last executing test programs: 3m11.769153955s ago: executing program 0 (id=557): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[], 0x10) 3m11.374249382s ago: executing program 0 (id=559): r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x82b6376ea19c0fc7) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x0, 0x1, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x49, 0x0, 0x40003, 0x0}) 3m10.85390049s ago: executing program 0 (id=560): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) sendto$inet(r0, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) 3m9.07645093s ago: executing program 0 (id=570): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200070000000500040001000000050003"], 0x44}}, 0x0) 3m8.526658306s ago: executing program 0 (id=573): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000140)="c800b66cf7e6a58cd8e0e80c86470ec8c3c0d6b06acd299df554ff6d4c46a5e948e458d6291d3aab88af945442040056972d9d82b584db7aed7075fcb4850257c7cf202122802afec235970a469a73ea4193e861993d0d14c39e25a81de895927d3a86ba369ed1c66b615488829a7502aaed5d20c90800753013f6a46fd587a882589bea59703c5619a8697ee9661140a295a65ede871662b0a5713e89f3bfff54a01fbb1a6410", 0xa7}, {&(0x7f00000029c0)="bdc99118158ffb3222a77dce29e913c7fa56753b708da3c283982b260ce5abd73c63ebd0b452b90f91943532f9d9b862c0ea33a403e4296db241fea24984873479c48ab65e8a04715da0a09b9100da082e1ef81b1b2e9c09b2cdf5c8b51d073cb8d0b31622fbdfa82a7f4098302d956b7b9603b9119bd83b0ae863bf29bfb5ff0fdec352e751f2002915b9a97ccb11880df592aa6e77c60a33c855f58eb192cbc5dedcff5f1a19734e253a03079b9396842906e486990365cb705a0e4e3f648a91bad33e1d9c1be8bc5992ede58365b3dc858c38794da48c34d24a1557e0fc43150a62c1d1225f9a51d19f1b2606972739f9e027d15be11ee570e683d0151a8698884d6c8d05afe5d5afb700e594ef8d3aa17492786b85f441597ea9f6479bd047ef6e61c8280e8a6710700b0e196bf2e6fd399c3a817b5605e594a27fc07ea2aba5430ace211fd5f561d653e54e85ddcca7620d6be2657e5fce169d4f170232d0fd3f1a3d9b599bcbe765000e5091f27dde78d0feb78d5de3b0397635d81e229ea00e5efa7052db8cffcb0290ef2b165497615dc7eafbdf5e4adfd536f2fc257fb164683216fa1ea51d22c59a2fcd654dd5475be8c62b5f15e3cc99e18fb1f646299a456d795902ba6ce70efa432ca9f50149f2fa37002c3f74506c774a25e2a0ac978bf405722480c7bf4c8b9bfbea016752c915105d5f1debfd33b2d7766c44116ad0f0952950304c5dac00ca3aa9c518b5e00daa6bbbffe7b6a4052c4f659f4144768d082048a0f92cac2b01ebabefa55058051056a172c9a9ae1823dc0abcb3748302a7ed130bd563f991304fd7955c1023b7915df60b50b6f749d38f42a65dc0789d66158826dc9c3f8762dffd884638b0a7e15edc33f70d71e6ba28ce5569ae2c23b7c71ef118e33350ee3ade0cd145124324dd051c8ba214861724a5dbdf4ebfe7cb5b5880ffe571d511fb2a4378cd7f97cf1facec9be6d8e3a26c863501eb6956c86f56de557bfcc677fa2c8c4ae3ace046b563ea1d2c10cdaf433b88b8533043ec382a41f91ecd3889d332d733560503ba0fa6edd5bd4efe1d67c1c9dd66b2e32f84ab8558ee05cf466efa964bf6f069f4fbf5c18b5aacec6555cb639957d27c2993271491d49c286bdf2beb2b7abdc43294541aeb0e838c274501b65166217b65aba77311e4cfb4b04b15039ddb45dee3d6d384f158340eabb7e85fe2c99e29677733a5c2519b8b3861cae41bf039e3225b56e1a5869387223326ecf6a700d8b66bc6eca4021c8b51ad0ecb8f05e8ae9e0ecc0486bb62f3cf91e68350db133362f9d366f2df87620bf5f04c3dedb9a14d4abb27969c3588d743cc2783920a1bf16aeb94519bf5287494ea65add2ea21e325520718ccb1d4e59a98cd9ba9dd1c33214263b61fbc00f9c698d3e9151a1b3fcc967421ce55bf34ae52e43b9c891bfed8b5c40f9b587ecc82b49711384f780f8f9a8f51f1d094803cb4233091646ac3f7b562a99955f0180e4acdad8c510a7d55d29c64fd4ce74d4d80d782b76ec33756151cda389a1e88124668091b7c32d8c5c993704597a62a1c90276e6dcbdb0834071fe19e58fe49547c0014c3d6489422761a5c6756c7db9e000c28927d41036afc500d51b19572ce23cc3d4fad112f58dd8f96531b40675c69c1401208909cb219a1687f4c9343a62642947393a5915805231ce9285af24e9b4d0db58a20b7d57097c3d6249867d4cc1260333aeb79ce9ee2a2c381af5043ea5313daf5a1e801176bea4c1da00fc3a66a12adec02f9383ecd05cba6d4249ea17822a8fde676984d955a92a366bb5ef2cab1ba34583baac450aae77ffaea53b8b6827b8e17e8656ef00b4db8488facc9ff07dd71aa2026e2d38eba66043454970221ded03d42a897cbba3135d6ba7f25b32e87bb28d3de44ebd92836b78549db24cfbbffacb7834a21827614dd1525b2db1d5ed7c0d6fef592798d8bbd5415b81657e74000dcbb3708eff98fc2a7068a2c86e557b0d65785e75f91ddd9da748574335eca12bdd7cbef736507cb8b7d5f069c85f1eb676f360bf99c8ef84a2b05080b329cfb1cc4fec775b77561bbbd32b73d4698ad7c0db6151e575d47cb8dc0c3b9600cf0563fbb43e5be4ed35c5f0e7959fc8993b0b4069d264d40ec31f547f64625e14ffbcd9f31ac8d2eb1c915ebdf65dc4a4a3031bfe3328f1b7aa98786755dbbd625c3263e15ec9f10f38ed4b866886d9c723d3b6c87bdbd229de2287964a8e4f9a5cc628a98f34bba5fcbcd2880183bf90f0ad81cb8990ff16a850c646050b8a3b90188a2538731a6033a3ae0ed5c1f340e3c52139b13520a9519c948e36c81c99ab88b609e2bcf7da3cc9ee266a2a8f1bd55ae579b053be0dc0f27de0ce4f4a88e07ec735f20f9af65ec20dd8e8faf91a3d8866a3c350b0c32e81ba5cd746860fa1f6e8e18aa529bd74dc72b1acbe27b301e93df5b2ecc7f50ffbbc95a4abb889c17785ec466d0ecd016ee59fd1267723b4834ce519600ffb62fc6204e8c618d2546c9566e1d73e183925738db6adaca72a801f1bb1bd5e820006562f894effd011fa0c983ba5627824f7699e6a998a74ff36209e0d86e4f61377828cc417d0f847454a657d3da5d326189928c1195e7f3dd0a3090649920dffe6c454a29152270a8576e764b3d75adc878d7151b8410de64c6d94d3b062c9156f2f06368eb361c73aa431ee9cc9a9a41e3c94fc0de2beac19a5eee5991d4b1f864a1034473e63365ed7a12cd3b129a5c35db0d94a01d7c6c4bd84d8757b035afc844ac498f5c492722a8ecb249e821589bf7c22c4b2836f8150008a53510efec06dd83010be258ec559bce54be8e265789e85040a16b5ff39c60bd5544aac6449b638c5cdd7a2f12142442b69ecc8a338fcdbcd47e4df5957cd5500aab6b2baf9760440e07d5e737a6c866739036a3de321da03e2d9c790fd6b6e8da189ef31010395347b588fe8faea5ee9f2741acc046f281c8ca11bf397af2cda414c68e27a87fd9b2f2e4e2c17d3bdd1d924be9f4e94baa27735f52a2673ba00666b81f344eed34d1f1a9d405a2dcc5ed4bfaba650f5979d1045d7457e03101dc0c697cc2bb477134ba83f74d4b33523a13f19f7e21e4b93f3d82f00c82a51321bfa597a6c1952bc5385a1f040f9e5f7f2e5aeb7090b5a1cb7d9d989c3abebc3fbdde02eba07f6444f6e6e1c258b42bd823d9dd8dcf6c802bf2c9380644f1a10a349a9d4e3696cc45e92f724b67fb80b605aa96e72129f33cee8052b67c50594dc2d1b4a5d85c412535786c6324957fa3a683b9f3dab22c268a38f47a1601f732f3e0365fa88d675cc7c9b4f26d9a1cb8c6e9b4e26a0d4cbbb9f0d1335d003cef9edd7072e0947fe356f0578990e81040869859e65f84eab37d658de4b23856b205b34b4f57e1e09a24757ff36bebf5f72de80795ce3596cc78419d370e83b5333cac31338ddb9af6e089d1c8fd3705db393eca05554859071bae61027ddb97eb5af3ef0bc46c0dce61ad2b487af9f150976c6e0f7ed6b1afd617bee5dd5dda65abbfb1de61f41d8d029a1143df59a788da5720e5b4f0404270e0a77b21470dbdacd5d2412fd3b0f312262f258056bfdc1ccef7d22a432b6c63659cbe23b583d7663b595f2cce73829938a8755f6902a335e4294f9c9b898d4e6c7081642d3bb4b49570bfd15eb33809e2244915e455b5c01a38c047f9cd08c826bd51532af061628d2d4f45f76a2a35e902e557a0b6dbbb2911ff3f9d69fd304b85d45ee0f3bcacb147f146a493f189649c33ac19ace6e8a9917d6df8200e379e8555a954c50e9520f917cf217c4c5577d04cddfd23dc74e96c77250fa464079fc24cbb07000000c76673852efa4cebfe6fde3d5af9293744e7d8576f93812eb44f93831bff5708b6a1bdfdb2a7a359ab1c61c2a34a255f6625c037dac521eb76f1f174e035b4f15719dc2d2625fac6682df3af738121ae4b54f326e813ed760232b2cb94777e82b375b868550963c6826aac5d8334b13252abea14cd9af12032d4e2331ba9bf8238cfcace00df7f732f2fc83690055e8e92233f2b528aa50142e9683ab6ee89505e686e56143eb7383b72254dd4e1f50bf9754f79393459ab88a07f35b1ed79ac6fceea5c81c29f759dafaa69de83993f65a522a373cb1d297ddeb235a44ba0c71f093a0bd454e7d8ec90f3f0c60c8cf7490263251cdd363c27aa2e4c19ecc2bae55b4d0ca5f2fa555f285334cc0b62b1fbaec6f770e277b178e22117940dffdc82933eba3709b8f7ada7bb7e79122c40104c6ff2947f20e5f6e22be477d687d19199b29bd1d0a5abbd3fef2879bc6ef2bc5d6e24862d41a8276aabce475fdc149e57185f34b7759ba24aadabbce50eebf1c3f38f1a05e07b8568480937e8e070e3300cdf325b9d8b3175b43cdba383b700000000000000601baa5010434db13460d35213dc469ccc31676abffa930a58483193b28281a11dd5f996dad0ab48306558a11eedbccd9153fdffe93854235dd5bf6b86e50f100be51f13d7a492382eaf24768056abd4004ec7f4968a590cba00df5133d9dd1d0e953de41ee0276f1a2599485a8f4612203f0c01ce03f4a7ebcce59bea76a22346db3387332888b814f8ecf56a8a626bdb4dac8f3ac47af5a96e000036db4641567c02510f4487a84d39271c916fe0d597b543c02808534b703e08bfc24035d8456e09fbbb05935e36582fe39d1fd319401705a705c8709620fb77ae87f3b5e529eb35cec8ab14edc58caec0a637be5e8c97e62aeb545c484695a367e7a45446137d22ea95718f95db30804baae00909b78e0e5ac39264fcfc8853fa3b26c9bc9ffee333fe367816becd009ae8bbe64724878156190e82de9adc506c6fb9dedcff6635301b92f7d7ca52ef50c80afcad17e9b702aa8514a96b236e36657190155880ba8ab8ffd533688f7512828ee9f19ac0be42b2bb7da117bab6421dad1518c0f5859d65b7c1c81eb91a8f6835a88be9ba00e13386644215b2a90bd58bc21e2de66ff3171cd07ef2509d4c386ea51cfc41e48fd914ca0e31cb8b1564b53a8b386ec13ec7c667445ae51e27537f96849223391d3b12c74d18b43a32e691abac93d1a6b347dbd755fe12fba1552657a3556ec2cba1c2db2ed9df483f38b84aff03536d4b6451e08152389fa5d1d722b2312239dda1226e789b53a1b32ef29b655eeaab8ff0e345640782c190b5ee9c61cc8ccf8b8e01eef2c1cae92f9eca566a0d751b720bbf160e7b79b15b9db0b5c59eea8bbf98f18d37819ea4022c0ea6c8de7e5376fc3e906df29cb620b8e613adea5216955b64470599c03093003e5c7a4597c0a87a07dfda77d6263d282cbd20fedf085c42f8eff07842309be6130aa8dab0af97", 0xef6}], 0x2) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) 3m8.223301774s ago: executing program 0 (id=574): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) 2m52.94230267s ago: executing program 32 (id=574): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) 7.465575833s ago: executing program 2 (id=1350): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac", 0x94, 0x5, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, &(0x7f00000008c0)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa", 0x8d}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457", 0x10}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089", 0xa6}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680", 0xd1}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.898086693s ago: executing program 2 (id=1351): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) sync() syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)}], 0x1) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 4.933514941s ago: executing program 2 (id=1356): socket$nl_generic(0x10, 0x3, 0x10) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2001, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x48) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) 4.134356247s ago: executing program 3 (id=1363): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x5e}, 0xffd3) 3.918241987s ago: executing program 5 (id=1365): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r1, {0x4}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400009c}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) unshare(0x2040400) syz_open_procfs(0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b15, 0x0) 3.708887165s ago: executing program 2 (id=1366): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x11, {{@in=@multicast1, @in=@broadcast, 0x4e22, 0xb, 0x3, 0x0, 0xa, 0x20, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x7, 0x9, 0x80}, 0x4000000, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0xa, @in=@remote, 0x34ff, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x6e}]}]}, 0xfc}}, 0x40008044) 3.474051779s ago: executing program 2 (id=1367): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, [@RTA_PRIORITY={0x8, 0x6, 0xffffffff}]}, 0x24}}, 0x4000050) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @multicast1}, 0x1dc, 0x0, 0x0, 0x0, 0xffff, &(0x7f00000001c0)='ip6erspan0\x00', 0x7f, 0x5, 0xe36c}) socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x4}}) socket$kcm(0xa, 0x3, 0x3a) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) socket$kcm(0xa, 0x2, 0x73) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/79, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) socket$unix(0x1, 0x1, 0x0) 3.471959834s ago: executing program 3 (id=1368): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d00000800030000000000080001000010000008000300000000"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2.774146934s ago: executing program 3 (id=1371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004d00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x4, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.278790469s ago: executing program 4 (id=1374): socket$unix(0x1, 0x1, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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", @ANYRES64], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 2.141490401s ago: executing program 1 (id=1375): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x24, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x3ff, {[@timestamp={0x8, 0xa, 0x1, 0x5}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) 2.12237451s ago: executing program 3 (id=1376): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.076686668s ago: executing program 4 (id=1377): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x88}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.914188339s ago: executing program 3 (id=1378): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x144, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0xd, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@dellink={0x38, 0x11, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_AF_SPEC={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 1.910784668s ago: executing program 1 (id=1379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.818729611s ago: executing program 4 (id=1380): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc004) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000489422302fd17e5ffff0800040400b2e3e1000000", 0x39}, {0x0}], 0x2) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 1.685266397s ago: executing program 1 (id=1381): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d00000800030000000000080001000010000008000300000000"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1.635990547s ago: executing program 4 (id=1382): socket$nl_generic(0x10, 0x3, 0x10) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2001, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) 1.569457535s ago: executing program 1 (id=1383): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x144, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0xd, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@dellink={0x38, 0x11, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_AF_SPEC={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 1.53805079s ago: executing program 3 (id=1384): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_disconnect(r1) 1.453232873s ago: executing program 2 (id=1385): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) sync() syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 1.035968598s ago: executing program 5 (id=1386): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x3c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 801.898682ms ago: executing program 5 (id=1387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x21e}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 754.995832ms ago: executing program 1 (id=1388): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2000}) accept4(r0, 0x0, 0x0, 0x0) 570.485128ms ago: executing program 5 (id=1389): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x40) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x8001, {{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x88) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00'}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 373.665611ms ago: executing program 4 (id=1390): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x88}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 265.324605ms ago: executing program 1 (id=1391): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="0a0003"], 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 229.813466ms ago: executing program 5 (id=1392): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t'], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYBLOB="2b03000010000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) 