last executing test programs: 6m24.302942199s ago: executing program 1 (id=269): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x2, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) close(0x3) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 6m21.94802543s ago: executing program 1 (id=283): syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 6m18.351458399s ago: executing program 1 (id=301): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @random="00eb7e41ef71"}, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x12, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, r4}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000002c0)={r2, &(0x7f0000000040)='\']%^\x00', 0x40000, &(0x7f0000000140)={@_ha_fsid={[0x89, 0x54]}, {0x3, 0x4, 0x1ff, 0x7}}, 0x100, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000280)=0x23569583}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000740)={@local, @local, @val={@val={0x88a8, 0x1, 0x1}, {0x8100, 0x1, 0x1, 0x1}}, {@canfd={0xd, {{0x3, 0x0, 0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, "5697c6b349017ca9b521dfa8649f5c7dc12244a457dd9227981bdc27b4a660197299e7bc206cd866a735a76e1f7a4923ebbe1c1e5ca09fb1b0c7c630b6c9e92d"}}}}, 0x0) 6m13.218397317s ago: executing program 1 (id=327): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x0, 0x8240) read$hidraw(r1, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000340)='R') 6m10.074176672s ago: executing program 1 (id=340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000087000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m9.699748907s ago: executing program 1 (id=342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50) recvmsg(r0, 0x0, 0x22) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, 0x0, &(0x7f0000000100)) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x89f6, 0x0) accept4(r2, 0x0, &(0x7f0000000600), 0x40000) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) write$cgroup_type(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) 5m54.004102118s ago: executing program 32 (id=342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50) recvmsg(r0, 0x0, 0x22) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, 0x0, &(0x7f0000000100)) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x89f6, 0x0) accept4(r2, 0x0, &(0x7f0000000600), 0x40000) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) write$cgroup_type(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) 6.780398739s ago: executing program 4 (id=2091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003240)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 5.659535569s ago: executing program 3 (id=2096): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100"], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="410404"], 0x7) recvmsg$qrtr(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1, 0x0, 0x0, 0x1}, 0x38, 0x40) 5.54325082s ago: executing program 4 (id=2099): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42, 0x0, 0xfffffffe}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538"], 0xfdef) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3, 0x1}}, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.539887407s ago: executing program 2 (id=2100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c000280140005000000000000000000000000000000000104001200050017000700000005001600"], 0x60}}, 0x0) 4.962002009s ago: executing program 2 (id=2101): r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYRESOCT=r0], 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$inet6(0xa, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = socket$inet(0x2, 0x3, 0xa) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000001a00)=0x7, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002d80)=ANY=[], 0xd40}}, 0x40850) sendmsg$inet(r2, 0x0, 0x4004000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000f600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x22020600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 4.913481407s ago: executing program 3 (id=2102): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r4}, 0x20) 4.913226127s ago: executing program 5 (id=2103): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000440)='p', 0x1, 0x24008810, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x5, 0x30}, 0xc) socket$inet(0x2, 0x806, 0x6) sendmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x40800) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) 4.473393463s ago: executing program 0 (id=2104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r5) 4.153220865s ago: executing program 4 (id=2105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x84, 0x2c, 0xd2f, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10002, 0x40, 0x5, 0x7, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, 0x0, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 3.58730028s ago: executing program 5 (id=2106): syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b0011424203"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x2003}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.548466134s ago: executing program 2 (id=2107): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000440)='p', 0x1, 0x24008810, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x5, 0x30}, 0xc) socket$inet(0x2, 0x806, 0x6) sendmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x40800) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 3.542349865s ago: executing program 3 (id=2108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x70, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "322d73352e3a00000000000000436384"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "9ea2d328893918672a5ca222a631017cc0f4457113a830013ed4"}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x806}, 0x0) 3.415489043s ago: executing program 0 (id=2109): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) poll(0x0, 0x0, 0x7f) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) socketpair(0x8, 0x1, 0x0, &(0x7f0000000000)) 3.415031109s ago: executing program 4 (id=2110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}, {&(0x7f0000000300)="31020002", 0x4}], 0x2) 3.137480907s ago: executing program 5 (id=2111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014000500000000000000000000000000000000010400120005001700070000000500160002"], 0x60}}, 0x0) 3.036589469s ago: executing program 3 (id=2112): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="410404"], 0x7) recvmsg$qrtr(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1, 0x0, 0x0, 0x1}, 0x38, 0x40) 2.661427003s ago: executing program 0 (id=2113): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x2c, 0x2e, 0x1, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x6, 0xffff}, {0x1, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8011}, 0x0) 2.561723697s ago: executing program 4 (id=2114): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) close(0xffffffffffffffff) r1 = socket(0x14, 0x2, 0x4) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x7, 0x3}}, 0x10) 2.414697094s ago: executing program 5 (id=2115): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42, 0x0, 0xfffffffe}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538"], 0xfdef) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3, 0x1}}, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.231392947s ago: executing program 3 (id=2116): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003075f37407104020695a401020301090224000242d8000a0904001001323ab4080905070210007fdc14090401"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x8000, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f00000002c0)={'ip6tnl0\x00'}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='\x00u', 0x2, 0x24008084, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, 0xad) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000200), 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, 0x0, 0x0) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES8=r2], 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="020a0505020000002cbd9e6c4d23df25"], 0x10}}, 0x40004) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r6 = io_uring_setup(0x1191, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x5, 0xce}) writev(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r6, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 2.204350672s ago: executing program 2 (id=2117): r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYRESOCT=r0], 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$inet6(0xa, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = socket$inet(0x2, 0x3, 0xa) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000001a00)=0x7, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002d80)=ANY=[], 0xd40}}, 0x40850) sendmsg$inet(r2, 0x0, 0x4004000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000f600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x22020600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 2.081844876s ago: executing program 0 (id=2118): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) read$nci(r0, 0x0, 0x0) 1.213885188s ago: executing program 4 (id=2119): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x458d0) r1 = socket(0x14, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x400261f2, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x4}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)={0x30, 0x2e, 0x503, 0x40000, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x30}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000001d40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001d00)={&(0x7f0000000b40)={0x1198, r5, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x9c, 0x45, "ef68248c566d9fef38db6ad9b9876bd46f77e256f3ca29a09af9356a78737e8598378612e8277ab948393c8b8ff0b9bf6407e8bb466330f2bf3c002fbe4f4b600dc0b74c796cddc744626056c74e26c8e459ef8997e8b19f6ed8ad915ec0b3a3d663943ff8725890a98d24dfe01a9efea8211cfcedc7b8dca097253513085262cc68b588e3e620c0dc56ec3dcfab162d7a9cd7fd07ed4c0a"}, @NL80211_ATTR_TESTDATA={0xa2, 0x45, "595411d6b8fbfc7e6c89003e2578873e1ae0ac94e17767be51ef88b8ba2edf0f24e4d02d5ffa8a0362c1b37d56adeb0e0c9b9d96db0e6589a33c828b99ec20aaec970b8a7d72eac75eba4730e4a2aabd51818f4aeb2693fd3f951620ba8e9ab480c389d14cefdf529beda7258a25292a864726a09ca80771315030c12be563d083af758f53db27f93d7492711b9e3efa1dc9d7f703a59a40452296052ace"}, @NL80211_ATTR_TESTDATA={0x38, 0x45, "638b170468c7387c1bfbd4470454b2b44d79a671e7354af8459b160a951d046ffb4352720ed104a9974d512add2a361ef2a81878"}]}, 0x1198}, 0x1, 0x0, 0x0, 0x24004080}, 0x40805) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x24, r5, 0x1, 0x70bd26, 0x1, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}, 0x1, 0x0, 0x0, 0x24d41b6036a153c7}, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1175}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xbb3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x716}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5d0}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041840}, 0x4) 1.057794558s ago: executing program 5 (id=2120): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0x3}]}}, 0x0, 0x2a, 0x0, 0x1, 0x9}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x4}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x26e1, 0x0) close(r0) socket$inet6(0xa, 0x80002, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 688.98996ms ago: executing program 2 (id=2121): syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b0011424203"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x2003}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 610.149431ms ago: executing program 0 (id=2122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x70, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "322d73352e3a00000000000000436384"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "9ea2d328893918672a5ca222a631017cc0f4457113a830013ed4"}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x806}, 0x0) 420.821601ms ago: executing program 5 (id=2123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x538}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xd, 0x0, &(0x7f0000000200)="df33c9f7b9a600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 137.673182ms ago: executing program 3 (id=2124): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="8400"], 0x84}, 0x1, 0x0, 0x0, 0x8d7f1b7f2655125c}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x48, 0x0, 0x0, 0x0) 5.110007ms ago: executing program 2 (id=2125): socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x23, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x28, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 0s ago: executing program 0 (id=2126): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x458d0) r1 = socket(0x14, 0x80000, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xb, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8858}, 0x20004844) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x400261f2, 0x0) kernel console output (not intermixed with test programs): 1][ T7768] bridge_slave_1: left allmulticast mode [ 352.864853][ T806] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 352.892621][ T7768] bridge_slave_1: left promiscuous mode [ 352.952861][ T7768] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.064678][ T806] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 8 [ 353.125988][ T806] usb 6-1: string descriptor 0 read error: -22 [ 353.134774][ T7783] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input10 [ 353.160355][ T806] usb 6-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 353.196775][ T7768] bond0: (slave bond_slave_0): Releasing backup interface [ 353.229863][ T806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.307038][ T7777] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 353.385689][ T806] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 353.393298][ T806] usb 6-1: MIDIStreaming interface descriptor not found [ 353.539331][ T7768] bond0: (slave bond_slave_1): Releasing backup interface [ 353.909649][ T7768] team0: Port device team_slave_0 removed [ 354.163586][ T7768] team0: Port device team_slave_1 removed [ 354.283307][ T7768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.356635][ T806] usb 6-1: USB disconnect, device number 2 [ 354.390938][ T7768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.535494][ T7768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.590824][ T7768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.742290][ T7768] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.856268][ T7763] vlan0: entered promiscuous mode [ 354.974396][ T7763] team0: Port device vlan0 added [ 354.999463][ T7766] tipc: Started in network mode [ 355.034773][ T7766] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 355.081257][ T7766] tipc: Enabled bearer , priority 0 [ 356.195671][ T5713] tipc: Node number set to 11578026 [ 357.008725][ T7828] syzkaller0: entered promiscuous mode [ 357.072693][ T7828] syzkaller0: entered allmulticast mode [ 359.142046][ T5599] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 359.574386][ T7867] tipc: Enabled bearer , priority 0 [ 359.640110][ T7868] syzkaller0: entered promiscuous mode [ 359.705922][ T7868] syzkaller0: entered allmulticast mode [ 359.929637][ T7869] tipc: Resetting bearer [ 359.964894][ T7866] tipc: Resetting bearer [ 360.029898][ T7866] tipc: Disabling bearer [ 361.968103][ T7889] syzkaller0: entered promiscuous mode [ 362.002249][ T7889] syzkaller0: entered allmulticast mode [ 363.283047][ T7910] tipc: Enabled bearer , priority 0 [ 363.312472][ T7910] syzkaller0: entered promiscuous mode [ 363.354310][ T7910] syzkaller0: entered allmulticast mode [ 363.502117][ T7910] tipc: Resetting bearer [ 363.601942][ T7909] tipc: Resetting bearer [ 363.660040][ T7909] tipc: Disabling bearer [ 364.718610][ T806] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 364.885791][ T806] usb 4-1: device descriptor read/64, error -71 [ 365.145735][ T806] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 