] tc_new_tfilter+0xe4f/0x1640 [ 710.368334][T13784] ? tcf_proto_signal_destroying+0x240/0x240 [ 710.374345][T13784] ? rcu_read_unlock+0x8c/0xa0 [ 710.379133][T13784] ? tcf_proto_signal_destroying+0x240/0x240 [ 710.385138][T13784] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 710.390256][T13784] ? tcf_proto_signal_destroying+0x240/0x240 [ 710.396292][T13784] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 710.401247][T13784] ? lockdep_hardirqs_on+0x98/0x150 [ 710.406468][T13784] ? rtnetlink_bind+0x80/0x80 [ 710.411160][T13784] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 710.417151][T13784] ? __dev_queue_xmit+0x26b/0x36b0 [ 710.422288][T13784] ? lock_chain_count+0x20/0x20 [ 710.427174][T13784] ? __local_bh_enable_ip+0x13a/0x1c0 [ 710.432581][T13784] ? lockdep_hardirqs_on+0x98/0x150 [ 710.437804][T13784] ? __local_bh_enable_ip+0x13a/0x1c0 [ 710.443200][T13784] ? _local_bh_enable+0xa0/0xa0 [ 710.448071][T13784] ? __dev_queue_xmit+0x26b/0x36b0 [ 710.453195][T13784] ? __dev_queue_xmit+0x26b/0x36b0 [ 710.458377][T13784] ? __dev_queue_xmit+0x124f/0x36b0 [ 710.463589][T13784] ? __dev_queue_xmit+0x26b/0x36b0 [ 710.468743][T13784] ? ref_tracker_free+0x690/0x840 [ 710.473962][T13784] netlink_rcv_skb+0x241/0x4d0 [ 710.478745][T13784] ? rtnetlink_bind+0x80/0x80 [ 710.483433][T13784] ? netlink_ack+0x1180/0x1180 [ 710.488225][T13784] ? __lock_acquire+0x7d40/0x7d40 [ 710.493430][T13784] ? netlink_deliver_tap+0x2e/0x1b0 [ 710.498665][T13784] netlink_unicast+0x751/0x8d0 [ 710.503466][T13784] netlink_sendmsg+0x8d0/0xbf0 [ 710.508257][T13784] ? netlink_getsockopt+0x590/0x590 [ 710.513482][T13784] ? aa_sock_msg_perm+0x94/0x150 [ 710.518432][T13784] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 710.523731][T13784] ? security_socket_sendmsg+0x80/0xa0 [ 710.529198][T13784] ? netlink_getsockopt+0x590/0x590 [ 710.534410][T13784] ____sys_sendmsg+0x5ba/0x960 [ 710.539190][T13784] ? __asan_memset+0x22/0x40 [ 710.543793][T13784] ? __sys_sendmsg_sock+0x30/0x30 [ 710.548826][T13784] ? __import_iovec+0x5f2/0x850 [ 710.553702][T13784] ? import_iovec+0x73/0xa0 [ 710.558222][T13784] ___sys_sendmsg+0x2a6/0x360 [ 710.562911][T13784] ? __sys_sendmsg+0x2a0/0x2a0 [ 710.567721][T13784] __sys_sendmmsg+0x2ca/0x510 [ 710.572453][T13784] ? __ia32_sys_sendmsg+0x90/0x90 [ 710.577500][T13784] ? __ia32_sys_get_robust_list+0x110/0x110 [ 710.583446][T13784] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 710.589540][T13784] ? lock_chain_count+0x20/0x20 [ 710.594497][T13784] __x64_sys_sendmmsg+0xa0/0xb0 [ 710.599361][T13784] do_syscall_64+0x55/0xa0 [ 710.603801][T13784] ? clear_bhb_loop+0x40/0x90 [ 710.608590][T13784] ? clear_bhb_loop+0x40/0x90 [ 710.613450][T13784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 710.619356][T13784] RIP: 0033:0x7fe114d9c629 [ 710.623786][T13784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.643410][T13784] RSP: 002b:00007fe115cba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 710.651843][T13784] RAX: ffffffffffffffda RBX: 00007fe115015fa0 RCX: 00007fe114d9c629 [ 710.659914][T13784] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 710.667897][T13784] RBP: 00007fe114e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 710.675889][T13784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.683881][T13784] R13: 00007fe115016038 R14: 00007fe115015fa0 R15: 00007ffd2035bdd8 [ 710.691897][T13784] [ 710.695355][T13784] Kernel Offset: disabled [ 710.699696][T13784] Rebooting in 86400 seconds..