122.678907ms ago: executing program 4 (id=1393): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d000008000300000000000800010000100000080003000000000008"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 0s ago: executing program 5 (id=1394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000804) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) kernel console output (not intermixed with test programs): [ 163.959063][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.994898][ T11] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 164.055081][ T11] usb 5-1: media controller created [ 164.370055][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.842727][ T11] usb 5-1: selecting invalid altsetting 3 [ 164.871423][ T11] ttusb2: set interface to alts=3 failed [ 165.011800][ T11] DVB: Unable to find symbol tda10086_attach() [ 165.037129][ T11] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 165.069777][ T11] dvb-usb: bulk message failed: -22 (4/0) [ 165.087375][ T11] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 165.118003][ T11] dvb-usb: bulk message failed: -22 (5/0) [ 165.144973][ T11] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 165.176905][ T11] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 165.321832][ T11] usb 5-1: USB disconnect, device number 5 [ 165.578631][ T11] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 166.501784][ T42] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 166.788805][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 166.806646][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.854043][ T42] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 166.882561][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.952389][ T42] usb 5-1: config 0 descriptor?? [ 167.013476][ T42] hub 5-1:0.0: bad descriptor, ignoring hub [ 167.051609][ T42] hub 5-1:0.0: probe with driver hub failed with error -5 [ 167.127254][ T42] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 168.191713][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.235433][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.630614][ T42] usb 5-1: USB disconnect, device number 6 [ 171.489922][ T7178] netlink: 'syz.2.550': attribute type 4 has an invalid length. [ 174.803276][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'. [ 174.827424][ T7138] syzkaller0: entered promiscuous mode [ 174.879891][ T7138] syzkaller0: entered allmulticast mode [ 176.061327][ T7194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.553'. [ 176.380892][ T5719] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 176.635241][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 176.664266][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.742726][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.814191][ T5719] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 176.899759][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.005839][ T5719] usb 3-1: config 0 descriptor?? [ 177.087782][ T5719] hub 3-1:0.0: USB hub found [ 177.343553][ T5719] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 177.428956][ T5719] usbhid 3-1:0.0: can't add hid device: -71 [ 177.468838][ T5719] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 177.827947][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 178.038207][ T5719] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 178.213606][ T7225] syzkaller0: entered promiscuous mode [ 178.265544][ T7225] syzkaller0: entered allmulticast mode [ 178.622253][ T5719] usb 3-1: USB disconnect, device number 6 [ 178.631632][ T7234] syzkaller0: entered promiscuous mode [ 178.686861][ T7234] syzkaller0: entered allmulticast mode [ 179.171725][ T5719] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 179.335388][ T29] audit: type=1326 audit(1783177867.035:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.3.568" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f687ad9de59 code=0x0 [ 179.391643][ T5719] usb 2-1: Using ep0 maxpacket: 8 [ 179.435577][ T5719] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.497918][ T5719] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 179.559621][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.614899][ T5719] usb 2-1: config 0 descriptor?? [ 179.640934][ T5719] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 180.869525][ T5709] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 181.110638][ T5709] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 181.128377][ T5719] gspca_vc032x: reg_w err -71 [ 181.163066][ T5709] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.236735][ T5709] usb 3-1: config 0 has no interfaces? [ 181.249949][ T5719] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 181.307301][ T5709] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 181.364570][ T5719] usb 2-1: USB disconnect, device number 8 [ 181.413062][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.513237][ T5709] usb 3-1: config 0 descriptor?? [ 181.541432][ T7278] syzkaller0: entered promiscuous mode [ 181.560455][ T7278] syzkaller0: entered allmulticast mode [ 182.411363][ T7282] syzkaller0: entered promiscuous mode [ 182.426863][ T7282] syzkaller0: entered allmulticast mode [ 183.241516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 183.701696][ T5710] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 183.977727][ T5710] usb 2-1: Using ep0 maxpacket: 32 [ 184.028112][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.117132][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.173000][ T5710] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 184.255687][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.338826][ T5710] usb 2-1: config 0 descriptor?? [ 184.454763][ T5710] hub 2-1:0.0: USB hub found [ 184.687855][ T5710] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 184.948147][ T5710] usbhid 2-1:0.0: can't add hid device: -71 [ 185.012285][ T5710] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 185.315416][ T5710] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 186.032097][ T5710] usb 2-1: USB disconnect, device number 9 [ 186.705885][ T5709] usb 3-1: string descriptor 0 read error: -32 [ 186.994998][ T24] usb 3-1: USB disconnect, device number 7 [ 187.497912][ T7335] syzkaller0: entered promiscuous mode [ 187.552756][ T7335] syzkaller0: entered allmulticast mode [ 187.674111][ T7347] syzkaller0: entered promiscuous mode [ 187.732738][ T7347] syzkaller0: entered allmulticast mode [ 188.802664][ T7359] tipc: Enabled bearer , priority 0 [ 189.131067][ T7358] tipc: Disabling bearer [ 190.283804][ T5709] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 190.505039][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 190.556081][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.614295][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.685013][ T5709] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 190.748074][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.828513][ T5709] usb 4-1: config 0 descriptor?? [ 190.883596][ T5709] hub 4-1:0.0: USB hub found [ 191.121660][ T5709] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 191.217725][ T5709] usbhid 4-1:0.0: can't add hid device: -71 [ 191.284407][ T5709] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 191.532441][ T7396] syzkaller0: entered promiscuous mode [ 191.565249][ T7396] syzkaller0: entered allmulticast mode [ 191.674878][ T5709] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 192.372035][ T24] usb 4-1: USB disconnect, device number 5 [ 192.770454][ T7411] tipc: Enabled bearer , priority 0 [ 192.922002][ T7410] tipc: Disabling bearer [ 193.487897][ T7421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.497909][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 193.560164][ T7424] netlink: 'syz.1.615': attribute type 10 has an invalid length. [ 193.626366][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 194.148368][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.169635][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.243108][ T5718] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 196.538107][ T4941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 196.539957][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 196.593528][ T4941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 196.631991][ T4941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.687707][ T4941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.703744][ T4941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 196.788091][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.813696][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.839178][ T5718] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 196.851185][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.900689][ T5718] usb 5-1: config 0 descriptor?? [ 196.947620][ T5718] hub 5-1:0.0: USB hub found [ 197.214690][ T5718] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 197.330536][ T5718] usbhid 5-1:0.0: can't add hid device: -71 [ 197.412078][ T7467] syzkaller1: entered promiscuous mode [ 197.413729][ T5718] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 197.492231][ T7467] syzkaller1: entered allmulticast mode [ 197.747745][ T5718] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 198.362737][ T24] usb 5-1: USB disconnect, device number 7 [ 198.853685][ T5633] Bluetooth: hci5: command tx timeout [ 199.336813][ T145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.724820][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 199.928821][ T145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.003167][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 200.052027][ T9] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 200.095914][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.149609][ T9] usb 5-1: Product: syz [ 200.171388][ T9] usb 5-1: Manufacturer: syz [ 200.193592][ T9] usb 5-1: SerialNumber: syz [ 200.235635][ T9] usb 5-1: config 0 descriptor?? [ 200.453446][ T7485] : entered promiscuous mode [ 200.747070][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 200.924597][ T5638] Bluetooth: hci5: command tx timeout [ 201.013024][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.135629][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 201.184605][ T9] usb 5-1: media controller created [ 201.216952][ T145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.335212][ T5638] Bluetooth: hci4: command 0x0406 tx timeout [ 201.367697][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 201.388088][ T5638] Bluetooth: hci0: command 0x0406 tx timeout [ 201.411122][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 201.487716][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.721390][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 201.892930][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 201.921989][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 202.011050][ T9] usb 5-1: USB disconnect, device number 8 [ 202.497870][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 202.554981][ T145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.001693][ T5633] Bluetooth: hci5: command tx timeout [ 203.646366][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 203.861668][ T24] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 203.930275][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 203.985831][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.023792][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 204.023827][ T24] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.023902][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 204.023928][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.252982][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 204.306776][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.347493][ T7464] bridge_slave_0: entered allmulticast mode [ 204.402427][ T7464] bridge_slave_0: entered promiscuous mode [ 204.428946][ T24] usb 5-1: invalid MIDI out EP 0 [ 204.757158][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.766687][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.815139][ T7464] bridge_slave_1: entered allmulticast mode [ 204.978642][ T7464] bridge_slave_1: entered promiscuous mode [ 204.999454][ T7510] syzkaller1: entered promiscuous mode [ 205.029705][ T7510] syzkaller1: entered allmulticast mode [ 205.084110][ T5633] Bluetooth: hci5: command tx timeout [ 205.981513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 206.216053][ T7464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.176809][ T7464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.240581][ T24] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 207.482902][ T24] usb 5-1: USB disconnect, device number 9 [ 208.058596][ T145] bridge_slave_1: left allmulticast mode [ 208.079464][ T145] bridge_slave_1: left promiscuous mode [ 208.133147][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.776371][ T145] bridge_slave_0: left allmulticast mode [ 208.856104][ T145] bridge_slave_0: left promiscuous mode [ 208.942726][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.939496][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.985356][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.010095][ T145] bond0 (unregistering): Released all slaves [ 211.037307][ T7464] team0: Port device team_slave_0 added [ 211.105921][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 211.168472][ T7564] syzkaller1: entered promiscuous mode [ 211.205294][ T7564] syzkaller1: entered allmulticast mode [ 211.234135][ T7464] team0: Port device team_slave_1 added [ 211.562817][ T145] tipc: Left network mode [ 211.673330][ T7464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.685753][ T7464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.754683][ T7464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.774908][ T7464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.792373][ T7464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.885182][ T7464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.141707][ T7575] netlink: 68 bytes leftover after parsing attributes in process `syz.2.652'. [ 212.812317][ T7464] hsr_slave_0: entered promiscuous mode [ 212.848182][ T7464] hsr_slave_1: entered promiscuous mode [ 212.884078][ T7464] debugfs: 'hsr0' already exists in 'hsr' [ 212.929530][ T7464] Cannot create hsr debugfs directory [ 212.965295][ T7590] syzkaller0: entered promiscuous mode [ 212.993225][ T7590] syzkaller0: entered allmulticast mode [ 213.692493][ T7601] syzkaller0: entered promiscuous mode [ 213.722721][ T7601] syzkaller0: entered allmulticast mode [ 213.797186][ T7595] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 213.816749][ T7595] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 213.976072][ T7595] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.025664][ T7595] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 214.052682][ T7609] syzkaller1: entered promiscuous mode [ 214.080991][ T7609] syzkaller1: entered allmulticast mode [ 214.313337][ T7595] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.343274][ T7595] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 214.629582][ T7595] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 214.638276][ T7595] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 214.746051][ T7595] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 214.762275][ T7595] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 214.831802][ T7619] netlink: 'syz.1.663': attribute type 1 has an invalid length. [ 214.958198][ T7623] netlink: 68 bytes leftover after parsing attributes in process `syz.4.665'. [ 215.052258][ T7619] bond0: entered promiscuous mode [ 215.068020][ T7619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.097138][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 