365.304094][ T806] usb 4-1: device descriptor read/64, error -71 [ 365.435779][ T806] usb usb4-port1: attempt power cycle [ 365.814343][ T806] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 365.873976][ T806] usb 4-1: device descriptor read/8, error -71 [ 366.134751][ T806] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 366.200162][ T806] usb 4-1: device descriptor read/8, error -71 [ 366.317960][ T806] usb usb4-port1: unable to enumerate USB device [ 366.668109][ T7951] vlan3: entered promiscuous mode [ 366.688124][ T7951] virt_wifi0: entered promiscuous mode [ 366.703517][ T7951] vlan3: entered allmulticast mode [ 366.725624][ T7951] virt_wifi0: entered allmulticast mode [ 366.749610][ T7917] binder: 7916:7917 ioctl 4018620d 0 returned -22 [ 366.769456][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.666'. [ 366.929845][ T7955] hsr_slave_0: left promiscuous mode [ 366.979455][ T7955] hsr_slave_1: left promiscuous mode [ 370.225863][ T5688] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 370.394246][ T5688] usb 3-1: device descriptor read/64, error -71 [ 370.644064][ T5688] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 370.784144][ T5688] usb 3-1: device descriptor read/64, error -71 [ 370.895105][ T5688] usb usb3-port1: attempt power cycle [ 371.234516][ T5688] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 371.280551][ T5688] usb 3-1: device descriptor read/8, error -71 [ 371.521471][ T7971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.535059][ T5688] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 371.578478][ T5688] usb 3-1: device descriptor read/8, error -71 [ 371.707274][ T5688] usb usb3-port1: unable to enumerate USB device [ 372.445799][ T9] hsr0: entered promiscuous mode [ 374.202176][ T8053] gretap0: entered promiscuous mode [ 376.332549][ T8034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 377.378879][ T8111] netlink: 'syz.2.727': attribute type 1 has an invalid length. [ 377.791363][ T8111] 8021q: adding VLAN 0 to HW filter on device bond3 [ 378.012914][ T8113] vlan0: entered allmulticast mode [ 378.053158][ T8113] bond3: entered allmulticast mode [ 379.445359][ T8146] netlink: 28 bytes leftover after parsing attributes in process `syz.5.742'. [ 380.401655][ T8159] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 380.985412][ T8159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.614627][ T5688] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 381.803638][ T5688] usb 5-1: no configurations [ 381.828163][ T8186] netlink: 'syz.5.756': attribute type 6 has an invalid length. [ 381.840006][ T5688] usb 5-1: can't read configurations, error -22 [ 381.874292][ T8186] netlink: 32 bytes leftover after parsing attributes in process `syz.5.756'. [ 382.014499][ T5688] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 382.232382][ T5688] usb 5-1: no configurations [ 382.283732][ T5688] usb 5-1: can't read configurations, error -22 [ 382.328768][ T5688] usb usb5-port1: attempt power cycle [ 382.564335][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.760'. [ 382.704331][ T5688] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 382.778100][ T5688] usb 5-1: no configurations [ 383.078991][ T8202] netlink: 272 bytes leftover after parsing attributes in process `syz.3.763'. [ 383.319650][ T5688] usb 5-1: can't read configurations, error -22 [ 383.454114][ T5688] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 383.490109][ T5688] usb 5-1: no configurations [ 383.497471][ T5688] usb 5-1: can't read configurations, error -22 [ 383.512875][ T5688] usb usb5-port1: unable to enumerate USB device [ 383.839709][ T8210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.766'. [ 383.880293][ T8209] netlink: 'syz.2.765': attribute type 1 has an invalid length. [ 384.079918][ T8209] 8021q: adding VLAN 0 to HW filter on device bond4 [ 384.416042][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.769'. [ 384.641245][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 384.857827][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 384.869805][ T8228] netlink: 20 bytes leftover after parsing attributes in process `syz.5.772'. [ 384.901867][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 384.943673][ T9] usb 4-1: config 179 has no interface number 0 [ 384.977948][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 385.036785][ T8228] vlan2: entered promiscuous mode [ 385.053638][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 385.068036][ T8228] veth0_to_hsr: entered promiscuous mode [ 385.093412][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 385.123048][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 385.158313][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 385.192396][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.257999][ T8219] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 385.676925][ T8240] netlink: 272 bytes leftover after parsing attributes in process `syz.4.776'. [ 385.833633][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.778'. [ 386.216378][ T8252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.780'. [ 386.234698][ T806] usb 4-1: USB disconnect, device number 27 [ 386.480781][ T8254] netlink: 'syz.3.781': attribute type 1 has an invalid length. [ 386.612434][ T8254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 386.891926][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.784'. [ 387.170260][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.785'. [ 387.204430][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 387.390331][ T9] usb 6-1: no configurations [ 387.411423][ T9] usb 6-1: can't read configurations, error -22 [ 387.594838][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 387.760685][ T8271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.788'. [ 387.818143][ T9] usb 6-1: no configurations [ 387.837042][ T9] usb 6-1: can't read configurations, error -22 [ 387.880326][ T9] usb usb6-port1: attempt power cycle [ 387.908581][ T8271] vlan2: entered promiscuous mode [ 387.938493][ T8271] veth0_to_hsr: entered promiscuous mode [ 388.269506][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.283719][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.294430][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 388.382291][ T9] usb 6-1: no configurations [ 388.393436][ T9] usb 6-1: can't read configurations, error -22 [ 388.561249][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 388.631572][ T9] usb 6-1: no configurations [ 388.637371][ T9] usb 6-1: can't read configurations, error -22 [ 388.647683][ T8282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.792'. [ 388.669888][ T9] usb usb6-port1: unable to enumerate USB device [ 388.856027][ T5688] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 389.049685][ T5688] usb 1-1: Using ep0 maxpacket: 8 [ 389.069339][ T5688] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 389.090969][ T5688] usb 1-1: config 179 has no interface number 0 [ 389.102419][ T5688] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 389.143451][ T5688] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 389.186492][ T5688] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 389.218466][ T5688] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 389.274641][ T5688] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 389.285030][ T5688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.302936][ T8283] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 389.776111][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.796'. [ 389.889449][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.798'. [ 390.272789][ T5713] usb 1-1: USB disconnect, device number 15 [ 390.547454][ T8309] netlink: 20 bytes leftover after parsing attributes in process `syz.5.802'. [ 390.692281][ T8311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.803'. [ 391.428160][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.809'. [ 391.612545][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.810'. [ 393.117428][ T8348] netlink: 16 bytes leftover after parsing attributes in process `syz.4.817'. [ 393.218109][ T8301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.934486][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.823'. [ 395.310219][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.5.830'. [ 395.456562][ T5599] Bluetooth: hci4: command 0x0406 tx timeout [ 395.878384][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 396.074736][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 396.112324][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.182235][ T9] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 396.263157][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 396.322620][ T9] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 396.364960][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.428134][ T9] usb 4-1: config 0 descriptor?? [ 396.497562][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 397.728407][ T8418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.845'. [ 398.057224][ T8420] tipc: Enabled bearer , priority 0 [ 398.092937][ T8420] syzkaller0: entered promiscuous mode [ 398.128424][ T8420] syzkaller0: entered allmulticast mode [ 398.251628][ T8420] tipc: Resetting bearer [ 398.289531][ T8419] tipc: Resetting bearer [ 398.322984][ T8419] tipc: Disabling bearer [ 398.615759][ T8434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.850'. [ 398.632482][ T8434] netlink: 'syz.2.850': attribute type 3 has an invalid length. [ 398.680508][ T8434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.850'. [ 398.696223][ T8434] netlink: 'syz.2.850': attribute type 3 has an invalid length. [ 398.881241][ T9] usb 4-1: USB disconnect, device number 28 [ 400.420862][ T8458] tipc: Started in network mode [ 400.426541][ T8458] tipc: Node identity ba38e42396fa, cluster identity 4711 [ 400.449614][ T8458] tipc: Enabled bearer , priority 0 [ 400.486591][ T8459] syzkaller0: entered promiscuous mode [ 400.492754][ T8459] syzkaller0: entered allmulticast mode [ 400.611088][ T8458] tipc: Resetting bearer [ 400.680522][ T8457] tipc: Resetting bearer [ 400.732475][ T8457] tipc: Disabling bearer [ 401.001009][ T8463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.862'. [ 401.029156][ T8463] netlink: 'syz.3.862': attribute type 3 has an invalid length. [ 401.063122][ T8463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.862'. [ 401.097865][ T8463] netlink: 'syz.3.862': attribute type 3 has an invalid length. [ 401.214641][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 401.385195][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 401.405854][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.429580][ T9] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 401.481604][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 401.505259][ T9] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 401.541381][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.585764][ T9] usb 5-1: config 0 descriptor?? [ 401.635428][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 403.244709][ T8499] tipc: Enabled bearer , priority 0 [ 403.309242][ T8500] syzkaller0: entered promiscuous mode [ 403.315120][ T8500] syzkaller0: entered allmulticast mode [ 403.439972][ T8499] tipc: Resetting bearer [ 403.469348][ T8497] tipc: Resetting bearer [ 403.545527][ T8497] tipc: Disabling bearer [ 404.237075][ T9] usb 5-1: USB disconnect, device number 15 [ 405.314458][ T8521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.885'. [ 405.378620][ T8526] netlink: 52 bytes leftover after parsing attributes in process `syz.4.885'. [ 406.182334][ T8537] tipc: Started in network mode [ 406.234903][ T8537] tipc: Node identity be29c9ae1c41, cluster identity 4711 [ 406.281813][ T8537] tipc: Enabled bearer , priority 0 [ 406.327112][ T8542] syzkaller0: entered promiscuous mode [ 406.366502][ T8542] syzkaller0: entered allmulticast mode [ 406.404661][ T8545] x_tables: duplicate underflow at hook 1 [ 406.479812][ T8543] tipc: Resetting bearer [ 406.537793][ T8536] tipc: Resetting bearer [ 406.601371][ T8536] tipc: Disabling bearer [ 406.634274][ T8549] netlink: 'syz.4.894': attribute type 1 has an invalid length. [ 406.957498][ T8549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.193585][ T8578] x_tables: duplicate underflow at hook 1 [ 408.828970][ T8585] tipc: Enabled bearer , priority 0 [ 408.871487][ T8585] syzkaller0: entered promiscuous mode [ 408.920803][ T8585] syzkaller0: entered allmulticast mode [ 408.970941][ T8593] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 409.042963][ T8586] tipc: Resetting bearer [ 409.129175][ T8584] tipc: Resetting bearer [ 409.202878][ T8584] tipc: Disabling bearer [ 409.889143][ T8608] x_tables: duplicate underflow at hook 1 [ 410.400960][ T8617] fuse: Bad value for 'fd' [ 411.130535][ T8630] tipc: Enabled bearer , priority 0 [ 411.166633][ T8630] syzkaller0: entered promiscuous mode [ 411.187170][ T8630] syzkaller0: entered allmulticast mode [ 411.792967][ T8634] tipc: Resetting bearer [ 411.815464][ T8629] tipc: Resetting bearer [ 411.846092][ T8629] tipc: Disabling bearer [ 412.930521][ T8652] bridge0: port 3(macvlan1) entered blocking state [ 412.971990][ T8652] bridge0: port 3(macvlan1) entered disabled state [ 413.000539][ T8652] macvlan1: entered allmulticast mode [ 413.023394][ T8652] syz_tun: entered allmulticast mode [ 413.092028][ T8652] macvlan1: entered promiscuous mode [ 413.119047][ T8655] fuse: Bad value for 'fd' [ 413.141747][ T8652] bridge0: port 3(macvlan1) entered blocking state [ 413.148910][ T8652] bridge0: port 3(macvlan1) entered forwarding state [ 413.352858][ T8644] macvtap1: entered allmulticast mode [ 413.394150][ T8644] dummy0: entered allmulticast mode [ 413.424499][ T8644] dummy0: entered promiscuous mode [ 413.523688][ T8644] dummy0: left allmulticast mode [ 413.719781][ T5713] dummy0: left promiscuous mode [ 414.325871][ T8667] tipc: Enabled bearer , priority 0 [ 414.456246][ T8667] syzkaller0: entered promiscuous mode [ 414.476986][ T8667] syzkaller0: entered allmulticast mode [ 414.618774][ T8673] syzkaller0: entered promiscuous mode [ 414.663200][ T8673] syzkaller0: entered allmulticast mode [ 414.729759][ T8667] tipc: Resetting bearer [ 414.880283][ T8665] tipc: Resetting bearer [ 414.924562][ T8665] tipc: Disabling bearer [ 415.300251][ T8686] fuse: Bad value for 'fd' [ 415.514648][ T5713] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 415.697365][ T5713] usb 1-1: device descriptor read/64, error -71 [ 415.974693][ T5713] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 416.145513][ T5713] usb 1-1: device descriptor read/64, error -71 [ 416.265988][ T5713] usb usb1-port1: attempt power cycle [ 416.617523][ T5713] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 416.682858][ T5713] usb 1-1: device descriptor read/8, error -71 [ 416.938776][ T5713] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 417.005874][ T5713] usb 1-1: device descriptor read/8, error -71 [ 417.159490][ T5713] usb usb1-port1: unable to enumerate USB device [ 417.336510][ T8719] tipc: Enabled bearer , priority 0 [ 417.351169][ T8719] syzkaller0: entered promiscuous mode [ 417.357846][ T8719] syzkaller0: entered allmulticast mode [ 417.630405][ T8727] tipc: Resetting bearer [ 417.691957][ T8717] tipc: Resetting bearer [ 417.712104][ T8717] tipc: Disabling bearer [ 417.771998][ T8729] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.906699][ T8729] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.144249][ T8733] bond3 (unregistering): Released all slaves [ 418.357418][ T8729] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.629576][ T8729] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.964459][ T5713] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 419.092383][ T34] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.172826][ T1008] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.186980][ T5713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.211601][ T5713] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.233509][ T5713] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.257889][ T5713] usb 1-1: config 0 interface 0 has no altsetting 0 [ 419.268690][ T34] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.274844][ T5713] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 419.301674][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.328679][ T5713] usb 1-1: config 0 descriptor?? [ 419.354002][ T34] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.791402][ T5713] usbhid 1-1:0.0: can't add hid device: -71 [ 419.826348][ T5713] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 419.888101][ T5713] usb 1-1: USB disconnect, device number 20 [ 420.139725][ T8760] tipc: Enabled bearer , priority 0 [ 420.180695][ T8760] syzkaller0: entered promiscuous mode [ 420.214105][ T8760] syzkaller0: entered allmulticast mode [ 420.630251][ T8766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.873589][ T8758] tipc: Resetting bearer [ 420.915855][ T5713] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 420.949280][ T8758] tipc: Disabling bearer [ 421.064388][ T5713] usb 6-1: device descriptor read/64, error -71 [ 421.314677][ T5713] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 421.474597][ T5713] usb 6-1: device descriptor read/64, error -71 [ 421.605435][ T5713] usb usb6-port1: attempt power cycle [ 421.975537][ T5713] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 422.042584][ T5713] usb 6-1: device descriptor read/8, error -71 [ 422.305141][ T5713] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 422.371606][ T5713] usb 6-1: device descriptor read/8, error -71 [ 422.507877][ T5713] usb usb6-port1: unable to enumerate USB device [ 422.836028][ T8809] tipc: Enabled bearer , priority 0 [ 422.873443][ T8809] syzkaller0: entered promiscuous mode [ 422.889751][ T8809] syzkaller0: entered allmulticast mode [ 423.001153][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 423.181328][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.210800][ T9] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.230523][ T9] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.242859][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 423.258590][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 423.277930][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.313197][ T9] usb 3-1: config 0 descriptor?? [ 424.506163][ T8806] tipc: Resetting bearer [ 424.552826][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 424.561615][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 424.589250][ T9] usb 3-1: USB disconnect, device number 20 [ 424.611469][ T8806] tipc: Disabling bearer [ 425.171161][ T8832] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 426.276686][ T9] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 426.426897][ T9] usb 3-1: device descriptor read/64, error -71 [ 426.731343][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 426.918800][ T9] usb 3-1: device descriptor read/64, error -71 [ 426.995223][ T5713] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 427.046369][ T9] usb usb3-port1: attempt power cycle [ 427.170547][ T5713] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.205488][ T5713] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.244153][ T5713] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.276600][ T5713] usb 6-1: config 0 interface 0 has no altsetting 0 [ 427.292509][ T5713] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 427.314287][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.358635][ T5713] usb 6-1: config 0 descriptor?? [ 427.405794][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 427.460272][ T9] usb 3-1: device descriptor read/8, error -71 [ 427.729832][ T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 427.787661][ T9] usb 3-1: device descriptor read/8, error -71 [ 427.847150][ T5713] usbhid 6-1:0.0: can't add hid device: -71 [ 427.870641][ T5713] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 427.907458][ T8874] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 427.922790][ T5713] usb 6-1: USB disconnect, device number 11 [ 427.929462][ T9] usb usb3-port1: unable to enumerate USB device [ 428.684168][ T5713] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 428.844794][ T5713] usb 5-1: Using ep0 maxpacket: 16 [ 428.869689][ T5713] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.880927][ T5713] usb 5-1: config 0 interface 0 has no altsetting 0 [ 428.889660][ T5713] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 428.900767][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.947461][ T5713] usb 5-1: config 0 descriptor?? [ 429.017334][ T5713] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 430.816127][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 431.006414][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.033448][ T9] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.087501][ T9] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.113017][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 431.133243][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 431.147192][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.202697][ T9] usb 4-1: config 0 descriptor?? [ 431.612253][ T806] usb 5-1: USB disconnect, device number 16 [ 432.296454][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 432.350480][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 432.377923][ T9] usb 4-1: USB disconnect, device number 29 [ 432.732967][ T5597] Bluetooth: hci5: link tx timeout [ 432.738534][ T5597] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.664316][ T5713] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 433.825111][ T5713] usb 5-1: Using ep0 maxpacket: 16 [ 433.850574][ T5713] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.889450][ T5713] usb 5-1: config 0 interface 0 has no altsetting 0 [ 433.897300][ T5713] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 433.914984][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.961551][ T5713] usb 5-1: config 0 descriptor?? [ 434.041931][ T5713] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 434.681073][ T8974] bridge0: received packet on macvlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.816602][ T5599] Bluetooth: hci5: command 0x0406 tx timeout [ 436.146024][ T8987] syzkaller0: entered promiscuous mode [ 436.168695][ T8987] syzkaller0: entered allmulticast mode [ 436.645780][ T8996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1068'. [ 436.698146][ T5713] usb 5-1: USB disconnect, device number 17 [ 438.870393][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1083'. [ 439.015022][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 439.071394][ T9035] syzkaller0: entered promiscuous mode [ 439.104564][ T9035] syzkaller0: entered allmulticast mode [ 439.199404][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 439.241139][ T9] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.303295][ T9] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.333942][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 439.340881][ T9] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 439.403438][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.436971][ T9] usb 4-1: config 0 descriptor?? [ 439.958560][ T9] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 440.849099][ T9058] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1091'. [ 440.959550][ T9055] bridge0: port 3(macvlan2) entered blocking state [ 440.978499][ T9055] bridge0: port 3(macvlan2) entered disabled state [ 441.014432][ T9055] macvlan2: entered allmulticast mode [ 441.048360][ T9055] syz_tun: entered allmulticast mode [ 441.090119][ T9055] macvlan2: entered promiscuous mode [ 441.111355][ T9055] bridge0: port 3(macvlan2) entered blocking state [ 441.118660][ T9055] bridge0: port 3(macvlan2) entered forwarding state [ 441.195728][ T5684] usb 4-1: reset high-speed USB device number 30 using dummy_hcd [ 441.743308][ T9069] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1095'. [ 442.809791][ T11] usb 4-1: USB disconnect, device number 30 [ 443.531586][ T9091] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 443.636230][ T9091] syzkaller0: entered promiscuous mode [ 443.663950][ T9091] syzkaller0: entered allmulticast mode [ 444.030669][ T9108] bridge0: port 3(macvlan2) entered blocking state [ 444.074841][ T9108] bridge0: port 3(macvlan2) entered disabled state [ 444.122640][ T9108] macvlan2: entered allmulticast mode [ 444.160937][ T9108] syz_tun: entered allmulticast mode [ 444.188172][ T9108] macvlan2: entered promiscuous mode [ 444.215741][ T9108] bridge0: port 3(macvlan2) entered blocking state [ 444.223027][ T9108] bridge0: port 3(macvlan2) entered forwarding state [ 444.282616][ T9111] netlink: 'syz.4.1107': attribute type 1 has an invalid length. [ 444.339661][ T9114] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1108'. [ 444.887477][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1110'. [ 445.036074][ T5713] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 445.215037][ T5713] usb 4-1: Using ep0 maxpacket: 16 [ 445.245059][ T5713] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.274551][ T5713] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.302630][ T5713] usb 4-1: config 0 interface 0 has no altsetting 0 [ 445.333358][ T5713] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 445.376720][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.429027][ T5713] usb 4-1: config 0 descriptor?? [ 445.931356][ T5713] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 447.186012][ T5713] usb 4-1: reset high-speed USB device number 31 using dummy_hcd [ 448.198944][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1123'. [ 448.252515][ T9162] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1124'. [ 448.607904][ T5684] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 448.804207][ T5684] usb 6-1: Using ep0 maxpacket: 32 [ 448.833140][ T5684] usb 6-1: unable to get BOS descriptor or descriptor too short [ 448.876145][ T5684] usb 6-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 448.900368][ T5146] usb 4-1: USB disconnect, device number 31 [ 448.920024][ T5684] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.948512][ T5684] usb 6-1: Product: syz [ 448.968662][ T5684] usb 6-1: Manufacturer: syz [ 448.986810][ T5684] usb 6-1: SerialNumber: syz [ 449.574264][ T5684] usb 6-1: 1:1 : bogus bTerminalLink 5 [ 449.621970][ T5684] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 449.690240][ T5684] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 449.742954][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.749888][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.010447][ T5684] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 450.086413][ T5684] usb 6-1: USB disconnect, device number 12 [ 450.201202][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 450.310271][ T6062] udevd[6062]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.359734][ T9191] bridge0: port 3(macvlan2) entered blocking state [ 450.382536][ T9191] bridge0: port 3(macvlan2) entered disabled state [ 450.404426][ T9191] macvlan2: entered allmulticast mode [ 450.427490][ T9191] syz_tun: entered allmulticast mode [ 450.436975][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 450.461145][ T9] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 450.481747][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.501821][ T9191] macvlan2: entered promiscuous mode [ 450.509247][ T9] usb 4-1: config 0 has no interface number 0 [ 450.534350][ T9191] bridge0: port 3(macvlan2) entered blocking state [ 450.541515][ T9191] bridge0: port 3(macvlan2) entered forwarding state [ 450.554238][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 450.594049][ T9] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 450.637908][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 450.657339][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.689629][ T9] usb 4-1: Product: syz [ 450.708611][ T9] usb 4-1: Manufacturer: syz [ 450.733429][ T9195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1136'. [ 450.742588][ T9] usb 4-1: SerialNumber: syz [ 450.756891][ T9] usb 4-1: config 0 descriptor?? [ 450.782797][ T9189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 450.852418][ T9] asix 4-1:0.34: probe with driver asix failed with error -22 [ 451.238497][ T9203] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1140'. [ 453.040092][ T9] usb 4-1: USB disconnect, device number 32 [ 453.096620][ T5146] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 453.264465][ T5146] usb 3-1: Using ep0 maxpacket: 32 [ 453.297919][ T5146] usb 3-1: unable to get BOS descriptor or descriptor too short [ 453.341769][ T5146] usb 3-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 453.357572][ T5146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.366656][ T5146] usb 3-1: Product: syz [ 453.371069][ T5146] usb 3-1: Manufacturer: syz [ 453.376080][ T5146] usb 3-1: SerialNumber: syz [ 453.575555][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 453.670835][ T5146] usb 3-1: 1:1 : bogus bTerminalLink 5 [ 453.686934][ T5146] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 453.712871][ T5146] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 453.742295][ T9246] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1153'. [ 453.766575][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 453.786611][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.808681][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 453.820554][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 453.831427][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 453.842638][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.868956][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 453.883187][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 453.896812][ T9] usb 4-1: Manufacturer: syz [ 453.912916][ T9] usb 4-1: config 0 descriptor?? [ 454.020630][ T5146] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 454.085214][ T5146] usb 3-1: USB disconnect, device number 25 [ 454.138767][ T9202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.308059][ T6062] udevd[6062]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.664291][ T5146] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 455.824404][ T5146] usb 6-1: Using ep0 maxpacket: 16 [ 455.841368][ T5146] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 455.851734][ T5146] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.865153][ T5146] usb 6-1: config 0 has no interface number 0 [ 455.872063][ T5146] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 455.889159][ T5146] usb 6-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.929421][ T5146] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 455.944004][ T5146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.953511][ T5146] usb 6-1: Product: syz [ 455.959146][ T5146] usb 6-1: Manufacturer: syz [ 455.966443][ T5146] usb 6-1: SerialNumber: syz [ 455.978897][ T5146] usb 6-1: config 0 descriptor?? [ 455.998078][ T9263] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 456.038716][ T5146] asix 6-1:0.34: probe with driver asix failed with error -22 [ 456.829967][ T9] rc_core: IR keymap rc-hauppauge not found [ 456.861960][ T9] Registered IR keymap rc-empty [ 456.880108][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 456.915147][ T11] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 456.923402][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 456.958837][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 457.010334][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 457.063456][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.111549][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.123087][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.138066][ T11] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.159579][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.175383][ T11] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.204229][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 457.214328][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.234406][ T11] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 457.246200][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.255074][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.287178][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.297757][ T11] usb 1-1: config 0 descriptor?? [ 457.314429][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.334386][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.377053][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.386398][ T5146] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 457.425249][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.482681][ T9] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 457.529991][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 457.586574][ T5146] usb 5-1: Using ep0 maxpacket: 32 [ 457.616837][ T5146] usb 5-1: unable to get BOS descriptor or descriptor too short [ 457.623481][ T9] usb 4-1: USB disconnect, device number 33 [ 457.705163][ T5146] usb 5-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 457.727195][ T5146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.749281][ T5146] usb 5-1: Product: syz [ 457.765271][ T5146] usb 5-1: Manufacturer: syz [ 457.778913][ T5146] usb 5-1: SerialNumber: syz [ 457.793389][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'. [ 458.275005][ T5146] usb 5-1: 1:1 : bogus bTerminalLink 5 [ 458.313142][ T5146] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 458.374718][ T5146] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 458.899708][ T9] usb 6-1: USB disconnect, device number 13 [ 459.031222][ T5146] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 459.218319][ T5146] usb 5-1: USB disconnect, device number 18 [ 459.437885][ T11] usbhid 1-1:0.0: can't add hid device: -71 [ 459.480679][ T11] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 459.544598][ T11] usb 1-1: USB disconnect, device number 21 [ 459.648676][ T6062] udevd[6062]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.034065][ T11] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 462.234341][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 462.268574][ T11] usb 6-1: unable to get BOS descriptor or descriptor too short [ 462.314735][ T5146] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 462.328180][ T11] usb 6-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 462.367274][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.440539][ T11] usb 6-1: Product: syz [ 462.464846][ T11] usb 6-1: Manufacturer: syz [ 462.489978][ T11] usb 6-1: SerialNumber: syz [ 462.519158][ T5146] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.564246][ T5146] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.615081][ T5146] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.672467][ T5146] usb 3-1: config 0 interface 0 has no altsetting 0 [ 462.710949][ T5146] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 462.747182][ T5146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.820135][ T5146] usb 3-1: config 0 descriptor?? [ 462.902284][ T11] usb 6-1: 1:1 : bogus bTerminalLink 5 [ 462.937376][ T11] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 462.972931][ T11] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 463.339365][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1185'. [ 463.571652][ T11] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 463.771705][ T11] usb 6-1: USB disconnect, device number 14 [ 464.302812][ T6062] udevd[6062]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.317391][ T5146] usbhid 3-1:0.0: can't add hid device: -71 [ 464.368897][ T5146] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 464.430848][ T5146] usb 3-1: USB disconnect, device number 26 [ 465.974081][ T9381] netlink: 'syz.5.1198': attribute type 12 has an invalid length. [ 466.011696][ T9381] netlink: 'syz.5.1198': attribute type 29 has an invalid length. [ 466.052016][ T9381] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1198'. [ 466.934080][ T5146] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 467.134506][ T5146] usb 6-1: Using ep0 maxpacket: 32 [ 467.151954][ T5146] usb 6-1: unable to get BOS descriptor or descriptor too short [ 467.228828][ T5146] usb 6-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 467.293373][ T5146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.357246][ T5146] usb 6-1: Product: syz [ 467.384507][ T11] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 467.418152][ T5146] usb 6-1: Manufacturer: syz [ 467.436037][ T5146] usb 6-1: SerialNumber: syz [ 467.570894][ T11] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.595074][ T11] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.628894][ T11] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.658674][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 467.684525][ T11] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 467.714393][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.773165][ T11] usb 3-1: config 0 descriptor?? [ 467.840069][ T5146] usb 6-1: 1:1 : bogus bTerminalLink 5 [ 467.863689][ T5146] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 467.890607][ T5146] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 468.223622][ T5146] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 468.283650][ T5146] usb 6-1: USB disconnect, device number 15 [ 468.298890][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'. [ 468.470164][ T6062] udevd[6062]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.977931][ T11] usbhid 3-1:0.0: can't add hid device: -71 [ 468.986808][ T11] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 469.038674][ T11] usb 3-1: USB disconnect, device number 27 [ 472.396220][ T5146] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 472.595196][ T5146] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.625998][ T5146] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.657422][ T5146] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.683565][ T5146] usb 1-1: config 0 interface 0 has no altsetting 0 [ 472.695903][ T5146] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 472.711407][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.736758][ T5146] usb 1-1: config 0 descriptor?? [ 473.223522][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1227'. [ 473.517773][ T9475] netlink: 'syz.4.1232': attribute type 3 has an invalid length. [ 474.480815][ T5146] usbhid 1-1:0.0: can't add hid device: -71 [ 474.512222][ T5146] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 474.576975][ T5146] usb 1-1: USB disconnect, device number 22 [ 475.244064][ T5146] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 475.418400][ T5146] usb 6-1: Using ep0 maxpacket: 16 [ 475.444702][ T5146] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.482325][ T5146] usb 6-1: config 0 interface 0 has no altsetting 0 [ 475.499425][ T5146] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 475.538592][ T5146] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.591794][ T5146] usb 6-1: config 0 descriptor?? [ 476.511980][ T5146] usbhid 6-1:0.0: can't add hid device: -71 [ 476.538431][ T5146] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 476.560728][ T9514] netlink: 'syz.2.1244': attribute type 3 has an invalid length. [ 476.588563][ T5146] usb 6-1: USB disconnect, device number 16 [ 477.862216][ T9531] syzkaller0: entered promiscuous mode [ 477.873050][ T9531] syzkaller0: entered allmulticast mode [ 479.424135][ T11] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 479.665620][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 479.704665][ T11] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.759124][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 479.769465][ T11] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 479.804017][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.855296][ T11] usb 3-1: config 0 descriptor?? [ 480.757601][ T11] usbhid 3-1:0.0: can't add hid device: -71 [ 480.781302][ T11] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 480.833428][ T11] usb 3-1: USB disconnect, device number 28 [ 484.826686][ T11] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 485.026047][ T11] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 8 [ 485.084613][ T11] usb 3-1: string descriptor 0 read error: -22 [ 485.102657][ T11] usb 3-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 485.126090][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.168501][ T9600] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 485.260314][ T11] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 485.298109][ T11] usb 3-1: MIDIStreaming interface descriptor not found [ 486.016317][ T11] usb 3-1: USB disconnect, device number 29 [ 486.224457][ T5146] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 486.424347][ T5146] usb 6-1: Using ep0 maxpacket: 8 [ 486.473133][ T5146] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 486.504076][ T5146] usb 6-1: config 179 has no interface number 0 [ 486.529790][ T5146] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 486.573605][ T5146] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 486.625928][ T5146] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 486.678427][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 486.685955][ T5146] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 486.686303][ T5146] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 486.686433][ T5146] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.755847][ T9617] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 487.078529][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 487.119355][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.150864][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 487.170795][ T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 487.193139][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.234368][ T9] usb 1-1: config 0 descriptor?? [ 487.951567][ T5713] usb 6-1: USB disconnect, device number 17 [ 488.080173][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 488.099596][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 488.147631][ T9] usb 1-1: USB disconnect, device number 23 [ 490.583985][ T5713] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 490.794050][ T5713] usb 6-1: Using ep0 maxpacket: 8 [ 490.819471][ T5713] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 490.834300][ T5713] usb 6-1: config 179 has no interface number 0 [ 490.840923][ T5713] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 490.861376][ T5713] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 490.874222][ T5713] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 490.886782][ T5713] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 490.901655][ T5713] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 490.922542][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.941609][ T9687] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 491.100840][ T9640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.895079][ T5713] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 492.064372][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 492.083103][ T5713] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.110124][ T5713] usb 3-1: config 0 interface 0 has no altsetting 0 [ 492.130346][ T5713] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 492.154856][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.215045][ T5713] usb 3-1: config 0 descriptor?? [ 493.094617][ T5713] usbhid 3-1:0.0: can't add hid device: -71 [ 493.107412][ T5713] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 493.145409][ T5713] usb 3-1: USB disconnect, device number 30 [ 493.388206][ T9] usb 6-1: USB disconnect, device number 18 [ 493.754906][ T5713] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 493.961214][ T5713] usb 4-1: Using ep0 maxpacket: 16 [ 494.021194][ T5713] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.085171][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 494.140653][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 494.193857][ T5713] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 494.233482][ T5713] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.320854][ T5713] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 494.346191][ T5713] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 494.365767][ T5713] usb 4-1: Manufacturer: syz [ 494.408032][ T5713] usb 4-1: config 0 descriptor?? [ 495.347694][ T9750] syzkaller0: entered promiscuous mode [ 495.371510][ T9750] syzkaller0: entered allmulticast mode [ 496.674210][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 496.877910][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 496.932840][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 496.991153][ T9] usb 3-1: config 179 has no interface number 0 [ 497.005150][ T5713] rc_core: IR keymap rc-hauppauge not found [ 497.034170][ T5713] Registered IR keymap rc-empty [ 497.035614][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 497.064951][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 497.098797][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 497.115158][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 497.151228][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 497.180652][ T5713] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 497.203946][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 497.253635][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 497.265594][ T5713] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 497.281981][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.308049][ T9766] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 497.343651][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 497.389781][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 497.425918][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 497.481882][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 497.506478][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 497.540677][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 497.576299][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 497.611937][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 497.639856][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 497.672175][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 497.723931][ T5713] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 497.736484][ T5713] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 497.771566][ T5713] usb 4-1: USB disconnect, device number 34 [ 498.097263][ T5688] usb 3-1: USB disconnect, device number 31 [ 498.274023][ T5713] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 498.460732][ T5713] usb 4-1: Using ep0 maxpacket: 16 [ 498.500695][ T5713] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.561482][ T5713] usb 4-1: config 0 interface 0 has no altsetting 0 [ 498.600670][ T5713] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 498.647392][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.712851][ T5713] usb 4-1: config 0 descriptor?? [ 499.195945][ T9792] syzkaller0: entered promiscuous mode [ 499.225655][ T9792] syzkaller0: entered allmulticast mode [ 499.626069][ T5713] usbhid 4-1:0.0: can't add hid device: -71 [ 499.664308][ T5713] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 499.710900][ T5713] usb 4-1: USB disconnect, device number 35 [ 501.995584][ T5597] Bluetooth: hci5: link tx timeout [ 502.001268][ T5597] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 502.510416][ T9802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.014731][ T5599] Bluetooth: hci5: command 0x0406 tx timeout [ 506.473411][ T9905] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1383'. [ 506.638161][ T9910] syzkaller0: entered promiscuous mode [ 506.644613][ T9910] syzkaller0: entered allmulticast mode [ 507.498684][ T9874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 508.196073][ T9921] tipc: Enabled bearer , priority 0 [ 508.222388][ T9925] syzkaller0: entered promiscuous mode [ 508.250804][ T9925] syzkaller0: entered allmulticast mode [ 508.349851][ T9921] tipc: Resetting bearer [ 508.377959][ T9933] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 508.407907][ T9919] tipc: Resetting bearer [ 508.448420][ T9919] tipc: Disabling bearer [ 508.727549][ T9935] fuse: Unknown parameter 'group_i00000000000000000000' [ 509.060809][ T9946] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1396'. [ 511.143231][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.153221][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.462610][ T9980] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1409'. [ 512.949733][T10008] fuse: Unknown parameter 'group_i00000000000000000000' [ 514.654311][ T11] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 514.826105][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 514.865158][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.903509][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 514.963581][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 515.006002][ T11] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 515.053247][ T11] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 515.111245][ T11] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 515.161760][ T11] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 515.211834][ T11] usb 1-1: Manufacturer: syz [ 515.286954][ T11] usb 1-1: config 0 descriptor?? [ 515.822869][T10053] fuse: Unknown parameter 'group_id00000000000000000000' [ 515.875308][ T11] rc_core: IR keymap rc-hauppauge not found [ 515.893915][ T11] Registered IR keymap rc-empty [ 515.899708][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 515.934399][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 515.991292][ T11] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 516.058851][ T11] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 516.131700][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 516.215700][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 516.255444][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 516.325222][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 516.397759][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 516.461074][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 516.514187][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 516.577139][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 516.642457][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 516.694125][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 516.741672][ T11] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 516.783627][ T11] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 516.858345][ T11] usb 1-1: USB disconnect, device number 24 [ 517.732561][T10087] netlink: 'syz.4.1445': attribute type 12 has an invalid length. [ 517.775662][T10087] netlink: 'syz.4.1445': attribute type 29 has an invalid length. [ 517.858964][T10087] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1445'. [ 518.064024][ T11] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 518.247665][ T11] usb 4-1: Using ep0 maxpacket: 8 [ 518.293984][ T11] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 518.337489][ T11] usb 4-1: config 179 has no interface number 0 [ 518.366357][ T11] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 518.456663][ T11] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 518.513982][ T11] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 518.560076][ T11] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 518.594262][ T11] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 518.623987][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.662258][T10089] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 518.782404][T10100] fuse: Unknown parameter 'group_id00000000000000000000' [ 519.404700][ T5713] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 519.566763][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 519.594361][ T5713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.618884][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 519.649785][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 519.671316][ T5713] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 519.692800][ T5713] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.738578][ T5713] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 519.759963][ T5713] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 519.782402][ T5713] usb 3-1: Manufacturer: syz [ 519.802452][ T5713] usb 3-1: config 0 descriptor?? [ 520.028471][ T9] usb 4-1: USB disconnect, device number 36 [ 520.434771][ T5713] rc_core: IR keymap rc-hauppauge not found [ 520.449119][ T5713] Registered IR keymap rc-empty [ 520.472804][ T5713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 520.526008][ T5713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 520.577999][ T5713] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 520.631179][ T5713] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 520.713425][ T5713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 520.815398][ T5713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 520.845138][ T5713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 520.884685][ T5713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 520.934948][ T5713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 520.974721][ T5713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 521.004852][ T5713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 521.039240][ T5713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 521.075034][ T5713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 521.104617][ T5713] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 521.160732][ T5713] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 521.220439][ T5713] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 521.306154][ T5713] usb 3-1: USB disconnect, device number 32 [ 522.525205][ T5713] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 522.664819][T10157] fuse: Unknown parameter 'group_id00000000000000000000' [ 522.715694][ T5713] usb 4-1: Using ep0 maxpacket: 8 [ 522.745942][ T5713] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 522.794362][ T5713] usb 4-1: config 179 has no interface number 0 [ 522.827906][ T5713] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 522.881014][ T5713] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 522.919131][ T5713] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 522.977079][ T5713] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 523.018469][ T5713] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 523.053074][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.109599][T10153] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 523.915688][ T5688] usb 4-1: USB disconnect, device number 37 [ 525.148786][T10202] netlink: 'syz.3.1482': attribute type 3 has an invalid length. [ 525.177780][T10202] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1482'. [ 525.362581][T10202] netlink: 'syz.3.1482': attribute type 10 has an invalid length. [ 526.472911][T10202] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 527.119554][T10218] fuse: Bad value for 'user_id' [ 527.160393][T10218] fuse: Bad value for 'user_id' [ 530.421246][T10273] fuse: Bad value for 'user_id' [ 530.434148][T10273] fuse: Bad value for 'user_id' [ 532.459752][ T5713] IPVS: starting estimator thread 0... [ 532.554274][T10309] IPVS: using max 240 ests per chain, 12000 per kthread [ 533.916347][T10326] fuse: Bad value for 'user_id' [ 533.976082][T10326] fuse: Bad value for 'user_id' [ 535.203658][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1528'. [ 535.359435][T10343] tipc: Enabled bearer , priority 0 [ 535.410722][T10345] syzkaller0: entered promiscuous mode [ 535.470453][T10345] syzkaller0: entered allmulticast mode [ 535.651731][T10343] tipc: Resetting bearer [ 536.304866][T10342] tipc: Resetting bearer [ 536.350440][T10342] tipc: Disabling bearer [ 536.511271][ T5713] tipc: Node number set to 2786262257 [ 537.502800][T10382] fuse: Bad value for 'fd' [ 538.598736][T10398] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1545'. [ 539.012472][ T5597] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 539.024534][ T5597] CPU: 0 UID: 0 PID: 5597 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(lazy) [ 539.024664][ T5597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 539.024764][ T5597] Workqueue: hci3 hci_rx_work [ 539.024968][ T5597] Call Trace: [ 539.025024][ T5597] [ 539.025070][ T5597] __dump_stack+0x26/0x30 [ 539.025315][ T5597] dump_stack_lvl+0x14c/0x1c0 [ 539.025465][ T5597] dump_stack+0x1e/0x25 [ 539.025595][ T5597] sysfs_create_dir_ns+0x46c/0x540 [ 539.025772][ T5597] kobject_add_internal+0x1084/0x19b0 [ 539.026019][ T5597] kobject_add+0x2c1/0x410 [ 539.026192][ T5597] ? kmsan_get_metadata+0xf1/0x160 [ 539.026390][ T5597] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 539.026580][ T5597] device_add+0xa70/0x1c90 [ 539.026822][ T5597] hci_conn_add_sysfs+0x159/0x2e0 [ 539.027040][ T5597] le_conn_complete_evt+0x1de1/0x2330 [ 539.027273][ T5597] hci_le_conn_complete_evt+0x157/0x260 [ 539.027445][ T5597] hci_le_meta_evt+0x6eb/0x960 [ 539.027609][ T5597] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 539.027785][ T5597] hci_event_packet+0xb8c/0x1820 [ 539.027912][ T5597] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 539.028094][ T5597] hci_rx_work+0x8c3/0xfc0 [ 539.028229][ T5597] ? kmsan_get_metadata+0xf1/0x160 [ 539.028406][ T5597] ? __pfx_hci_rx_work+0x10/0x10 [ 539.028538][ T5597] process_scheduled_works+0xb65/0x1e40 [ 539.028773][ T5597] worker_thread+0xee4/0x1590 [ 539.028962][ T5597] kthread+0x53a/0x5f0 [ 539.029140][ T5597] ? __pfx_worker_thread+0x10/0x10 [ 539.029306][ T5597] ? __pfx_kthread+0x10/0x10 [ 539.029471][ T5597] ret_from_fork+0x20f/0x8d0 [ 539.029632][ T5597] ? __switch_to+0x573/0x7a0 [ 539.029804][ T5597] ? __pfx_kthread+0x10/0x10 [ 539.029971][ T5597] ret_from_fork_asm+0x1a/0x30 [ 539.030160][ T5597] [ 539.030329][ T5597] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 539.229612][ T5597] Bluetooth: hci3: failed to register connection device [ 539.804988][ T5713] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 539.988415][ T5713] usb 4-1: Using ep0 maxpacket: 16 [ 540.027874][ T5713] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 540.058173][ T5713] usb 4-1: config 0 has no interface number 0 [ 540.074845][ T5713] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 540.096319][ T5713] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 540.136866][ T5713] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 540.162277][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.181174][ T5713] usb 4-1: Product: syz [ 540.198312][ T5713] usb 4-1: Manufacturer: syz [ 540.212515][ T5713] usb 4-1: SerialNumber: syz [ 540.254359][ T5713] usb 4-1: config 0 descriptor?? [ 540.274796][T10411] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 540.308433][T10411] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 540.334141][ T9] page_pool_release_retry() stalled pool shutdown: id 67, 1 inflight 60 sec [ 540.625859][T10411] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 540.665094][T10411] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 540.911628][ T5713] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 540.947028][ T5713] asix 4-1:0.34: probe with driver asix failed with error -32 [ 541.585917][T10428] fuse: Bad value for 'fd' [ 541.638746][T10430] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1559'. [ 542.772234][ T9] usb 4-1: USB disconnect, device number 38 [ 543.203402][T10462] netlink: 'syz.0.1564': attribute type 3 has an invalid length. [ 543.326382][T10462] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1564'. [ 543.578280][T10456] netlink: 'syz.0.1564': attribute type 10 has an invalid length. [ 543.640733][T10456] bridge0: port 3(macvlan2) entered disabled state [ 543.648245][T10456] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.657754][T10456] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.821993][T10456] bridge0: port 3(macvlan2) entered blocking state [ 543.829187][T10456] bridge0: port 3(macvlan2) entered forwarding state [ 543.837334][T10456] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.844909][T10456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.853423][T10456] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.860999][T10456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.006531][T10475] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1571'. [ 544.018312][T10456] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 544.082103][T10478] x_tables: duplicate underflow at hook 1 [ 544.942418][T10494] fuse: Bad value for 'fd' [ 545.947209][T10515] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1584'. [ 546.281451][T10523] netlink: 'syz.5.1583': attribute type 3 has an invalid length. [ 546.318808][T10523] netlink: 666 bytes leftover after parsing attributes in process `syz.5.1583'. [ 546.561721][T10516] netlink: 'syz.5.1583': attribute type 10 has an invalid length. [ 546.605512][T10516] bridge0: port 3(macvlan2) entered disabled state [ 546.614150][T10516] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.623353][T10516] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.699640][T10525] x_tables: duplicate underflow at hook 1 [ 546.796029][T10516] bridge0: port 3(macvlan2) entered blocking state [ 546.803035][T10516] bridge0: port 3(macvlan2) entered forwarding state [ 546.811169][T10516] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.818728][T10516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.827235][T10516] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.834810][T10516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.981046][T10516] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 548.066810][T10553] fuse: Bad value for 'fd' [ 548.400453][T10561] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1596'. [ 549.830166][T10585] netlink: 'syz.4.1601': attribute type 3 has an invalid length. [ 549.908935][T10585] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1601'. [ 550.091257][T10585] netlink: 'syz.4.1601': attribute type 10 has an invalid length. [ 550.140950][T10585] bridge0: port 3(macvlan2) entered disabled state [ 550.149760][T10585] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.158137][T10585] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.350012][T10585] bridge0: port 3(macvlan2) entered blocking state [ 550.357200][T10585] bridge0: port 3(macvlan2) entered forwarding state [ 550.365411][T10585] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.372965][T10585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.381542][T10585] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.389154][T10585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.536076][ T5146] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 550.551954][T10585] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 550.746587][ T5146] usb 1-1: Using ep0 maxpacket: 16 [ 550.785196][ T5146] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 550.817555][ T5146] usb 1-1: config 0 has no interface number 0 [ 550.842680][ T5146] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 550.871450][ T5146] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 550.916544][ T5146] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 550.935922][ T5146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.956319][ T5146] usb 1-1: Product: syz [ 550.966435][ T5146] usb 1-1: Manufacturer: syz [ 551.008246][ T5146] usb 1-1: SerialNumber: syz [ 551.087260][ T5146] usb 1-1: config 0 descriptor?? [ 