215.130287][ T7626] netlink: 'syz.2.664': attribute type 10 has an invalid length. [ 215.143738][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 215.405301][ T7621] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 215.429969][ T7621] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 215.451369][ T7621] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 215.546138][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 215.736703][ T145] hsr_slave_0: left promiscuous mode [ 215.791598][ T145] hsr_slave_1: left promiscuous mode [ 215.853060][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.886098][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.908727][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.919151][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.030445][ T145] batadv0: left allmulticast mode [ 216.046830][ T145] batadv0: left promiscuous mode [ 216.068498][ T145] veth1_macvtap: left promiscuous mode [ 216.092973][ T145] veth0_macvtap: left promiscuous mode [ 216.107471][ T145] veth1_vlan: left promiscuous mode [ 216.129551][ T145] veth0_vlan: left promiscuous mode [ 216.380051][ T7646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.735113][ T145] team0 (unregistering): Port device team_slave_1 removed [ 217.827672][ T145] team0 (unregistering): Port device team_slave_0 removed [ 217.878259][ T7662] hub 8-0:1.0: USB hub found [ 217.909742][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 217.923162][ T7662] hub 8-0:1.0: 1 port detected [ 217.941703][ T7664] netlink: 'syz.3.678': attribute type 10 has an invalid length. [ 217.955382][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.678'. [ 219.933398][ T7464] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.039457][ T7464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.108674][ T7464] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.305108][ T7464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.345916][ T7464] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.456260][ T7464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.539334][ T7464] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 220.651400][ T7464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.002430][ T7697] syzkaller0: entered promiscuous mode [ 221.048646][ T7697] syzkaller0: entered allmulticast mode [ 221.834657][ T7704] netlink: 232 bytes leftover after parsing attributes in process `syz.4.687'. [ 222.032985][ T7464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.272673][ T7464] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.388344][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.399380][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.653464][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.672411][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.897018][ T7714] syzkaller0: entered promiscuous mode [ 222.924261][ T7714] syzkaller0: entered allmulticast mode [ 222.990231][ T7715] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 223.113674][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 223.960273][ T7464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.019078][ T7736] process 'syz.3.697' launched './file1' with NULL argv: empty string added [ 224.577849][ T7464] veth0_vlan: entered promiscuous mode [ 224.722026][ T7464] veth1_vlan: entered promiscuous mode [ 225.076250][ T7464] veth0_macvtap: entered promiscuous mode [ 225.180927][ T7464] veth1_macvtap: entered promiscuous mode [ 225.377483][ T7464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.554784][ T7464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.738409][ T145] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.791952][ T145] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.869883][ T145] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.989455][ T145] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.689825][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.772470][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.772479][ T7770] netlink: 'syz.3.706': attribute type 12 has an invalid length. [ 226.772502][ T7770] netlink: 'syz.3.706': attribute type 29 has an invalid length. [ 226.829464][ T7770] netlink: 148 bytes leftover after parsing attributes in process `syz.3.706'. [ 226.881070][ T7770] netlink: 'syz.3.706': attribute type 3 has an invalid length. [ 226.913353][ T7770] netlink: 'syz.3.706': attribute type 2 has an invalid length. [ 226.933759][ T7770] netlink: 35 bytes leftover after parsing attributes in process `syz.3.706'. [ 227.040936][ T7772] netlink: 'syz.3.706': attribute type 12 has an invalid length. [ 227.103698][ T7772] netlink: 'syz.3.706': attribute type 29 has an invalid length. [ 227.151393][ T7772] netlink: 148 bytes leftover after parsing attributes in process `syz.3.706'. [ 227.190211][ T7772] netlink: 'syz.3.706': attribute type 3 has an invalid length. [ 227.228779][ T7772] netlink: 'syz.3.706': attribute type 2 has an invalid length. [ 227.286968][ T7772] netlink: 35 bytes leftover after parsing attributes in process `syz.3.706'. [ 227.505706][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.593152][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.323033][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 230.191921][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 230.395280][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 230.465224][ T9] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 230.552212][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.631635][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.661032][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.703019][ T9] usb 6-1: Product: syz [ 230.719813][ T9] usb 6-1: Manufacturer: syz [ 230.757114][ T9] usb 6-1: SerialNumber: syz [ 230.851092][ T9] usb 6-1: 0:2 : does not exist [ 231.100005][ T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 231.551354][ T9] usb 6-1: USB disconnect, device number 2 [ 231.913011][ T7185] udevd[7185]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.774392][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.785967][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.952657][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 233.156452][ T9] usb 5-1: config 127 has an invalid interface number: 138 but max is 0 [ 233.220485][ T9] usb 5-1: config 127 has no interface number 0 [ 233.271135][ T9] usb 5-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 233.326837][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 233.350235][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.373629][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.393523][ T9] usb 5-1: Product: syz [ 233.404039][ T9] usb 5-1: Manufacturer: syz [ 233.438064][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.449991][ T9] usb 5-1: SerialNumber: syz [ 233.473836][ T7850] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 233.730199][ T7844] tipc: Resetting bearer [ 234.398095][ T14] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.439697][ T14] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.495834][ T14] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.522941][ T14] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.817397][ T9] usb 5-1: probing VID:PID(0424:012C) [ 235.936803][ T9] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0F [ 236.010952][ T9] usb 5-1: vub300 testing BULK OUT EndPoint(1) 0C [ 236.033477][ T9] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 236.069681][ T9] vub300 5-1:127.138: probe with driver vub300 failed with error -22 [ 236.101082][ T9] usb 5-1: USB disconnect, device number 10 [ 238.004212][ T7932] syzkaller1: entered promiscuous mode [ 238.024280][ T7932] syzkaller1: entered allmulticast mode [ 239.565877][ T7949] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 239.643881][ T7949] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 240.817186][ T7972] syzkaller1: entered promiscuous mode [ 240.874807][ T7972] syzkaller1: entered allmulticast mode [ 243.679540][ T8024] syzkaller0: entered promiscuous mode [ 243.755984][ T8024] syzkaller0: entered allmulticast mode [ 244.469072][ T8030] syzkaller1: entered promiscuous mode [ 244.514579][ T8030] syzkaller1: entered allmulticast mode [ 245.324773][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 245.437710][ T8059] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 245.507735][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.799'. [ 246.085661][ T8072] syzkaller0: entered promiscuous mode [ 246.114338][ T8072] syzkaller0: entered allmulticast mode [ 246.482023][ T5710] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 246.655257][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 246.696079][ T5710] usb 3-1: config 5 has an invalid interface number: 52 but max is 1 [ 246.741924][ T5710] usb 3-1: config 5 has an invalid interface number: 4 but max is 1 [ 246.765415][ T5710] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 246.795047][ T5710] usb 3-1: config 5 has no interface number 0 [ 246.821264][ T5710] usb 3-1: config 5 has no interface number 1 [ 246.843826][ T5710] usb 3-1: config 5 interface 52 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.894406][ T5710] usb 3-1: config 5 interface 4 altsetting 9 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.923758][ T5710] usb 3-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 246.928787][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 246.981133][ T5710] usb 3-1: config 5 interface 52 has no altsetting 0 [ 247.019456][ T5710] usb 3-1: config 5 interface 4 has no altsetting 0 [ 247.019471][ T8099] netlink: 'syz.4.812': attribute type 10 has an invalid length. [ 247.019493][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.812'. [ 247.080367][ T5710] usb 3-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 247.095532][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.110856][ T5710] usb 3-1: Product: syz [ 247.145132][ T5710] usb 3-1: Manufacturer: syz [ 247.151588][ T5710] usb 3-1: SerialNumber: syz [ 247.389688][ T5710] cytherm 3-1:5.52: Cypress thermometer device now attached [ 247.463161][ T5710] cytherm 3-1:5.4: Cypress thermometer device now attached [ 247.531798][ T5710] usb 3-1: USB disconnect, device number 8 [ 247.607403][ T5710] cytherm 3-1:5.52: Cypress thermometer now disconnected [ 247.655980][ T5710] cytherm 3-1:5.4: Cypress thermometer now disconnected [ 247.864206][ T8114] tipc: Enabled bearer , priority 0 [ 247.925902][ T8119] syzkaller0: entered promiscuous mode [ 247.967096][ T8119] syzkaller0: entered allmulticast mode [ 248.129042][ T8114] tipc: Resetting bearer [ 248.201335][ T8113] tipc: Resetting bearer [ 248.302513][ T8113] tipc: Disabling bearer [ 248.353191][ T5709] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 248.574359][ T5709] usb 6-1: Using ep0 maxpacket: 16 [ 248.619425][ T5709] usb 6-1: config 66 has too many interfaces: 235, using maximum allowed: 32 [ 248.666555][ T5709] usb 6-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 248.727219][ T5709] usb 6-1: config 66 has 1 interface, different from the descriptor's value: 235 [ 248.788914][ T5709] usb 6-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 248.836538][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.859351][ T5709] usb 6-1: Product: syz [ 248.870120][ T8145] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 248.883857][ T5709] usb 6-1: Manufacturer: syz [ 248.889757][ T5709] usb 6-1: SerialNumber: syz [ 249.250421][ T5709] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 249.330225][ T5709] dvb_usb_af9015 6-1:66.0: probe with driver dvb_usb_af9015 failed with error -22 [ 249.462317][ T5709] usb 6-1: USB disconnect, device number 3 [ 250.671606][ T5710] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 250.843936][ T5710] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.897415][ T5710] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.956685][ T5710] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 250.992832][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.036007][ T5710] usb 6-1: Product: syz [ 251.097748][ T5710] usb 6-1: Manufacturer: syz [ 251.135009][ T5710] usb 6-1: SerialNumber: syz [ 251.476018][ T5710] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 251.634981][ T5710] usb 6-1: USB disconnect, device number 4 [ 252.454188][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.846'. [ 252.464741][ T8206] netlink: 'syz.5.846': attribute type 10 has an invalid length. [ 252.475870][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.846'. [ 252.583353][ T5709] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 252.791971][ T5709] usb 2-1: Using ep0 maxpacket: 8 [ 252.804335][ T5709] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 252.816383][ T5709] usb 2-1: config 179 has no interface number 0 [ 252.824288][ T5709] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 252.840640][ T5709] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 252.857388][ T5709] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 252.871022][ T5709] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 252.885753][ T5709] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 252.925368][ T5709] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 252.948733][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.987066][ T8201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 255.624282][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.631154][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.499153][ T24] usb 2-1: USB disconnect, device number 10 [ 257.514101][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 257.514187][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 258.130602][ T8229] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 258.181586][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 258.344247][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 258.354961][ T9] usb 3-1: config 66 has too many interfaces: 235, using maximum allowed: 32 [ 258.382437][ T9] usb 3-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 258.396662][ T9] usb 3-1: config 66 has 1 interface, different from the descriptor's value: 235 [ 258.413390][ T5709] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 258.440147][ T9] usb 3-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 258.451567][ T11] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 258.482082][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.509691][ T9] usb 3-1: Product: syz [ 258.523951][ T9] usb 3-1: Manufacturer: syz [ 258.548294][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.858'. [ 258.560329][ T9] usb 3-1: SerialNumber: syz [ 258.568029][ T8237] netlink: 'syz.5.858': attribute type 10 has an invalid length. [ 258.585200][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.858'. [ 258.605967][ T5709] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.632668][ T5709] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.641882][ T11] usb 4-1: device descriptor read/64, error -71 [ 258.658163][ T5709] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 258.670577][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.689591][ T5709] usb 2-1: Product: syz [ 258.695746][ T5709] usb 2-1: Manufacturer: syz [ 258.701973][ T5709] usb 2-1: SerialNumber: syz [ 258.810998][ T9] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 258.829891][ T9] dvb_usb_af9015 3-1:66.0: probe with driver dvb_usb_af9015 failed with error -22 [ 258.885195][ T9] usb 3-1: USB disconnect, device number 9 [ 258.931591][ T11] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 259.082262][ T11] usb 4-1: device descriptor read/64, error -71 [ 259.217441][ T11] usb usb4-port1: attempt power cycle [ 259.617583][ T11] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 259.676058][ T11] usb 4-1: device descriptor read/8, error -71 [ 259.843005][ T5709] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 259.895168][ T5709] usb 2-1: USB disconnect, device number 11 [ 259.931606][ T11] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 260.019462][ T11] usb 4-1: device descriptor read/8, error -71 [ 260.142170][ T11] usb usb4-port1: unable to enumerate USB device [ 262.256421][ T8274] netlink: 24 bytes leftover after parsing attributes in process `syz.5.874'. [ 263.121649][ T5709] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 263.404705][ T5709] usb 2-1: config 0 has an invalid descriptor of length 89, skipping remainder of the config [ 263.454343][ T5709] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 263.487513][ T5709] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.519228][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 263.594484][ T5709] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 263.661170][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.680938][ T5709] usb 2-1: Product: syz [ 263.693716][ T5709] usb 2-1: Manufacturer: syz [ 263.703402][ T5709] usb 2-1: SerialNumber: syz [ 263.822809][ T5709] usb 2-1: config 0 descriptor?? [ 263.860411][ T5709] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 264.112117][ T5709] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 264.156885][ T5709] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 264.174985][ T5709] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 265.384696][ T24] usb 2-1: USB disconnect, device number 12 [ 267.918525][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.5.885'. [ 268.417124][ T8318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.563623][ T5719] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 268.679240][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.889'. [ 268.699049][ T8324] netlink: 248 bytes leftover after parsing attributes in process `syz.1.891'. [ 268.764357][ T5719] usb 6-1: Using ep0 maxpacket: 16 [ 268.814718][ T5719] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 268.863827][ T5719] usb 6-1: config 0 interface 0 has no altsetting 0 [ 268.904188][ T5719] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 268.965606][ T5719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.048491][ T5719] usb 6-1: config 0 descriptor?? [ 269.177150][ T8334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.896'. [ 269.337361][ T5719] usbhid 6-1:0.0: can't add hid device: -71 [ 269.361156][ T5719] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 269.416819][ T5719] usb 6-1: USB disconnect, device number 5 [ 269.648557][ T8345] netlink: 'syz.4.901': attribute type 12 has an invalid length. [ 269.658817][ T8345] netlink: 'syz.4.901': attribute type 29 has an invalid length. [ 269.672292][ T8345] netlink: 148 bytes leftover after parsing attributes in process `syz.4.901'. [ 269.690186][ T8345] netlink: 59 bytes leftover after parsing attributes in process `syz.4.901'. [ 269.808347][ T8349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.959944][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.903'. [ 275.941677][ T8351] tipc: Enabling of bearer rejected, failed to enable media [ 277.041207][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.915'. [ 278.250170][ T8406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.921'. [ 278.868858][ T8412] syzkaller0: entered promiscuous mode [ 278.899536][ T8412] syzkaller0: entered allmulticast mode [ 279.531719][ T5719] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 279.722545][ T5719] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 279.761023][ T5719] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.799425][ T5719] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.844588][ T5719] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.873259][ T5719] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.928230][ T5719] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.999403][ T5719] usb 6-1: config 0 interface 0 has no altsetting 0 [ 280.043667][ T5719] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.087256][ T5719] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.125159][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'. [ 280.159507][ T5719] usb 6-1: config 0 interface 0 has no altsetting 0 [ 280.209516][ T5719] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.268854][ T5719] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.314199][ T5719] usb 6-1: config 0 interface 0 has no altsetting 0 [ 280.349479][ T5719] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.389085][ T5719] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.427091][ T5719] usb 6-1: config 0 interface 0 has no altsetting 0 [ 280.450330][ T5719] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.487663][ T5719] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.536779][ T5719] usb 6-1: config 0 interface 0 has no altsetting 0 [ 280.580361][ T5719] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.622732][ T5719] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.698212][ T5719] usb 6-1: config 0 interface 0 has no altsetting 0 [ 280.754434][ T5719] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.811003][ T8432] netlink: 40 bytes leftover after parsing attributes in process `syz.3.932'. [ 280.871067][ T5719] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.957511][ T5719] usb 6-1: config 0 interface 0 has no altsetting 0 [ 281.003648][ T5719] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 281.035825][ T5719] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 281.125800][ T5719] usb 6-1: Product: syz [ 281.151022][ T5719] usb 6-1: Manufacturer: syz [ 281.175720][ T5719] usb 6-1: SerialNumber: syz [ 281.198563][ T8434] syzkaller1: entered promiscuous mode [ 281.212893][ T8434] syzkaller1: entered allmulticast mode [ 281.234935][ T5719] usb 6-1: config 0 descriptor?? [ 281.423799][ T5719] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 281.519858][ T9] usb 6-1: USB disconnect, device number 6 [ 281.580217][ T9] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 281.713806][ T8443] tipc: Enabled bearer , priority 0 [ 281.722980][ T5719] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 281.734209][ T8443] syzkaller0: entered promiscuous mode [ 281.742607][ T8443] syzkaller0: entered allmulticast mode [ 281.795993][ T8443] tipc: Resetting bearer [ 281.808271][ T8442] tipc: Resetting bearer [ 281.832660][ T8442] tipc: Disabling bearer [ 281.892664][ T5719] usb 5-1: Using ep0 maxpacket: 16 [ 281.903040][ T5719] usb 5-1: config 66 has too many interfaces: 235, using maximum allowed: 32 [ 281.913884][ T5719] usb 5-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 281.933105][ T5719] usb 5-1: config 66 has 1 interface, different from the descriptor's value: 235 [ 281.956647][ T5719] usb 5-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 281.970060][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.996536][ T5719] usb 5-1: Product: syz [ 282.011574][ T5719] usb 5-1: Manufacturer: syz [ 282.020630][ T5719] usb 5-1: SerialNumber: syz [ 282.268278][ T5719] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 282.321889][ T5719] dvb_usb_af9015 5-1:66.0: probe with driver dvb_usb_af9015 failed with error -22 [ 282.371346][ T5719] usb 5-1: USB disconnect, device number 11 [ 282.657017][ T8460] netlink: 40 bytes leftover after parsing attributes in process `syz.5.944'. [ 284.857069][ T8519] tipc: Enabling of bearer rejected, failed to enable media [ 284.878685][ T8519] syzkaller0: entered promiscuous mode [ 284.911228][ T8519] syzkaller0: entered allmulticast mode [ 284.975084][ T8520] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 285.552105][ T5710] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 285.727651][ T8538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.765774][ T5710] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 285.806929][ T5710] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 285.826585][ T5710] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 285.849480][ T5710] usb 5-1: config 0 interface 0 has no altsetting 0 [ 285.873121][ T5710] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 285.890094][ T5709] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 285.917618][ T5710] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 285.946524][ T5710] usb 5-1: config 0 interface 0 has no altsetting 0 [ 285.961578][ T5710] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 285.982547][ T5710] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.005961][ T5710] usb 5-1: config 0 interface 0 has no altsetting 0 [ 286.017878][ T5710] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.035252][ T5710] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.061354][ T5710] usb 5-1: config 0 interface 0 has no altsetting 0 [ 286.088563][ T5710] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.110143][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 286.140408][ T5710] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.190731][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.227109][ T5710] usb 5-1: config 0 interface 0 has no altsetting 0 [ 286.252401][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.300994][ T5709] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 286.316269][ T5710] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.335160][ T5710] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.356593][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.381986][ T5710] usb 5-1: config 0 interface 0 has no altsetting 0 [ 286.396505][ T5710] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.415172][ T5709] usb 4-1: config 0 descriptor?? [ 286.425452][ T5710] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.459932][ T5709] hub 4-1:0.0: USB hub found [ 286.476819][ T5710] usb 5-1: config 0 interface 0 has no altsetting 0 [ 286.490787][ T5710] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.514644][ T5710] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.562865][ T5710] usb 5-1: config 0 interface 0 has no altsetting 0 [ 286.611007][ T5710] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 286.642941][ T5710] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 286.668920][ T5709] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 286.688608][ T5710] usb 5-1: Product: syz [ 286.701340][ T5710] usb 5-1: Manufacturer: syz [ 286.711312][ T5710] usb 5-1: SerialNumber: syz [ 286.763207][ T5710] usb 5-1: config 0 descriptor?? [ 286.818390][ T5710] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 287.091887][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 287.106134][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 287.117103][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 287.130331][ T5709] usbhid 4-1:0.0: can't add hid device: -32 [ 287.139606][ T5709] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 287.211556][ T5709] usb 4-1: USB disconnect, device number 10 [ 287.338561][ T8557] syzkaller0: entered promiscuous mode [ 287.371627][ T8557] syzkaller0: entered allmulticast mode [ 287.741543][ T5709] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 287.905058][ T9] usb 5-1: USB disconnect, device number 12 [ 287.922894][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 287.955239][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.987308][ T9] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 288.006530][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.070546][ T5709] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 288.123809][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.193854][ T5709] usb 4-1: config 0 descriptor?? [ 288.256211][ T5709] hub 4-1:0.0: USB hub found [ 288.422132][ T5709] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 288.468773][ T5357] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 288.643923][ T5357] usb 2-1: unable to get BOS descriptor or descriptor too short [ 288.646719][ T5709] usbhid 4-1:0.0: can't add hid device: -71 [ 288.663499][ T5357] usb 2-1: not running at top speed; connect to a high speed hub [ 288.691264][ T5709] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 288.696516][ T5357] usb 2-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.768340][ T5357] usb 2-1: config 1 interface 0 has no altsetting 0 [ 288.789161][ T5709] usb 4-1: USB disconnect, device number 11 [ 288.865239][ T5357] usb 2-1: string descriptor 0 read error: -22 [ 288.881404][ T5357] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.954837][ T5357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.278009][ T5357] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 289.348088][ T5357] usb 2-1: USB disconnect, device number 13 [ 289.711825][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 289.902319][ T8592] netlink: 'syz.2.994': attribute type 5 has an invalid length. [ 289.929010][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.019770][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.063532][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 290.094469][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.130993][ T9] usb 5-1: config 0 descriptor?? [ 290.565127][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 290.621750][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 290.658453][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 290.683303][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 290.710916][ T9] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 290.779119][ T9] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 290.895796][ T8611] syzkaller0: entered promiscuous mode [ 290.920504][ T8611] syzkaller0: entered allmulticast mode [ 290.978066][ T9] playstation 0003:054C:0DF2.0003: Invalid reportID received, expected 9 got 32 [ 291.044888][ T9] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense pairing info: -22 [ 291.137500][ T9] playstation 0003:054C:0DF2.0003: Failed to get MAC address from DualSense [ 291.210703][ T9] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 291.315563][ T9] playstation 0003:054C:0DF2.0003: probe with driver playstation failed with error -22 [ 291.574951][ T8619] netlink: 'syz.3.1002': attribute type 12 has an invalid length. [ 291.593338][ T8619] netlink: 'syz.3.1002': attribute type 29 has an invalid length. [ 291.625834][ T8619] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1002'. [ 291.661085][ T8619] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1002'. [ 291.972159][ T5710] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 292.243389][ T5710] usb 6-1: Using ep0 maxpacket: 32 [ 292.265784][ T5710] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.287746][ T5710] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.318181][ T5710] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 292.423591][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.498818][ T5710] usb 6-1: config 0 descriptor?? [ 292.545559][ T5710] hub 6-1:0.0: USB hub found [ 292.758889][ T5357] usb 5-1: USB disconnect, device number 13 [ 292.798231][ T5710] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 293.055352][ T8632] tipc: Enabling of bearer rejected, failed to enable media [ 293.109697][ T8632] syzkaller0: entered promiscuous mode [ 293.156085][ T8632] syzkaller0: entered allmulticast mode [ 293.189667][ T5710] usbhid 6-1:0.0: can't add hid device: -71 [ 293.210811][ T8634] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 293.224315][ T5710] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 293.341726][ T5710] usb 6-1: USB disconnect, device number 7 [ 293.521729][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'. [ 