551.112689][T10593] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 551.167269][T10593] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 551.384533][T10607] fuse: Bad value for 'fd' [ 551.442869][T10593] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 551.475465][T10593] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 551.712516][ T5146] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 551.750843][ T5146] asix 1-1:0.34: probe with driver asix failed with error -61 [ 552.546399][T10630] tipc: Enabled bearer , priority 0 [ 552.581172][T10630] tipc: Resetting bearer [ 552.635229][T10629] tipc: Disabling bearer [ 553.146792][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 553.404727][ T5146] usb 1-1: USB disconnect, device number 25 [ 554.061029][T10650] netlink: 'syz.4.1622': attribute type 3 has an invalid length. [ 554.094438][T10650] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1622'. [ 554.277849][T10650] netlink: 'syz.4.1622': attribute type 10 has an invalid length. [ 554.305771][T10650] bridge0: port 3(macvlan2) entered disabled state [ 554.313187][T10650] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.321255][T10650] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.470091][T10665] fuse: Bad value for 'fd' [ 556.124232][ T5688] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 556.287647][ T5688] usb 5-1: Using ep0 maxpacket: 16 [ 556.313361][ T5688] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 556.344356][ T5688] usb 5-1: config 0 has no interface number 0 [ 556.369935][ T5688] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 556.405507][ T5688] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 556.479783][ T5688] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 556.501714][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.523070][ T5688] usb 5-1: Product: syz [ 556.528396][ T5688] usb 5-1: Manufacturer: syz [ 556.540800][ T5688] usb 5-1: SerialNumber: syz [ 556.608886][ T5688] usb 5-1: config 0 descriptor?? [ 556.633085][T10677] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 556.661009][T10677] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 556.972913][T10677] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 556.994675][T10677] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 557.243258][ T5688] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 557.284857][T10700] netlink: 'syz.2.1637': attribute type 3 has an invalid length. [ 557.309906][ T5688] asix 5-1:0.34: probe with driver asix failed with error -61 [ 557.334158][T10700] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1637'. [ 557.552228][T10694] netlink: 'syz.2.1637': attribute type 10 has an invalid length. [ 557.608178][T10694] bridge0: port 3(macvlan1) entered disabled state [ 557.616013][T10694] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.624512][T10694] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.831598][T10694] bridge0: port 3(macvlan1) entered blocking state [ 557.838684][T10694] bridge0: port 3(macvlan1) entered forwarding state [ 557.846747][T10694] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.854293][T10694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.862718][T10694] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.870359][T10694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.013560][T10694] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 558.427561][T10719] netlink: 'syz.5.1644': attribute type 12 has an invalid length. [ 558.446281][T10719] netlink: 'syz.5.1644': attribute type 29 has an invalid length. [ 558.480693][T10719] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1644'. [ 558.683277][T10726] fuse: Invalid rootmode [ 559.122814][ T5688] usb 5-1: USB disconnect, device number 19 [ 559.959973][T10742] tipc: Started in network mode [ 560.010886][T10742] tipc: Node identity 080211, cluster identity 4711 [ 560.062252][T10742] tipc: Enabled bearer , priority 0 [ 560.690662][T10758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1657'. [ 560.954966][T10764] netlink: 'syz.4.1656': attribute type 3 has an invalid length. [ 560.962885][T10764] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1656'. [ 561.166593][T10767] netlink: 'syz.2.1658': attribute type 1 has an invalid length. [ 561.174781][ T5688] tipc: Node number set to 134353152 [ 561.215806][T10764] netlink: 'syz.4.1656': attribute type 10 has an invalid length. [ 561.366621][T10767] 8021q: adding VLAN 0 to HW filter on device bond5 [ 561.503617][T10769] vlan1: entered allmulticast mode [ 561.550123][T10769] bond5: entered allmulticast mode [ 563.300347][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1670'. [ 563.339874][T10799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.379240][T10799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.659381][T10799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.739959][T10799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.044055][T10818] netlink: 'syz.3.1673': attribute type 3 has an invalid length. [ 564.094179][T10818] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1673'. [ 564.103136][T10807] netlink: 'syz.2.1672': attribute type 12 has an invalid length. [ 564.150178][T10807] netlink: 'syz.2.1672': attribute type 29 has an invalid length. [ 564.213521][T10807] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1672'. [ 564.298437][T10810] netlink: 'syz.3.1673': attribute type 10 has an invalid length. [ 565.938677][T10857] netlink: 'syz.3.1686': attribute type 1 has an invalid length. [ 566.268202][T10857] 8021q: adding VLAN 0 to HW filter on device bond3 [ 566.317911][T10855] netlink: 'syz.4.1685': attribute type 12 has an invalid length. [ 566.375878][T10855] netlink: 'syz.4.1685': attribute type 29 has an invalid length. [ 566.466712][T10855] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1685'. [ 566.580499][T10859] vlan3: entered allmulticast mode [ 566.602526][T10859] bond3: entered allmulticast mode [ 566.785897][T10860] bond3: (slave geneve2): making interface the new active one [ 566.810657][T10860] geneve2: entered allmulticast mode [ 566.838955][T10860] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 567.301411][T10875] netlink: 'syz.4.1689': attribute type 3 has an invalid length. [ 567.387547][T10875] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1689'. [ 567.629407][T10866] netlink: 'syz.4.1689': attribute type 10 has an invalid length. [ 568.863233][T10902] netlink: 'syz.4.1699': attribute type 12 has an invalid length. [ 568.908791][T10902] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1699'. [ 569.243946][T10908] syzkaller0: entered promiscuous mode [ 569.273958][T10908] syzkaller0: entered allmulticast mode [ 569.345017][T10909] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 569.875410][ T11] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 570.056410][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 570.079091][ T11] usb 1-1: config 0 has no interfaces? [ 570.107395][ T11] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 570.141640][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.188630][ T11] usb 1-1: config 0 descriptor?? [ 570.492751][T10916] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 570.562854][ T11] usb 1-1: USB disconnect, device number 26 [ 571.884201][ T11] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 572.085102][ T11] usb 1-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 572.117394][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 572.151789][ T11] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 572.205660][ T11] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 572.237769][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.298629][ T11] hub 1-1:1.0: bad descriptor, ignoring hub [ 572.323297][ T11] hub 1-1:1.0: probe with driver hub failed with error -5 [ 572.368433][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 572.395972][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 572.417787][ T11] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 572.560322][T10946] fuse: Bad value for 'rootmode' [ 572.600048][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.606742][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.818594][ T11] usb 1-1: USB disconnect, device number 27 [ 573.284015][ T5688] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 573.457510][ T5688] usb 3-1: Using ep0 maxpacket: 16 [ 573.488131][ T5688] usb 3-1: config 0 has no interfaces? [ 573.500872][ T5688] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 573.529609][ T5688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.592208][ T5688] usb 3-1: config 0 descriptor?? [ 573.848998][T10972] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 573.901150][ T11] usb 3-1: USB disconnect, device number 33 [ 575.480211][T11010] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1741'. [ 575.502419][T11010] netlink: 91 bytes leftover after parsing attributes in process `syz.3.1741'. [ 576.303214][ C1] vcan0: j1939_tp_rxtimer: 0xffff888018b42200: rx timeout, send abort [ 576.802900][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ab53e00: rx timeout, send abort [ 576.812007][ C1] vcan0: j1939_tp_rxtimer: 0xffff888018b42200: abort rx timeout. Force session deactivation [ 576.824599][ T11] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 576.907948][T11032] bond0: (slave bridge0): Releasing backup interface [ 576.935300][T11032] bridge0: port 3(macvlan1) entered disabled state [ 576.943378][T11032] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.951325][T11032] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.024051][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 577.079671][ T11] usb 4-1: config 0 has no interfaces? [ 577.098475][ T11] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 577.116101][T11032] team0: Port device bond0 removed [ 577.124858][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.154737][ T11] usb 4-1: config 0 descriptor?? [ 577.189033][T11032] bridge_slave_0: left allmulticast mode [ 577.225362][T11032] bridge_slave_0: left promiscuous mode [ 577.232147][T11032] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.278949][T11032] bridge_slave_1: left allmulticast mode [ 577.287338][T11032] bridge_slave_1: left promiscuous mode [ 577.306925][T11032] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.311826][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ab53e00: abort rx timeout. Force session deactivation [ 577.325486][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ab45800: rx timeout, send abort [ 577.335159][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ab45800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 577.409371][T11025] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 577.429324][T11032] bond0: (slave bond_slave_0): Releasing backup interface [ 577.451619][ T5688] usb 4-1: USB disconnect, device number 39 [ 577.558904][T11032] bond0: (slave bond_slave_1): Releasing backup interface [ 577.744258][T11032] team0: Port device team_slave_0 removed [ 577.808180][T11032] team0: Port device team_slave_1 removed [ 577.837444][T11032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.856303][T11032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.462087][T11046] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1753'. [ 578.479605][T11046] netlink: 91 bytes leftover after parsing attributes in process `syz.5.1753'. [ 578.638936][T11032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.668337][T11032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.849174][T11032] bond1: (slave geneve2): Releasing backup interface [ 578.917854][T11032] macvlan1: left allmulticast mode [ 578.923338][T11032] syz_tun: left allmulticast mode [ 578.929516][T11032] macvlan1: left promiscuous mode [ 578.935911][T11032] bridge0: port 3(macvlan1) entered disabled state [ 578.949526][T11052] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1754'. [ 580.324726][ T5688] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 580.395920][T11073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1764'. [ 580.485372][T11073] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1764'. [ 580.539035][ T5688] usb 4-1: config 0 has no interfaces? [ 580.576459][ T5688] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 580.608274][ T5688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.646839][ T5688] usb 4-1: config 0 descriptor?? [ 581.551181][ T5684] usb 4-1: USB disconnect, device number 40 [ 581.725305][ T5688] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 581.915089][ T5688] usb 1-1: Using ep0 maxpacket: 16 [ 581.937958][ T5688] usb 1-1: config 0 has no interfaces? [ 581.957975][ T5688] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 581.979778][ T5688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.011476][ T5688] usb 1-1: config 0 descriptor?? [ 582.135882][ T5146] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 582.239190][T11088] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 582.258833][ T5684] usb 1-1: USB disconnect, device number 28 [ 582.304560][ T5146] usb 3-1: Using ep0 maxpacket: 16 [ 582.319773][ T5146] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.333430][ T5146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 582.374652][ T5146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 582.415989][ T5146] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 582.451883][ T5146] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.490580][ T5146] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 582.503377][ T5146] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 582.528670][ T5146] usb 3-1: Manufacturer: syz [ 582.557019][ T5146] usb 3-1: config 0 descriptor?? [ 583.178488][ T5146] rc_core: IR keymap rc-hauppauge not found [ 583.206918][ T5146] Registered IR keymap rc-empty [ 583.231869][ T5146] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 583.287396][ T5146] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 583.355133][ T5146] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 583.378049][T11110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1777'. [ 583.415834][T11110] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1777'. [ 583.449984][ T5146] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 583.523239][ T5146] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 583.619345][ T5146] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 583.664732][ T5146] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 583.709199][ T5146] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 583.745539][ T5146] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 583.785083][ T5146] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 583.835422][ T5146] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 583.870182][ T5146] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 583.907093][ T5146] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 583.964133][ T5146] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 584.029701][ T5146] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 584.072185][ T5146] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 584.130797][ T5146] usb 3-1: USB disconnect, device number 34 [ 585.260063][ T5684] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 585.505591][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 585.544834][ T5684] usb 3-1: config 0 has no interfaces? [ 585.579179][ T5684] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 585.616499][ T5684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.650052][ T5684] usb 3-1: config 0 descriptor?? [ 585.728390][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 585.757109][ T9] usb 1-1: config 0 has no interfaces? [ 585.773869][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 585.810987][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.847200][ T9] usb 1-1: config 0 descriptor?? [ 586.112312][T11132] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 