293.553002][ T8643] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1012'. [ 293.811781][ T5710] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 293.913879][ T8653] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 294.035875][ T5710] usb 6-1: Using ep0 maxpacket: 32 [ 294.060629][ T5710] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.090122][ T5710] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.233297][ T5710] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 294.275531][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.336670][ T5710] usb 6-1: config 0 descriptor?? [ 294.366473][ T5710] hub 6-1:0.0: USB hub found [ 294.570703][ T5710] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 294.773223][ T5710] usbhid 6-1:0.0: can't add hid device: -71 [ 294.806625][ T5710] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 294.834667][ T11] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 294.924531][ T5710] usb 6-1: USB disconnect, device number 8 [ 295.052441][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 295.080002][ T11] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 295.139474][ T11] usb 3-1: config 179 has no interface number 0 [ 295.194660][ T11] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 295.238823][ T11] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 295.270218][ T5357] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 295.287564][ T11] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 295.312342][ T11] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 295.339029][ T11] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 295.362200][ T11] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 295.384703][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.411384][ T8662] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 295.453299][ T5357] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 295.511721][ T5357] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 295.557670][ T5357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.613526][ T5357] usb 4-1: Product: syz [ 295.620085][ T5357] usb 4-1: Manufacturer: syz [ 295.635044][ T5357] usb 4-1: SerialNumber: syz [ 295.732218][ T11] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 295.761304][ T5357] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 295.957537][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.077493][ T5719] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 296.138301][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1022'. [ 296.195202][ T24] usb 3-1: USB disconnect, device number 10 [ 296.195238][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 296.227525][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 296.330523][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.345944][ T5709] usb 4-1: USB disconnect, device number 12 [ 296.395583][ T5719] usb 4-1: ath9k_htc: Unable to allocate URBs [ 296.440437][ T5709] usb 4-1: ath9k_htc: USB layer deinitialized [ 296.481058][ T11] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 296.549812][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.618477][ T11] usb 2-1: config 0 descriptor?? [ 296.873630][ T5709] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 297.042480][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 297.070516][ T11] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 297.109750][ T5709] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 297.168985][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.229604][ T5709] usb 4-1: Product: syz [ 297.252398][ T11] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 297.252424][ T5709] usb 4-1: Manufacturer: syz [ 297.353253][ T5709] usb 4-1: SerialNumber: syz [ 297.392127][ T11] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 297.419876][ T5709] usb 4-1: config 0 descriptor?? [ 297.469410][ T11] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 297.488093][ T5709] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 297.525819][ T11] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 297.544438][ T5709] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 297.590262][ T5709] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 297.613510][ T8681] tipc: Enabling of bearer rejected, failed to enable media [ 297.685254][ T5709] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 297.704669][ T8681] syzkaller0: entered promiscuous mode [ 297.704695][ T8681] syzkaller0: entered allmulticast mode [ 297.710666][ T8666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.791827][ T8685] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 297.805461][ T5709] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 297.827060][ T11] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 297.864785][ T8666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.908345][ T5709] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 297.950528][ T5709] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 298.033195][ T5709] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 298.064057][ T11] playstation 0003:054C:0DF2.0004: Failed to retrieve feature with reportID 9: -32 [ 298.158899][ T11] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense pairing info: -32 [ 298.255837][ T5709] usb 4-1: USB disconnect, device number 13 [ 298.305319][ T11] playstation 0003:054C:0DF2.0004: Failed to get MAC address from DualSense [ 298.506055][ T11] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 298.759863][ T11] playstation 0003:054C:0DF2.0004: probe with driver playstation failed with error -32 [ 298.781713][ T5709] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 298.855243][ T5709] keyspan 4-1:0.0: device disconnected [ 298.946814][ T11] usb 2-1: USB disconnect, device number 14 [ 299.597691][ T8702] sch_tbf: burst 19872 is lower than device lo mtu (591563026) ! [ 299.681656][ T5719] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 299.852702][ T5719] usb 3-1: Using ep0 maxpacket: 16 [ 299.874710][ T5719] usb 3-1: config 66 has too many interfaces: 235, using maximum allowed: 32 [ 299.898236][ T5719] usb 3-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 299.971471][ T5719] usb 3-1: config 66 has 1 interface, different from the descriptor's value: 235 [ 300.031989][ T5719] usb 3-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 300.095485][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.186243][ T5719] usb 3-1: Product: syz [ 300.191332][ T5719] usb 3-1: Manufacturer: syz [ 300.237770][ T5719] usb 3-1: SerialNumber: syz [ 300.504045][ T5719] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 300.527238][ T5719] dvb_usb_af9015 3-1:66.0: probe with driver dvb_usb_af9015 failed with error -22 [ 300.577594][ T5719] usb 3-1: USB disconnect, device number 11 [ 301.252726][ T8740] sch_tbf: burst 19872 is lower than device lo mtu (591563026) ! [ 301.754289][ T8750] Cannot find add_set index 0 as target [ 302.060547][ T5709] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 302.321952][ T5709] usb 6-1: Using ep0 maxpacket: 32 [ 302.430190][ T5709] usb 6-1: unable to get BOS descriptor or descriptor too short [ 302.605287][ T8761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1059'. [ 302.662690][ T8761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1059'. [ 302.717928][ T5709] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 302.747377][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.856003][ T5709] usb 6-1: Product: syz [ 302.879542][ T5709] usb 6-1: Manufacturer: syz [ 302.919624][ T5709] usb 6-1: SerialNumber: syz [ 303.097149][ T8767] syzkaller1: entered promiscuous mode [ 303.131647][ T8767] syzkaller1: entered allmulticast mode [ 303.186773][ T8764] syzkaller0: entered promiscuous mode [ 303.221650][ T8764] syzkaller0: entered allmulticast mode [ 303.256597][ T8771] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 304.755547][ T8795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1070'. [ 304.808036][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 304.823224][ T8795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1070'. [ 304.853556][ T8798] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1071'. [ 304.875640][ T5719] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 305.044958][ T5719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.077979][ T5719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 305.115249][ T5719] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 305.148204][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.177380][ T5719] usb 3-1: Product: syz [ 305.196336][ T5719] usb 3-1: Manufacturer: syz [ 305.235375][ T5719] usb 3-1: SerialNumber: syz [ 306.433543][ T5719] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 306.564342][ T5719] usb 3-1: USB disconnect, device number 12 [ 306.627008][ T8801] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1073'. [ 306.981931][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 307.173880][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.192568][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'. [ 307.225156][ T8823] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1083'. [ 307.259163][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 307.289901][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.366584][ T9] usb 5-1: config 0 descriptor?? [ 307.564259][ T8831] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1086'. [ 307.579365][ T5709] usb 6-1: USB disconnect, device number 9 [ 307.770897][ T8833] udevd[8833]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.925021][ T9] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 308.002447][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input9 [ 308.212781][ T9] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 308.291610][ T5709] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 308.303400][ T5710] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 308.337905][ T9] usb 5-1: USB disconnect, device number 14 [ 308.502039][ T5710] usb 2-1: device descriptor read/64, error -71 [ 308.551268][ T8837] fido_id[8837]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 308.591037][ T5709] usb 6-1: unable to get BOS descriptor or descriptor too short [ 308.610022][ T5709] usb 6-1: not running at top speed; connect to a high speed hub [ 308.631803][ T5709] usb 6-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.656756][ T5709] usb 6-1: config 1 interface 0 has no altsetting 0 [ 308.675154][ T5709] usb 6-1: string descriptor 0 read error: -22 [ 308.703966][ T5709] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.729908][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.841973][ T5710] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 308.981621][ T5710] usb 2-1: device descriptor read/64, error -71 [ 309.004693][ T5709] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 309.074792][ T5709] usb 6-1: USB disconnect, device number 10 [ 309.077210][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1092'. [ 309.102868][ T5710] usb usb2-port1: attempt power cycle [ 309.117163][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1092'. [ 309.415042][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'. [ 309.429987][ T8856] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1096'. [ 309.472319][ T5710] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 309.512515][ T5710] usb 2-1: device descriptor read/8, error -71 [ 309.619046][ T8849] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1093'. [ 309.769382][ T5710] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 309.803889][ T5710] usb 2-1: device descriptor read/8, error -71 [ 309.936904][ T5710] usb usb2-port1: unable to enumerate USB device [ 310.218349][ T8875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1104'. [ 310.275454][ T8875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1104'. [ 310.851532][ T5710] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 311.062073][ T5710] usb 6-1: Using ep0 maxpacket: 8 [ 311.092539][ T5710] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 311.124941][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.146420][ T5710] usb 6-1: Product: syz [ 311.172569][ T5710] usb 6-1: Manufacturer: syz [ 311.187412][ T5710] usb 6-1: SerialNumber: syz [ 311.212993][ T5710] usb 6-1: config 0 descriptor?? [ 311.228255][ T8901] loop5: detected capacity change from 0 to 7 [ 311.251625][ T8902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1116'. [ 311.275782][ T8902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1116'. [ 311.277482][ T8901] Dev loop5: unable to read RDB block 7 [ 311.316949][ T5710] gspca_main: se401-2.14.0 probing 047d:5003 [ 311.353930][ T8901] loop5: unable to read partition table [ 311.417374][ T8901] loop5: partition table beyond EOD, truncated [ 311.434416][ T8901] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 311.652881][ T5710] gspca_se401: Frame size: 0x0 1/16th janggu [ 311.660853][ T5710] gspca_se401: Frame size: 0x0 1/16th janggu [ 311.669257][ T5710] gspca_se401: Frame size: 0x0 1/16th janggu [ 311.679921][ T5710] gspca_se401: Frame size: 0x0 1/16th janggu [ 311.691134][ T5710] gspca_se401: Frame size: 0x0 1/16th janggu [ 311.699819][ T5710] gspca_se401: Frame size: 0x0 1/16th janggu [ 311.741858][ T5709] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 311.761595][ T11] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 311.806290][ T8899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1114'. [ 311.886146][ T5710] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10 [ 311.940255][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 311.948207][ T5709] usb 5-1: config 66 has too many interfaces: 235, using maximum allowed: 32 [ 311.948228][ T11] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 311.980006][ T11] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 311.999602][ T5709] usb 5-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 311.999639][ T5709] usb 5-1: config 66 has 1 interface, different from the descriptor's value: 235 [ 312.051684][ T5709] usb 5-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 312.065424][ T5710] usb 6-1: USB disconnect, device number 11 [ 312.068512][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.090707][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.110217][ T11] usb 4-1: Product: syz [ 312.127739][ T5709] usb 5-1: Product: syz [ 312.128881][ T11] usb 4-1: Manufacturer: syz [ 312.146629][ T5709] usb 5-1: Manufacturer: syz [ 312.150178][ T11] usb 4-1: SerialNumber: syz [ 312.175151][ T5709] usb 5-1: SerialNumber: syz [ 312.222797][ T11] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 312.255741][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 312.444594][ T5709] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 312.483133][ T5709] dvb_usb_af9015 5-1:66.0: probe with driver dvb_usb_af9015 failed with error -22 [ 312.571556][ T5765] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 312.591997][ T5709] usb 5-1: USB disconnect, device number 15 [ 312.655850][ T8907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.715334][ T8907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.783053][ T5765] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 312.820613][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 312.889815][ T5765] usb 3-1: Product: syz [ 312.923870][ T8907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.938548][ T5765] usb 3-1: SerialNumber: syz [ 313.007015][ T8907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.023021][ T5765] usb 3-1: config 0 descriptor?? [ 313.062056][ T8916] syzkaller0: entered promiscuous mode [ 313.094655][ T8916] syzkaller0: entered allmulticast mode [ 313.436280][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 313.523456][ T11] usb 4-1: USB disconnect, device number 14 [ 313.561051][ T9] ath9k_htc: Failed to initialize the device [ 313.593901][ T11] usb 4-1: ath9k_htc: USB layer deinitialized [ 313.743173][ T8922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.827626][ T8922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.875269][ T8929] netlink: 'syz.4.1124': attribute type 10 has an invalid length. [ 314.238421][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 314.360404][ T8940] __nla_validate_parse: 2 callbacks suppressed [ 314.360427][ T8940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1128'. [ 314.381823][ T9] usb 4-1: device descriptor read/64, error -71 [ 314.397814][ T8940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1128'. [ 314.631898][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 314.662349][ T8943] loop5: detected capacity change from 0 to 7 [ 314.704315][ T8943] Dev loop5: unable to read RDB block 7 [ 314.781906][ T8943] loop5: unable to read partition table [ 314.807801][ T8943] loop5: partition table beyond EOD, truncated [ 314.853570][ T8943] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 314.853602][ T9] usb 4-1: device descriptor read/64, error -71 [ 315.025923][ T9] usb usb4-port1: attempt power cycle [ 315.092609][ T8955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1133'. [ 315.257499][ T8958] syzkaller0: entered promiscuous mode [ 315.267240][ T8958] syzkaller0: entered allmulticast mode [ 315.342197][ T11] usb 3-1: USB disconnect, device number 13 [ 315.385066][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 315.437638][ T9] usb 4-1: device descriptor read/8, error -71 [ 315.492397][ T5765] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 315.569652][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 315.629246][ T8961] netlink: 'syz.2.1137': attribute type 10 has an invalid length. [ 315.652028][ T8961] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1137'. [ 315.674653][ T5765] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 315.704343][ T5765] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 315.722683][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 315.736157][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.748809][ T5765] usb 2-1: Product: syz [ 315.762049][ T5765] usb 2-1: Manufacturer: syz [ 315.782602][ T5765] usb 2-1: SerialNumber: syz [ 315.792393][ T9] usb 4-1: device descriptor read/8, error -71 [ 315.817873][ T5765] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 315.850802][ T42] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 315.955146][ T9] usb usb4-port1: unable to enumerate USB device [ 316.074854][ T8970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1140'. [ 316.099192][ T8970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1140'. [ 316.151555][ T11] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 316.213212][ T8959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.252637][ T8959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.364873][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 316.391024][ T11] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 316.430851][ T11] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 316.490930][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.512384][ T8959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.528107][ T11] usb 5-1: Product: syz [ 316.536353][ T11] usb 5-1: Manufacturer: syz [ 316.548463][ T8959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.557091][ T11] usb 5-1: SerialNumber: syz [ 316.577215][ T11] usb 5-1: config 0 descriptor?? [ 316.778594][ T5718] usb 2-1: USB disconnect, device number 19 [ 317.007942][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.021915][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.040018][ T42] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 317.056592][ T42] ath9k_htc: Failed to initialize the device [ 317.066871][ T5718] usb 2-1: ath9k_htc: USB layer deinitialized [ 317.121514][ T5709] usb 5-1: USB disconnect, device number 16 [ 317.714308][ T8991] syzkaller0: entered promiscuous mode [ 317.769089][ T8991] syzkaller0: entered allmulticast mode [ 317.857167][ T8992] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 318.081797][ T5709] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 318.301755][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 318.346241][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.424119][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.544532][ T5709] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 318.620624][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.746104][ T5709] usb 4-1: config 0 descriptor?? [ 318.822116][ T5709] hub 4-1:0.0: USB hub found [ 319.050893][ T5709] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 319.505594][ T5709] hid-generic 0003:046D:C31C.0006: unknown main item tag 0x0 [ 319.747465][ T5709] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 319.924225][ T5709] usb 4-1: USB disconnect, device number 19 [ 320.297888][ T9005] fido_id[9005]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 321.297892][ T9017] syzkaller0: entered promiscuous mode [ 321.327986][ T9017] syzkaller0: entered allmulticast mode [ 321.418945][ T9017] tipc: Enabled bearer , priority 0 [ 321.437369][ T9015] tipc: Resetting bearer [ 321.552076][ T9015] tipc: Disabling bearer [ 321.614737][ T5718] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 321.872902][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 321.886614][ T5718] usb 4-1: config 5 has an invalid interface number: 52 but max is 1 [ 321.920461][ T5718] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 321.947780][ T5718] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 321.958901][ T5718] usb 4-1: config 5 has no interface number 0 [ 321.974470][ T5718] usb 4-1: config 5 interface 52 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.993991][ T5718] usb 4-1: config 5 interface 52 has no altsetting 0 [ 322.049117][ T5718] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 322.063515][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.076310][ T5718] usb 4-1: Product: syz [ 322.088155][ T5718] usb 4-1: Manufacturer: syz [ 322.096466][ T5718] usb 4-1: SerialNumber: syz [ 322.151683][ T5709] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 322.447244][ T5709] usb 6-1: Using ep0 maxpacket: 32 [ 322.464849][ T5718] cytherm 4-1:5.52: Cypress thermometer device now attached [ 322.489811][ T5709] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.540152][ T5718] usb 4-1: USB disconnect, device number 20 [ 322.609909][ T5718] cytherm 4-1:5.52: Cypress thermometer now disconnected [ 322.614946][ T5709] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 322.614985][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.615008][ T5709] usb 6-1: Product: syz [ 322.615026][ T5709] usb 6-1: Manufacturer: syz [ 322.615043][ T5709] usb 6-1: SerialNumber: syz [ 322.660053][ T5709] usb 6-1: config 0 descriptor?? [ 323.128935][ T5709] usb 6-1: USB disconnect, device number 12 [ 324.557482][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 324.922219][ T42] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 324.962336][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1176'. [ 324.991836][ T9072] netlink: 'syz.5.1176': attribute type 10 has an invalid length. [ 325.015485][ T9072] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1176'. [ 325.095714][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.123279][ T5718] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 325.135824][ T42] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 325.135861][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.179557][ T42] usb 4-1: config 0 descriptor?? [ 325.456191][ T5718] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 325.495403][ T9063] netlink: 'syz.2.1172': attribute type 1 has an invalid length. [ 325.516069][ T5718] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 325.551749][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.566426][ T5718] usb 2-1: Product: syz [ 325.593409][ T5718] usb 2-1: Manufacturer: syz [ 325.613203][ T5718] usb 2-1: SerialNumber: syz [ 325.668809][ T42] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 325.735098][ T5718] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 325.796803][ T11] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 325.814027][ T42] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0007/input/input11 [ 326.133728][ T9070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.210413][ T9070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.480963][ T42] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 326.524337][ T9070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.623890][ T42] usb 4-1: USB disconnect, device number 21 [ 326.633517][ T9070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.966005][ T11] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 327.023154][ T11] ath9k_htc: Failed to initialize the device [ 327.037748][ T9087] fido_id[9087]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 327.080366][ T5709] usb 2-1: USB disconnect, device number 20 [ 327.154656][ T5709] usb 2-1: ath9k_htc: USB layer deinitialized [ 327.177587][ T9096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1186'. [ 327.577872][ T5765] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 327.764988][ T5765] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.778600][ T5765] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.830503][ T5765] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 327.846142][ T5765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.902351][ T5765] usb 5-1: config 0 descriptor?? [ 328.344944][ T5765] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 328.359210][ T5765] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 328.376239][ T5765] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 328.404027][ T5765] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 328.426010][ T5765] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 328.456788][ T5765] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 328.472200][ T5709] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 328.555194][ T5765] playstation 0003:054C:0DF2.0008: Invalid reportID received, expected 9 got 32 [ 328.581559][ T5765] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense pairing info: -22 [ 328.610401][ T5765] playstation 0003:054C:0DF2.0008: Failed to get MAC address from DualSense [ 328.621727][ T5765] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 328.638433][ T5765] playstation 0003:054C:0DF2.0008: probe with driver playstation failed with error -22 [ 328.653987][ T5709] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 328.676831][ T5709] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 328.693790][ T5709] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 328.709818][ T5709] usb 3-1: config 0 interface 0 has no altsetting 0 [ 328.729090][ T5709] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 328.739664][ T5709] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 328.755660][ T5709] usb 3-1: config 0 interface 0 has no altsetting 0 [ 328.768952][ T5709] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 328.813346][ T5709] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 328.850540][ T5709] usb 3-1: config 0 interface 0 has no altsetting 0 [ 328.893950][ T5709] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 328.949230][ T5709] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 328.992045][ T5709] usb 3-1: config 0 interface 0 has no altsetting 0 [ 329.012664][ T5709] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.032116][ T5709] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.062673][ T5709] usb 3-1: config 0 interface 0 has no altsetting 0 [ 329.090355][ T5709] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.123741][ T5709] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.159918][ T5709] usb 3-1: config 0 interface 0 has no altsetting 0 [ 329.185346][ T5709] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.214020][ T5709] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.242676][ T5709] usb 3-1: config 0 interface 0 has no altsetting 0 [ 329.262318][ T5709] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.282214][ T5709] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.310874][ T5709] usb 3-1: config 0 interface 0 has no altsetting 0 [ 329.342454][ T5709] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 329.376615][ T5709] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 329.407343][ T5709] usb 3-1: Product: syz [ 329.427782][ T5709] usb 3-1: Manufacturer: syz [ 329.445906][ T5709] usb 3-1: SerialNumber: syz [ 329.458406][ T5765] usb 5-1: USB disconnect, device number 17 [ 329.505326][ T5709] usb 3-1: config 0 descriptor?? [ 329.560065][ T5709] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 330.300852][ T9121] netlink: 'syz.3.1192': attribute type 1 has an invalid length. [ 330.718507][ T5709] usb 3-1: USB disconnect, device number 14 [ 330.787718][ T5709] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 331.118643][ T9142] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1203'. [ 331.130301][ T5765] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 331.268362][ T9146] syzkaller0: entered promiscuous mode [ 331.278135][ T9146] syzkaller0: entered allmulticast mode [ 331.304481][ T5765] usb 6-1: config index 0 descriptor too short (expected 65183, got 72) [ 331.352240][ T29] audit: type=1326 audit(1783178019.045:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.1.1206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c1d9de59 code=0x7ffc0000 [ 331.394254][ T5765] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 331.412544][ T5765] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.426142][ T29] audit: type=1326 audit(1783178019.065:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.1.1206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c1d9de59 code=0x7ffc0000 [ 331.460212][ T5765] usb 6-1: Product: syz [ 331.469804][ T9146] tipc: Enabled bearer , priority 0 [ 331.483053][ T5765] usb 6-1: Manufacturer: syz [ 331.495268][ T5765] usb 6-1: SerialNumber: syz [ 331.522347][ T9144] tipc: Resetting bearer [ 331.533359][ T29] audit: type=1326 audit(1783178019.075:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.1.1206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c1d9de59 code=0x7ffc0000 [ 331.584817][ T5765] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 331.640220][ T24] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 331.675174][ T9144] tipc: Disabling bearer [ 331.691197][ T29] audit: type=1326 audit(1783178019.075:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.1.1206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c1d9de59 code=0x7ffc0000 [ 331.759613][ T29] audit: type=1326 audit(1783178019.075:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.1.1206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c1d9de59 code=0x7ffc0000 [ 331.791671][ T29] audit: type=1326 audit(1783178019.075:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.1.1206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe4c1d9de59 code=0x7ffc0000 [ 331.828933][ T29] audit: type=1326 audit(1783178019.095:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.1.1206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c1d9de59 code=0x7ffc0000 [ 331.912282][ T29] audit: type=1326 audit(1783178019.095:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.1.1206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c1d9de59 code=0x7ffc0000 [ 331.973589][ T29] audit: type=1326 audit(1783178019.105:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.1.1206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c1d9de59 code=0x7ffc0000 [ 332.048661][ T9132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.081577][ T29] audit: type=1326 audit(1783178019.105:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.1.1206" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe4c1d9de59 code=0x7ffc0000 [ 332.148299][ T9132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.272777][ T9132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.289144][ T9132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.604047][ T5719] usb 6-1: USB disconnect, device number 13 [ 332.682494][ T24] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 332.706038][ T24] ath9k_htc: Failed to initialize the device [ 332.728020][ T5719] usb 6-1: ath9k_htc: USB layer deinitialized [ 333.017958][ T9173] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1215'. [ 333.468137][ T9182] syzkaller0: entered promiscuous mode [ 333.496132][ T9182] syzkaller0: entered allmulticast mode [ 333.521898][ T9] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 333.641111][ T9182] tipc: Started in network mode [ 333.686692][ T9182] tipc: Node identity cee17fa0ab5b, cluster identity 4711 [ 333.715668][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 333.735808][ T9182] tipc: Enabled bearer , priority 0 [ 333.761852][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 333.783431][ T9] usb 4-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.804366][ T9180] tipc: Resetting bearer [ 333.832117][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 333.876325][ T9180] tipc: Disabling bearer [ 333.890375][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.929585][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.976311][ T9] usb 4-1: Product: syz [ 333.999423][ T9] usb 4-1: Manufacturer: syz [ 334.017180][ T9] usb 4-1: SerialNumber: syz [ 334.170230][ T9197] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1224'. [ 334.280465][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 334.302168][ T5765] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 334.338113][ T9] usb 4-1: USB disconnect, device number 22 [ 334.413253][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 334.491845][ T5765] usb 2-1: Using ep0 maxpacket: 32 [ 334.508238][ T5765] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 334.535643][ T5765] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 334.555292][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 334.569291][ T5765] usb 2-1: Product: syz [ 334.574931][ T5765] usb 2-1: Manufacturer: syz [ 334.580893][ T5765] usb 2-1: SerialNumber: syz [ 334.597038][ T5765] usb 2-1: config 0 descriptor?? [ 334.605864][ T9192] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 334.629160][ T24] usb 6-1: config index 0 descriptor too short (expected 65183, got 72) [ 334.655438][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 334.691147][ T5765] hub 2-1:0.0: bad descriptor, ignoring hub [ 334.715278][ T5765] hub 2-1:0.0: probe with driver hub failed with error -5 [ 334.742902][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.757523][ T24] usb 6-1: Product: syz [ 334.767615][ T24] usb 6-1: Manufacturer: syz [ 334.782241][ T24] usb 6-1: SerialNumber: syz [ 334.857260][ T24] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 334.918266][ T42] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 335.107292][ T9207] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1230'. [ 335.271348][ T9198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.307413][ T9198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.521112][ T9198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.580212][ T9198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.665252][ T5719] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 335.851808][ T5719] usb 4-1: Using ep0 maxpacket: 16 [ 335.890393][ T11] usb 6-1: USB disconnect, device number 14 [ 335.949676][ T5719] usb 4-1: config 1 has an invalid descriptor of length 237, skipping remainder of the config [ 336.012297][ T5719] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.042644][ T42] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 336.061304][ T42] ath9k_htc: Failed to initialize the device [ 336.072448][ T5719] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 336.089086][ T11] usb 6-1: ath9k_htc: USB layer deinitialized [ 336.114176][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 336.133163][ T5719] usb 4-1: SerialNumber: syz [ 336.227963][ T5719] usb 4-1: 0:2 : does not exist [ 336.392939][ T9222] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1237'. [ 336.599195][ T9226] syzkaller0: entered promiscuous mode [ 336.613628][ T5719] usb 4-1: USB disconnect, device number 23 [ 336.625620][ T9226] syzkaller0: entered allmulticast mode [ 336.773447][ T8371] udevd[8371]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.831214][ T9226] tipc: Enabled bearer , priority 0 [ 336.920735][ T9224] tipc: Resetting bearer [ 337.095546][ T9224] tipc: Disabling bearer [ 337.289888][ T9238] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1242'. [ 337.332460][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1242'. [ 337.868258][ T9250] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1247'. [ 338.691251][ T9266] syzkaller0: entered promiscuous mode [ 338.735056][ T9266] syzkaller0: entered allmulticast mode [ 338.852029][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 338.917982][ T9266] tipc: Enabled bearer , priority 0 [ 338.969613][ T9264] tipc: Resetting bearer [ 339.074015][ T9264] tipc: Disabling bearer [ 339.113410][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 339.130383][ T24] usb 4-1: config 5 has an invalid interface number: 52 but max is 1 [ 339.167913][ T9273] syz_tun: entered allmulticast mode [ 339.186216][ T24] usb 4-1: config 5 has an invalid interface number: 4 but max is 1 [ 339.207312][ T24] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 339.253078][ T9] usb 2-1: USB disconnect, device number 21 [ 339.262748][ T24] usb 4-1: config 5 has no interface number 0 [ 339.307223][ T24] usb 4-1: config 5 has no interface number 1 [ 339.336218][ T24] usb 4-1: config 5 interface 52 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.393101][ T9272] dvmrp8: entered allmulticast mode [ 339.448611][ T24] usb 4-1: config 5 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 339.574725][ T24] usb 4-1: config 5 interface 52 has no altsetting 0 [ 339.632640][ T24] usb 4-1: config 5 interface 4 has no altsetting 0 [ 339.670151][ T24] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 339.699608][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.730319][ T24] usb 4-1: Product: syz [ 339.745004][ T24] usb 4-1: Manufacturer: syz [ 339.769697][ T24] usb 4-1: SerialNumber: syz [ 339.830035][ T9271] syz_tun: left allmulticast mode [ 339.858714][ T9282] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1259'. [ 340.021733][ T24] cytherm 4-1:5.52: Cypress thermometer device now attached [ 340.155930][ T24] cytherm 4-1:5.4: Cypress thermometer device now attached [ 340.253103][ T24] usb 4-1: USB disconnect, device number 24 [ 340.328347][ T24] cytherm 4-1:5.52: Cypress thermometer now disconnected [ 340.403249][ T24] cytherm 4-1:5.4: Cypress thermometer now disconnected [ 340.612569][ T42] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 340.852311][ T42] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 340.930243][ T42] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.948046][ T42] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.006169][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.025977][ T42] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.051943][ T42] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.088056][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.124462][ T42] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.149606][ T42] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.185296][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.239008][ T42] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.276404][ T42] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.299320][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.311584][ T42] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.372276][ T42] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.430231][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.460281][ T42] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.507015][ T42] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.552233][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.609796][ T42] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.656584][ T42] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.680985][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.722997][ T42] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.768758][ T42] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 341.867093][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.926194][ T42] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 341.967630][ T42] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 341.983108][ T42] usb 3-1: Product: syz [ 341.989255][ T42] usb 3-1: Manufacturer: syz [ 341.996359][ T42] usb 3-1: SerialNumber: syz [ 342.026724][ T42] usb 3-1: config 0 descriptor?? [ 342.104804][ T42] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 342.555652][ T9] usb 3-1: USB disconnect, device number 15 [ 342.641879][ T9] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 342.983240][ T42] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 343.162755][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 343.173487][ T5709] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 343.189610][ T42] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 343.207988][ T42] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 343.224314][ T42] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 343.240324][ T42] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 343.256819][ T42] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.297436][ T42] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 343.325311][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.386287][ T5709] usb 2-1: unable to get BOS descriptor or descriptor too short [ 343.428927][ T5709] usb 2-1: not running at top speed; connect to a high speed hub [ 343.449306][ T5709] usb 2-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.470714][ T5709] usb 2-1: config 1 interface 0 has no altsetting 0 [ 343.486221][ T5709] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 343.496082][ T9319] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 343.514083][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.523757][ T5709] usb 2-1: Product: syz [ 343.529219][ T5709] usb 2-1: Manufacturer: syz [ 343.550974][ T5709] usb 2-1: SerialNumber: syz [ 343.863944][ T5709] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 343.920497][ T5709] usb 2-1: USB disconnect, device number 22 [ 345.002037][ T9333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1280'. [ 347.665489][ T11] usb 4-1: USB disconnect, device number 25 [ 347.859972][ T9348] syzkaller0: entered promiscuous mode [ 347.877288][ T9348] syzkaller0: entered allmulticast mode [ 348.228546][ T5709] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 348.422779][ T5709] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 348.433487][ T5709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.452989][ T5709] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.490046][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.524534][ T5709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.558736][ T5709] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.573468][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.585396][ T5709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.596037][ T5709] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.609329][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.637447][ T5709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.662336][ T5709] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.690448][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.724990][ T5709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.764335][ T5709] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.823830][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.887925][ T5709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.904025][ T5709] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.917598][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.930842][ T5709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.944460][ T5709] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.957788][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.968502][ T5709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 349.009605][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1293'. [ 349.063968][ T5709] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 349.089860][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 349.127835][ T5709] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 349.146994][ T5709] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 349.158205][ T5709] usb 2-1: Product: syz [ 349.162989][ T5709] usb 2-1: Manufacturer: syz [ 349.170406][ T5709] usb 2-1: SerialNumber: syz [ 349.197532][ T5709] usb 2-1: config 0 descriptor?? [ 349.304550][ T5709] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 349.509585][ T9374] xt_hashlimit: size too large, truncated to 1048576 [ 349.530476][ T5709] usb 2-1: USB disconnect, device number 23 [ 349.583459][ T5709] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 352.973118][ T9355] netlink: 'syz.5.1286': attribute type 12 has an invalid length. [ 352.982249][ T9355] netlink: 'syz.5.1286': attribute type 29 has an invalid length. [ 352.990645][ T9355] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1286'. [ 353.000311][ T9355] netlink: 'syz.5.1286': attribute type 3 has an invalid length. [ 353.011234][ T9355] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1286'. [ 353.023651][ T9360] netlink: 'syz.5.1286': attribute type 12 has an invalid length. [ 353.032206][ T9360] netlink: 'syz.5.1286': attribute type 29 has an invalid length. [ 353.044135][ T9360] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1286'. [ 353.055333][ T9360] netlink: 'syz.5.1286': attribute type 3 has an invalid length. [ 353.066528][ T9360] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1286'. [ 353.344227][ T9385] syzkaller0: entered promiscuous mode [ 353.352702][ T9385] syzkaller0: entered allmulticast mode [ 353.904814][ T9403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1307'. [ 354.169234][ T9410] netlink: 212 bytes leftover after parsing attributes in process `syz.5.1310'. [ 354.664017][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'. [ 354.916667][ T9438] netlink: 'syz.2.1324': attribute type 4 has an invalid length. [ 354.930716][ T9438] netlink: 'syz.2.1324': attribute type 4 has an invalid length. [ 355.185599][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1327'. [ 355.521571][ T11] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 355.536517][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1336'. [ 355.572064][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 355.692132][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 355.713538][ T11] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 355.738933][ T9] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 355.751978][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.771785][ T11] usb 3-1: Product: syz [ 355.776986][ T11] usb 3-1: Manufacturer: syz [ 