586.165175][ T5146] usb 1-1: USB disconnect, device number 29 [ 587.615271][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 587.794095][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 587.837322][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.888620][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 587.929451][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 587.972941][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 587.990002][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 588.012083][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 588.022801][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 588.081254][ T9] usb 5-1: Manufacturer: syz [ 588.111222][ T9] usb 5-1: config 0 descriptor?? [ 588.203946][ T5146] usb 3-1: USB disconnect, device number 35 [ 588.461763][T11165] syzkaller0: entered promiscuous mode [ 588.511131][T11165] syzkaller0: entered allmulticast mode [ 588.756553][ T9] rc_core: IR keymap rc-hauppauge not found [ 588.789769][ T9] Registered IR keymap rc-empty [ 588.808821][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 588.854368][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 588.910830][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 588.936835][ T5684] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 588.993316][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 589.050700][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 589.145676][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 589.166628][ T5684] usb 3-1: Using ep0 maxpacket: 16 [ 589.195741][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 589.214905][ T5688] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 589.215880][ T5684] usb 3-1: config 0 has no interfaces? [ 589.265861][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 589.286642][ T5684] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 589.320776][ T5684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.330175][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 589.372445][ T5684] usb 3-1: config 0 descriptor?? [ 589.385367][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 589.405018][ T5688] usb 4-1: Using ep0 maxpacket: 16 [ 589.429961][ T5688] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.444660][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 589.471270][ T5688] usb 4-1: config 0 interface 0 has no altsetting 0 [ 589.485044][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 589.502237][ T5688] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 589.516090][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 589.543390][ T5688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.561288][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 589.583396][ T5688] usb 4-1: config 0 descriptor?? [ 589.609702][ T9] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 589.618237][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 589.678283][T11172] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 589.711239][ T9] usb 5-1: USB disconnect, device number 20 [ 589.749007][ T5684] usb 3-1: USB disconnect, device number 36 [ 590.072130][ T5688] nzxt-smart2 0003:1E71:2009.0007: unknown main item tag 0x0 [ 590.107384][ T5688] nzxt-smart2 0003:1E71:2009.0007: unknown main item tag 0x0 [ 590.134384][ T5688] nzxt-smart2 0003:1E71:2009.0007: unknown main item tag 0x0 [ 590.196348][ T5688] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 590.277183][ C1] usb 4-1: input irq status -75 received [ 590.495101][ T5684] usb 4-1: USB disconnect, device number 41 [ 590.523400][T11189] bond0: (slave bridge0): Releasing backup interface [ 590.585736][T11189] bridge0: port 3(macvlan2) entered disabled state [ 590.594416][T11189] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.602286][T11189] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.809966][T11189] bridge_slave_0: left allmulticast mode [ 590.847494][T11189] bridge_slave_0: left promiscuous mode [ 590.868885][T11189] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.970191][T11189] bridge_slave_1: left allmulticast mode [ 590.998956][T11189] bridge_slave_1: left promiscuous mode [ 591.058137][T11189] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.130522][T11194] fido_id[11194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 591.271756][T11189] bond0: (slave bond_slave_0): Releasing backup interface [ 591.410673][T11189] bond0: (slave bond_slave_1): Releasing backup interface [ 591.603015][T11189] team0: Port device team_slave_0 removed [ 591.706329][T11189] team0: Port device team_slave_1 removed [ 591.749244][T11189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.777513][T11189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.830686][T11189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.865276][T11189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.923871][T11189] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 592.068123][T11206] tipc: Resetting bearer [ 593.244211][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 593.514283][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 593.530813][ T9] usb 3-1: config 0 has no interfaces? [ 593.544138][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 593.559418][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.592176][ T9] usb 3-1: config 0 descriptor?? [ 593.857786][T11222] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 593.890377][ T5688] usb 3-1: USB disconnect, device number 37 [ 594.054322][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 594.274381][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 594.328681][ T9] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.371063][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 594.387694][ T9] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 594.413371][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.434742][ T9] usb 4-1: config 0 descriptor?? [ 594.635282][T11246] bond0: (slave bridge0): Releasing backup interface [ 594.720585][T11246] bridge0: port 3(macvlan2) entered disabled state [ 594.728265][T11246] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.736273][T11246] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.831639][T11246] bond0: (slave team0): Releasing backup interface [ 594.928858][T11251] fuse: Unknown parameter 'user_i00000000000000000000' [ 594.958117][ T9] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 594.977842][T11246] bridge_slave_0: left allmulticast mode [ 594.995185][T11246] bridge_slave_0: left promiscuous mode [ 595.018240][T11246] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.084674][T11246] bridge_slave_1: left allmulticast mode [ 595.112681][T11246] bridge_slave_1: left promiscuous mode [ 595.177910][T11246] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.251758][T11246] bond0: (slave bond_slave_0): Releasing backup interface [ 595.279760][ T5713] usb 4-1: USB disconnect, device number 42 [ 595.391195][T11246] bond0: (slave bond_slave_1): Releasing backup interface [ 595.448029][T11246] team0: Port device team_slave_0 removed [ 595.457631][T11256] fido_id[11256]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 595.498747][T11246] team0: Port device team_slave_1 removed [ 595.541721][T11246] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 596.088450][ T5599] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 597.885486][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 598.067558][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 598.114846][ T9] usb 4-1: config 0 has no interfaces? [ 598.121395][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 598.133002][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.167682][ T9] usb 4-1: config 0 descriptor?? [ 598.250497][T11291] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 598.404773][ T5146] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 598.436027][T11286] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 598.470773][ T5688] usb 4-1: USB disconnect, device number 43 [ 598.577592][ T5146] usb 3-1: Using ep0 maxpacket: 16 [ 598.598754][ T5146] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.634017][ T5146] usb 3-1: config 0 interface 0 has no altsetting 0 [ 598.657871][ T5146] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 598.692244][ T5146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.737812][ T5146] usb 3-1: config 0 descriptor?? [ 598.926295][ T5599] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 599.352555][ T5146] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 599.684076][ T9] usb 3-1: USB disconnect, device number 38 [ 600.171186][T11316] fido_id[11316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 600.870962][T11328] tipc: Enabled bearer , priority 0 [ 601.234214][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 601.322526][T11329] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 601.347894][T11328] syzkaller0: entered promiscuous mode [ 601.378191][T11328] syzkaller0: entered allmulticast mode [ 601.431053][T11340] tipc: Resetting bearer [ 601.444610][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 601.460652][T11325] tipc: Resetting bearer [ 601.471525][ T9] usb 5-1: config 0 has no interfaces? [ 601.496848][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 601.518413][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.520604][T11325] tipc: Disabling bearer [ 601.545868][ T9] usb 5-1: config 0 descriptor?? [ 601.838671][T11334] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 601.915086][ T5146] usb 5-1: USB disconnect, device number 21 [ 602.682237][T11366] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1871'. [ 602.730444][T11363] tipc: Enabled bearer , priority 0 [ 602.796006][T11363] syzkaller0: entered promiscuous mode [ 602.819533][T11363] syzkaller0: entered allmulticast mode [ 602.955406][T11363] tipc: Resetting bearer [ 602.991979][T11361] tipc: Resetting bearer [ 603.043339][T11361] tipc: Disabling bearer [ 603.295737][ T5146] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 603.515103][ T5146] usb 5-1: config 0 has no interfaces? [ 603.564196][ T5146] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 603.619349][ T5146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.656560][ T5146] usb 5-1: config 0 descriptor?? [ 603.771491][T11381] tipc: Enabled bearer , priority 0 [ 603.819272][T11381] syzkaller0: entered promiscuous mode [ 603.828627][T11381] syzkaller0: entered allmulticast mode [ 603.926735][T11381] tipc: Resetting bearer [ 603.958590][T11380] tipc: Resetting bearer [ 604.000427][T11380] tipc: Disabling bearer [ 604.777017][T11397] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1884'. [ 604.804457][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'. [ 604.907571][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 604.999911][T11399] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1885'. [ 605.075549][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 605.099139][ T9] usb 1-1: config 0 has no interfaces? [ 605.113952][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 605.130596][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.170323][ T9] usb 1-1: config 0 descriptor?? [ 605.411262][T11393] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 605.441466][ T9] usb 1-1: USB disconnect, device number 30 [ 605.978630][T11412] tipc: Enabled bearer , priority 0 [ 605.993060][T11412] syzkaller0: entered promiscuous mode [ 605.999141][T11412] syzkaller0: entered allmulticast mode [ 606.031834][ T5684] usb 5-1: USB disconnect, device number 22 [ 606.946188][T11414] tipc: Resetting bearer [ 607.058253][T11411] tipc: Resetting bearer [ 607.144318][T11411] tipc: Disabling bearer [ 607.484357][T11432] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1897'. [ 608.215388][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059c87200: rx timeout, send abort [ 608.294879][ T5684] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 608.484663][ T5684] usb 5-1: Using ep0 maxpacket: 16 [ 608.546988][ T5684] usb 5-1: config 0 has no interfaces? [ 608.558526][ T5684] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 608.616661][ T5684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.651433][ T5684] usb 5-1: config 0 descriptor?? [ 608.721406][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053ea9400: rx timeout, send abort [ 608.730989][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059c87200: abort rx timeout. Force session deactivation [ 608.909005][T11443] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 608.995748][ T5684] usb 5-1: USB disconnect, device number 23 [ 609.229991][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053ea9400: abort rx timeout. Force session deactivation [ 609.345399][T11459] tipc: Enabled bearer , priority 0 [ 609.383412][T11459] syzkaller0: entered promiscuous mode [ 609.389629][T11459] syzkaller0: entered allmulticast mode [ 610.041197][T11463] tipc: Resetting bearer [ 610.121158][T11458] tipc: Resetting bearer [ 610.151562][T11458] tipc: Disabling bearer [ 610.358003][T11473] validate_nla: 1 callbacks suppressed [ 610.358077][T11473] netlink: 'syz.2.1914': attribute type 5 has an invalid length. [ 610.432412][T11473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1914'. [ 610.447620][T11474] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1913'. [ 611.887681][ T5684] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 612.085072][ T5684] usb 5-1: Using ep0 maxpacket: 16 [ 612.119507][ T5684] usb 5-1: config 0 has no interfaces? [ 612.153181][ T5684] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 612.185609][ T5684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.213379][ T5684] usb 5-1: config 0 descriptor?? [ 612.331409][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053ea9400: rx timeout, send abort [ 612.341420][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888053ea9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 612.492151][T11495] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 612.541822][ T5684] usb 5-1: USB disconnect, device number 24 [ 612.671648][T11513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1927'. [ 613.346185][T11511] tipc: Enabled bearer , priority 0 [ 613.380646][T11514] syzkaller0: entered promiscuous mode [ 613.387365][T11514] syzkaller0: entered allmulticast mode [ 613.677259][T11519] tipc: Resetting bearer [ 613.744707][T11519] tipc: Disabling bearer [ 613.769788][T11528] netlink: 'syz.0.1929': attribute type 5 has an invalid length. [ 613.799064][T11528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1929'. [ 614.119370][T11526] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1928'. [ 614.462866][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 614.976102][T11551] bond0: (slave bridge0): Releasing backup interface [ 615.045052][T11556] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1938'. [ 615.097280][T11551] bond0: (slave team0): Releasing backup interface [ 615.244442][T11551] bridge_slave_0: left allmulticast mode [ 615.278970][T11551] bridge_slave_0: left promiscuous mode [ 615.309993][T11551] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.468056][T11551] bridge_slave_1: left allmulticast mode [ 615.529248][T11551] bridge_slave_1: left promiscuous mode [ 615.558898][T11551] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.708247][T11551] bond0: (slave bond_slave_0): Releasing backup interface [ 615.829749][T11551] bond0: (slave bond_slave_1): Releasing backup interface [ 615.920491][T11551] team0: Port device team_slave_0 removed [ 615.982223][T11551] team0: Port device team_slave_1 removed [ 616.002469][T11551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.016431][T11551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.040555][T11551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.049815][T11551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.169796][T11551] macvlan2: left allmulticast mode [ 616.181573][T11551] macvlan2: left promiscuous mode [ 616.199710][T11551] bridge0: port 3(macvlan2) entered disabled state [ 616.217083][T11576] netlink: 'syz.0.1942': attribute type 5 has an invalid length. [ 616.227997][T11576] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1942'. [ 616.799727][T11574] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 616.895838][ T5146] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 617.075028][ T5146] usb 1-1: Using ep0 maxpacket: 16 [ 617.115658][ T5146] usb 1-1: config 0 has no interfaces? [ 617.141444][ T5146] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 617.178408][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.220926][ T5146] usb 1-1: config 0 descriptor?? [ 617.445876][T11592] gtp0: entered promiscuous mode [ 617.502997][T11579] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 617.555108][T11592] gtp0: entered allmulticast mode [ 617.608096][ T5146] usb 1-1: USB disconnect, device number 31 [ 617.652290][T11600] netlink: 'syz.2.1947': attribute type 3 has an invalid length. [ 617.715884][T11600] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1947'. [ 617.764474][T11592] team0: Port device gtp0 added [ 618.604055][ T5146] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 618.688425][T11615] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1954'. [ 618.795626][ T5146] usb 5-1: Using ep0 maxpacket: 16 [ 618.826648][ T5146] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 618.857918][ T5146] usb 5-1: config 0 has no interface number 0 [ 618.892639][ T5146] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 618.925565][ T5146] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 618.986221][ T5146] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 619.008839][ T5146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.037364][ T5146] usb 5-1: Product: syz [ 619.048183][ T5146] usb 5-1: Manufacturer: syz [ 619.063228][ T5146] usb 5-1: SerialNumber: syz [ 619.152017][ T5146] usb 5-1: config 0 descriptor?? [ 619.174348][T11611] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 619.191522][T11611] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 619.451005][T11611] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 619.494066][T11611] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 619.754795][ T5146] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 619.958343][ T5146] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 619.985523][ T5146] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 620.020122][ T5146] asix 5-1:0.34: probe with driver asix failed with error -32 [ 620.348435][T11631] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 620.901461][T11652] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1967'. [ 621.094014][ T5146] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 621.167870][T11657] netlink: 'syz.0.1965': attribute type 3 has an invalid length. [ 621.213905][T11657] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1965'. [ 621.287316][ T5146] usb 3-1: Using ep0 maxpacket: 16 [ 621.338472][ T5146] usb 3-1: config 0 has no interfaces? [ 621.379474][ T5146] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 621.417446][ T5146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.467923][ T5146] usb 3-1: config 0 descriptor?? [ 621.593391][ T5146] usb 5-1: USB disconnect, device number 25 [ 621.812859][T11646] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 621.858658][ T5688] usb 3-1: USB disconnect, device number 39 [ 623.087455][T11687] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 623.237844][T11689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.487360][T11692] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1979'. [ 623.984584][T11696] netlink: 'syz.0.1983': attribute type 1 has an invalid length. [ 624.410734][T11696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 624.562225][T11705] vlan0: entered allmulticast mode [ 624.596606][T11705] bond1: entered allmulticast mode [ 624.855648][T11708] bond1: (slave geneve2): making interface the new active one [ 624.880205][T11708] geneve2: entered allmulticast mode [ 624.905382][T11708] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 625.024005][ T5146] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 625.204157][ T5146] usb 4-1: Using ep0 maxpacket: 16 [ 625.237169][ T5146] usb 4-1: config 0 has no interfaces? [ 625.260833][ T5146] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 625.286974][ T5146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.318304][ T5146] usb 4-1: config 0 descriptor?? [ 625.599331][T11726] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 625.637749][ T5146] usb 4-1: USB disconnect, device number 44 [ 625.662277][T11739] netlink: 'syz.2.1991': attribute type 5 has an invalid length. [ 627.542305][T11769] netlink: 'syz.5.1999': attribute type 1 has an invalid length. [ 628.040005][T11769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 628.111177][T11772] vlan3: entered allmulticast mode [ 628.117502][T11772] bond1: entered allmulticast mode [ 628.352858][T11774] bond1: (slave geneve2): making interface the new active one [ 628.372602][T11774] geneve2: entered allmulticast mode [ 628.405536][T11774] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 628.481291][T11787] netlink: 'syz.0.2003': attribute type 5 has an invalid length. [ 629.229680][ T5146] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 629.414812][ T5146] usb 5-1: Using ep0 maxpacket: 16 [ 629.486439][ T5146] usb 5-1: config 0 has no interfaces? [ 629.514455][ T5146] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 629.553050][ T5146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.629994][ T5146] usb 5-1: config 0 descriptor?? [ 629.944779][T11793] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 629.987352][ T5146] usb 5-1: USB disconnect, device number 26 [ 631.019346][T11824] netlink: 'syz.2.2015': attribute type 1 has an invalid length. [ 631.355544][T11824] 8021q: adding VLAN 0 to HW filter on device bond6 [ 631.385383][T11836] netlink: 'syz.3.2018': attribute type 5 has an invalid length. [ 631.416177][T11829] vlan2: entered allmulticast mode [ 631.422037][T11829] bond6: entered allmulticast mode [ 631.621416][T11832] bond6: (slave geneve3): making interface the new active one [ 631.647871][T11832] geneve3: entered allmulticast mode [ 631.687265][T11832] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 633.803652][T11870] netlink: 'syz.4.2032': attribute type 5 has an invalid length. [ 633.988836][T11873] netlink: 'syz.0.2033': attribute type 1 has an invalid length. [ 634.035655][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.042292][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.387699][T11873] 8021q: adding VLAN 0 to HW filter on device bond2 [ 634.546432][T11874] vlan1: entered allmulticast mode [ 634.587836][T11874] bond2: entered allmulticast mode [ 635.025762][T11887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2040'. [ 636.019759][T11912] netlink: 'syz.2.2045': attribute type 5 has an invalid length. [ 636.662394][T11929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2049'. [ 636.723153][T11928] netlink: 'syz.0.2051': attribute type 1 has an invalid length. [ 636.846158][T11928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 637.021085][T11935] vlan2: entered allmulticast mode [ 637.035096][T11935] bond3: entered allmulticast mode [ 637.670814][T11954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2057'. [ 638.251086][T11963] netlink: 'syz.5.2059': attribute type 5 has an invalid length. [ 639.731973][T12002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2072'. [ 640.554865][T12016] netlink: 'syz.3.2074': attribute type 5 has an invalid length. [ 642.174987][T12058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2086'. [ 642.486441][T12067] netlink: 'syz.0.2088': attribute type 5 has an invalid length. [ 644.249136][T12083] lo: entered allmulticast mode [ 644.785359][T12044] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 645.274816][T12108] netlink: 'syz.2.2100': attribute type 5 has an invalid length. [ 648.785411][ T5146] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 648.982779][ T5146] usb 4-1: unable to get BOS descriptor or descriptor too short [ 649.012631][ T5146] usb 4-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 649.042513][ T5146] usb 4-1: config 66 interface 0 has no altsetting 0 [ 649.075691][ T5146] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 649.095699][ T5146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.116213][ T5146] usb 4-1: Product: syz [ 649.129431][ T5146] usb 4-1: Manufacturer: syz [ 649.144604][ T5146] usb 4-1: SerialNumber: syz [ 649.178206][T12172] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 649.711057][ T5146] ati_remote2 4-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint [ 649.826013][ T5146] usb 4-1: USB disconnect, device number 45 [ 650.957943][T12208] ===================================================== [ 650.965560][T12208] BUG: KMSAN: uninit-value in batadv_get_vid+0x2ce/0x3b0 [ 650.972872][T12208] batadv_get_vid+0x2ce/0x3b0 [ 650.977898][T12208] batadv_interface_tx+0x2e8/0x1dc0 [ 650.983390][T12208] dev_hard_start_xmit+0x22f/0xa80 [ 650.988932][T12208] __dev_queue_xmit+0x2990/0x5a00 [ 650.994261][T12208] __bpf_redirect+0x162e/0x1760 [ 650.999370][T12208] bpf_clone_redirect+0x4a6/0x6c0 [ 651.004716][T12208] ___bpf_prog_run+0x13e8/0xeab0 [ 651.009945][T12208] __bpf_prog_run32+0xc2/0xf0 [ 651.014932][T12208] bpf_test_run+0x846/0xdf0 [ 651.019670][T12208] bpf_prog_test_run_skb+0x2988/0x35f0 [ 651.025397][T12208] bpf_prog_test_run+0x5bb/0x9f0 [ 651.030549][T12208] __sys_bpf+0x925/0xee0 [ 651.035091][T12208] __x64_sys_bpf+0xa4/0xf0 [ 651.039713][T12208] x64_sys_call+0x13d0/0x3ea0 [ 651.044696][T12208] do_syscall_64+0x15d/0x3c0 [ 651.049465][T12208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.055671][T12208] [ 651.058079][T12208] Uninit was created at: [ 651.062579][T12208] kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 651.068891][T12208] pskb_expand_head+0x2f3/0x1a40 [ 651.074197][T12208] skb_ensure_writable+0x44e/0x510 [ 651.079537][T12208] bpf_clone_redirect+0x301/0x6c0 [ 651.084883][T12208] ___bpf_prog_run+0x13e8/0xeab0 [ 651.090018][T12208] __bpf_prog_run32+0xc2/0xf0 [ 651.095003][T12208] bpf_test_run+0x846/0xdf0 [ 651.099689][T12208] bpf_prog_test_run_skb+0x2988/0x35f0 [ 651.105429][T12208] bpf_prog_test_run+0x5bb/0x9f0 [ 651.110584][T12208] __sys_bpf+0x925/0xee0 [ 651.115124][T12208] __x64_sys_bpf+0xa4/0xf0 [ 651.119711][T12208] x64_sys_call+0x13d0/0x3ea0 [ 651.124702][T12208] do_syscall_64+0x15d/0x3c0 [ 651.129427][T12208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.135612][T12208] [ 651.138047][T12208] CPU: 1 UID: 0 PID: 12208 Comm: syz.2.2125 Not tainted syzkaller #0 PREEMPT(lazy) [ 651.147697][T12208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 651.158008][T12208] ===================================================== [ 651.165154][T12208] Disabling lock debugging due to kernel taint [ 651.171410][T12208] Kernel panic - not syncing: kmsan.panic set ... [ 651.178001][T12208] CPU: 1 UID: 0 PID: 12208 Comm: syz.2.2125 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 651.189114][T12208] Tainted: [B]=BAD_PAGE [ 651.193399][T12208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 651.203607][T12208] Call Trace: [ 651.206973][T12208] [ 651.209981][T12208] __dump_stack+0x26/0x30 [ 651.214480][T12208] dump_stack_lvl+0x50/0x1c0 [ 651.219207][T12208] ? dump_stack+0x12/0x25 [ 651.223685][T12208] dump_stack+0x1e/0x25 [ 651.227991][T12208] vpanic+0x7b4/0x1430 [ 651.232255][T12208] panic+0x15d/0x160 [ 651.236365][T12208] kmsan_report+0x31a/0x320 [ 651.241051][T12208] ? __msan_warning+0x1b/0x30 [ 651.245890][T12208] ? batadv_get_vid+0x2ce/0x3b0 [ 651.250932][T12208] ? batadv_interface_tx+0x2e8/0x1dc0 [ 651.256473][T12208] ? dev_hard_start_xmit+0x22f/0xa80 [ 651.261914][T12208] ? __dev_queue_xmit+0x2990/0x5a00 [ 651.267278][T12208] ? __bpf_redirect+0x162e/0x1760 [ 651.272477][T12208] ? bpf_clone_redirect+0x4a6/0x6c0 [ 651.277843][T12208] ? ___bpf_prog_run+0x13e8/0xeab0 [ 651.283128][T12208] ? __bpf_prog_run32+0xc2/0xf0 [ 651.288132][T12208] ? bpf_test_run+0x846/0xdf0 [ 651.292931][T12208] ? bpf_prog_test_run_skb+0x2988/0x35f0 [ 651.298705][T12208] ? bpf_prog_test_run+0x5bb/0x9f0 [ 651.303998][T12208] ? __sys_bpf+0x925/0xee0 [ 651.308571][T12208] ? __x64_sys_bpf+0xa4/0xf0 [ 651.313308][T12208] ? x64_sys_call+0x13d0/0x3ea0 [ 651.318341][T12208] ? do_syscall_64+0x15d/0x3c0 [ 651.323233][T12208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.329479][T12208] ? kmsan_get_metadata+0xf1/0x160 [ 651.334777][T12208] ? kmsan_get_metadata+0xf1/0x160 [ 651.340085][T12208] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 651.346107][T12208] ? batadv_interface_tx+0xa1/0x1dc0 [ 651.351562][T12208] ? filter_irq_stacks+0x49/0x190 [ 651.356768][T12208] ? kmsan_get_metadata+0xf1/0x160 [ 651.362062][T12208] __msan_warning+0x1b/0x30 [ 651.366716][T12208] batadv_get_vid+0x2ce/0x3b0 [ 651.371605][T12208] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 651.377641][T12208] batadv_interface_tx+0x2e8/0x1dc0 [ 651.383015][T12208] ? kmsan_report+0x310/0x320 [ 651.387855][T12208] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 651.394372][T12208] ? __pfx_batadv_interface_tx+0x10/0x10 [ 651.400187][T12208] dev_hard_start_xmit+0x22f/0xa80 [ 651.405493][T12208] __dev_queue_xmit+0x2990/0x5a00 [ 651.410698][T12208] ? skb_release_data+0x1071/0x1120 [ 651.416061][T12208] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 651.422475][T12208] ? kmsan_get_metadata+0xf1/0x160 [ 651.427796][T12208] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 651.433800][T12208] ? __dev_queue_xmit+0x2d4/0x5a00 [ 651.439126][T12208] ? pskb_expand_head+0x164b/0x1a40 [ 651.444561][T12208] __bpf_redirect+0x162e/0x1760 [ 651.449607][T12208] ? kmsan_get_metadata+0xf1/0x160 [ 651.454900][T12208] bpf_clone_redirect+0x4a6/0x6c0 [ 651.460122][T12208] ___bpf_prog_run+0x13e8/0xeab0 [ 651.465289][T12208] __bpf_prog_run32+0xc2/0xf0 [ 651.470159][T12208] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 651.476665][T12208] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 651.482647][T12208] ? __pfx___bpf_prog_run32+0x10/0x10 [ 651.488185][T12208] ? __pfx___bpf_prog_run32+0x10/0x10 [ 651.493722][T12208] bpf_test_run+0x846/0xdf0 [ 651.498361][T12208] ? csum_partial+0x424/0x480 [ 651.503251][T12208] ? kmsan_get_metadata+0xf1/0x160 [ 651.508556][T12208] ? bpf_test_run+0x2f4/0xdf0 [ 651.513431][T12208] bpf_prog_test_run_skb+0x2988/0x35f0 [ 651.519033][T12208] ? kmsan_get_metadata+0xf1/0x160 [ 651.524322][T12208] ? kmsan_get_metadata+0xf1/0x160 [ 651.529656][T12208] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 651.535669][T12208] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 651.542211][T12208] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 651.548171][T12208] bpf_prog_test_run+0x5bb/0x9f0 [ 651.553340][T12208] __sys_bpf+0x925/0xee0 [ 651.557822][T12208] __x64_sys_bpf+0xa4/0xf0 [ 651.562459][T12208] x64_sys_call+0x13d0/0x3ea0 [ 651.567300][T12208] do_syscall_64+0x15d/0x3c0 [ 651.572023][T12208] ? clear_bhb_loop+0x50/0xa0 [ 651.576864][T12208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.582940][T12208] RIP: 0033:0x7fe53599ce59 [ 651.587484][T12208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.607236][T12208] RSP: 002b:00007fe5368ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 651.615786][T12208] RAX: ffffffffffffffda RBX: 00007fe535c15fa0 RCX: 00007fe53599ce59 [ 651.623874][T12208] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 651.631977][T12208] RBP: 00007fe535a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 651.640066][T12208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.648161][T12208] R13: 00007fe535c16038 R14: 00007fe535c15fa0 R15: 00007ffdb2328908 [ 651.656272][T12208] [ 651.659534][T12208] Kernel Offset: disabled [ 651.663928][T12208] Rebooting in 86400 seconds..