355.787200][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 355.801659][ T11] usb 3-1: SerialNumber: syz [ 355.808297][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.821103][ T11] usb 3-1: config 0 descriptor?? [ 355.828449][ T9] usb 2-1: Product: syz [ 355.833518][ T9] usb 2-1: Manufacturer: syz [ 355.846135][ T9] usb 2-1: SerialNumber: syz [ 355.897156][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 355.925448][ T5719] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 356.232653][ T9456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.273174][ T9456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.307040][ T11] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 356.357023][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 356.403497][ T11] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 356.433658][ T11] usb 3-1: media controller created [ 356.504748][ T9456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.525899][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.546958][ T9456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.662117][ T11] zl10353_read_register: readreg error (reg=127, ret==0) [ 356.680792][ T11] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 356.695924][ T11] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 356.747988][ T11] usb 3-1: USB disconnect, device number 16 [ 356.845955][ T42] usb 2-1: USB disconnect, device number 24 [ 356.917992][ T9479] tipc: Enabled bearer , priority 0 [ 356.931106][ T11] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 356.960932][ T9479] tipc: Resetting bearer [ 357.001493][ T5719] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 357.012562][ T9478] tipc: Disabling bearer [ 357.024882][ T5719] ath9k_htc: Failed to initialize the device [ 357.042366][ T42] usb 2-1: ath9k_htc: USB layer deinitialized [ 357.598436][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 357.684359][ T5719] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 357.871606][ T9506] netlink: 'syz.5.1348': attribute type 4 has an invalid length. [ 357.901888][ T5719] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 357.911191][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 357.933109][ T5719] usb 3-1: Product: syz [ 358.043193][ T5719] usb 3-1: SerialNumber: syz [ 358.049674][ T9507] netlink: 'syz.5.1348': attribute type 4 has an invalid length. [ 358.063734][ T5719] usb 3-1: config 0 descriptor?? [ 358.415630][ T5719] hso 3-1:0.0: Failed to find INT IN ep [ 358.620904][ T9509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.656744][ T9509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.500173][ T42] usb 3-1: USB disconnect, device number 17 [ 361.711938][ T5719] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 361.881796][ T5719] usb 3-1: Using ep0 maxpacket: 16 [ 362.004337][ T5719] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 362.015238][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.024727][ T5719] usb 3-1: Product: syz [ 362.031028][ T5719] usb 3-1: Manufacturer: syz [ 362.039089][ T5719] usb 3-1: SerialNumber: syz [ 362.063044][ T5719] usb 3-1: config 0 descriptor?? [ 362.570284][ T5719] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 362.619977][ T5719] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 362.630908][ T5719] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 362.640556][ T5719] usb 3-1: media controller created [ 362.671554][ T5719] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.795838][ T5719] zl10353_read_register: readreg error (reg=127, ret==0) [ 362.855607][ T5719] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 362.923675][ T5719] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 363.005375][ T5719] usb 3-1: USB disconnect, device number 18 [ 363.251156][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'. [ 363.266703][ T5719] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 363.300411][ T9527] netlink: 'syz.4.1355': attribute type 12 has an invalid length. [ 363.315622][ T9527] netlink: 'syz.4.1355': attribute type 29 has an invalid length. [ 363.335060][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'. [ 363.357475][ T9527] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1355'. [ 363.439432][ T9527] netlink: 'syz.4.1355': attribute type 3 has an invalid length. [ 363.449164][ T9527] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1355'. [ 363.494454][ T9529] netlink: 'syz.4.1355': attribute type 12 has an invalid length. [ 363.539490][ T9529] netlink: 'syz.4.1355': attribute type 29 has an invalid length. [ 363.552203][ T9529] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1355'. [ 363.579845][ T9529] netlink: 'syz.4.1355': attribute type 3 has an invalid length. [ 363.600184][ T9529] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1355'. [ 364.038691][ T9544] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1360'. [ 364.118283][ T9544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.167958][ T9544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.218117][ T9544] bond0 (unregistering): Released all slaves [ 364.911522][ T5719] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 364.985529][ T9573] netlink: 'syz.3.1368': attribute type 12 has an invalid length. [ 365.017403][ T9573] netlink: 'syz.3.1368': attribute type 29 has an invalid length. [ 365.030065][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 365.030088][ T29] audit: type=1326 audit(1783178052.735:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.4.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1659de59 code=0x7ffc0000 [ 365.071746][ T9573] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1368'. [ 365.091517][ T5719] usb 6-1: Using ep0 maxpacket: 8 [ 365.100509][ T29] audit: type=1326 audit(1783178052.735:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.4.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1659de59 code=0x7ffc0000 [ 365.105833][ T9573] netlink: 'syz.3.1368': attribute type 3 has an invalid length. [ 365.141370][ T9573] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1368'. [ 365.150915][ T5719] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 365.173934][ T5719] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.192017][ T29] audit: type=1326 audit(1783178052.735:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.4.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1659de59 code=0x7ffc0000 [ 365.198471][ T9577] netlink: 'syz.3.1368': attribute type 12 has an invalid length. [ 365.231760][ T5719] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 365.274647][ T5719] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 365.299442][ T29] audit: type=1326 audit(1783178052.735:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.4.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8e1659de59 code=0x7ffc0000 [ 365.308660][ T9577] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1368'. [ 365.334680][ T5719] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.359953][ T29] audit: type=1326 audit(1783178052.745:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.4.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1659de59 code=0x7ffc0000 [ 365.396254][ T29] audit: type=1326 audit(1783178052.745:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.4.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1659de59 code=0x7ffc0000 [ 365.407211][ T5719] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 365.451170][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 365.464168][ T29] audit: type=1326 audit(1783178052.745:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.4.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1659de59 code=0x7ffc0000 [ 365.541568][ T5719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.566155][ T29] audit: type=1326 audit(1783178052.745:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.4.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8e1659de59 code=0x7ffc0000 [ 365.632397][ T29] audit: type=1326 audit(1783178052.745:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.4.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1659de59 code=0x7ffc0000 [ 365.683403][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 365.701609][ T24] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 365.739146][ T24] usb 3-1: config 179 has no interface number 0 [ 365.756616][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 365.774347][ T29] audit: type=1326 audit(1783178052.765:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.4.1369" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1659de59 code=0x7ffc0000 [ 365.829963][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 365.876940][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 365.897553][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 365.911824][ T24] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 365.964492][ T9582] syzkaller0: entered promiscuous mode [ 365.975539][ T9582] syzkaller0: entered allmulticast mode [ 365.980736][ T24] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 366.013755][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.043073][ T9578] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 366.296868][ T5718] usb 3-1: USB disconnect, device number 19 [ 366.297087][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 366.312704][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 366.344082][ T9593] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 366.598576][ T9599] tipc: Disabling bearer [ 367.089379][ T9613] tipc: Resetting bearer [ 367.125701][ T9613] tipc: Disabling bearer [ 367.137488][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 367.193766][ T5719] usb 6-1: USB disconnect, device number 15 [ 367.211513][ T42] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 367.312088][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 367.340802][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.372487][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 367.392701][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.421288][ T42] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 367.452931][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 367.481860][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.508548][ T42] usb 3-1: Product: syz [ 367.514490][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.537843][ T42] usb 3-1: Manufacturer: syz [ 367.548453][ T42] usb 3-1: SerialNumber: syz [ 367.563968][ T24] usb 4-1: config 0 descriptor?? [ 367.592766][ T42] usb 3-1: config 0 descriptor?? [ 367.612131][ T24] hub 4-1:0.0: USB hub found [ 367.818462][ T24] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 368.140706][ T42] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 368.245284][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 368.277222][ T24] hid-generic 0003:046D:C31C.0009: unknown main item tag 0x0 [ 368.303599][ T42] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 368.350131][ T42] usb 3-1: media controller created [ 368.372606][ T24] hid-generic 0003:046D:C31C.0009: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 368.423347][ T9617] ------------[ cut here ]------------ [ 368.431643][ T9617] usb 3-1: BOGUS control dir, pipe 80001480 doesn't match bRequestType c0 [ 368.446837][ T9617] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz.2.1385/9617 [ 368.463877][ T9617] Modules linked in: [ 368.470562][ T9617] CPU: 1 UID: 0 PID: 9617 Comm: syz.2.1385 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.488168][ T9617] Tainted: [L]=SOFTLOCKUP [ 368.495248][ T9617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.512728][ T9617] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 368.521229][ T9617] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 368.555204][ T9617] RSP: 0018:ffffc9000f70f718 EFLAGS: 00010246 [ 368.565979][ T9617] RAX: 0000000000000000 RBX: ffff8880345f4700 RCX: 0000000080001480 [ 368.579233][ T9617] RDX: ffff888022ecce00 RSI: ffffffff8ca31080 RDI: ffffffff90655eb0 [ 368.590018][ T9617] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 368.606672][ T9617] R10: ffffc9000f70f800 R11: fffff52001ee1f0c R12: 1ffff1100ef04a6c [ 368.623192][ T9617] R13: ffff888077825360 R14: ffff888022ecce00 R15: 0000000080001480 [ 368.633619][ T9617] FS: 00007ff6d71c16c0(0000) GS:ffff888125059000(0000) knlGS:0000000000000000 [ 368.645964][ T9617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.655811][ T9617] CR2: 00007f6f629556b8 CR3: 0000000056356000 CR4: 00000000003526f0 [ 368.666558][ T9617] Call Trace: [ 368.671242][ T9617] [ 368.676266][ T9617] usb_start_wait_urb+0x13f/0x5b0 [ 368.684518][ T9617] ? trace_kmalloc+0x2a/0xf0 [ 368.691827][ T9617] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 368.700343][ T9617] usb_control_msg+0x234/0x3e0 [ 368.708133][ T9617] dtv5100_i2c_msg+0x231/0x2f0 [ 368.715073][ T9617] dtv5100_i2c_xfer+0x1a5/0x610 [ 368.722369][ T9617] __i2c_transfer+0x7be/0x1fe0 [ 368.727960][ T9617] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 368.737417][ T9617] ? lockdep_hardirqs_on+0x7a/0x110 [ 368.744418][ T9617] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 368.751166][ T9617] ? rt_mutex_lock_nested+0x156/0x1c0 [ 368.758488][ T9617] ? i2c_transfer+0xc8/0x2d0 [ 368.766913][ T9617] i2c_transfer+0x1cc/0x2d0 [ 368.772869][ T9617] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 368.782178][ T9617] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 368.790126][ T9617] ? _copy_from_user+0x94/0xb0 [ 368.796256][ T9617] i2cdev_write+0x113/0x1e0 [ 368.801894][ T9617] vfs_writev+0x4bb/0x990 [ 368.808261][ T9617] ? __pfx_i2cdev_write+0x10/0x10 [ 368.814419][ T9617] ? __pfx_vfs_writev+0x10/0x10 [ 368.819805][ T9617] ? __fget_files+0x2a/0x420 [ 368.825317][ T9617] ? __fget_files+0x3a2/0x420 [ 368.830782][ T9617] ? __fget_files+0x2a/0x420 [ 368.836444][ T9617] do_writev+0x154/0x2e0 [ 368.840869][ T9617] ? __pfx_do_writev+0x10/0x10 [ 368.846096][ T9617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.852497][ T9617] do_syscall_64+0x174/0x580 [ 368.857313][ T9617] ? clear_bhb_loop+0x40/0x90 [ 368.863305][ T9617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.873224][ T9617] RIP: 0033:0x7ff6d639de59 [ 368.877983][ T9617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.900493][ T9617] RSP: 002b:00007ff6d71c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 368.909977][ T9617] RAX: ffffffffffffffda RBX: 00007ff6d6625fa0 RCX: 00007ff6d639de59 [ 368.919265][ T9617] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004 [ 368.928081][ T9617] RBP: 00007ff6d6433e6f R08: 0000000000000000 R09: 0000000000000000 [ 368.936675][ T9617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.946603][ T9617] R13: 00007ff6d6626038 R14: 00007ff6d6625fa0 R15: 00007ff6d674fa48 [ 368.963759][ T9617] [ 368.968895][ T9617] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 368.980297][ T9617] CPU: 1 UID: 0 PID: 9617 Comm: syz.2.1385 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.995732][ T9617] Tainted: [L]=SOFTLOCKUP [ 369.003383][ T9617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 369.030101][ T9617] Call Trace: [ 369.035568][ T9617] [ 369.041072][ T9617] vpanic+0x56c/0xa60 [ 369.046571][ T9617] ? __pfx__printk+0x10/0x10 [ 369.055307][ T9617] ? __pfx_vpanic+0x10/0x10 [ 369.061553][ T9617] ? is_bpf_text_address+0x292/0x2b0 [ 369.068924][ T9617] ? is_bpf_text_address+0x26/0x2b0 [ 369.075011][ T9617] panic+0xc5/0xd0 [ 369.078944][ T9617] ? __pfx_panic+0x10/0x10 [ 369.084050][ T9617] __warn+0x315/0x4c0 [ 369.088170][ T9617] ? usb_submit_urb+0x1057/0x18b0 [ 369.093457][ T9617] ? usb_submit_urb+0x1057/0x18b0 [ 369.098556][ T9617] __report_bug+0x331/0x530 [ 369.103218][ T9617] ? usb_submit_urb+0x1057/0x18b0 [ 369.108302][ T9617] ? __pfx___report_bug+0x10/0x10 [ 369.114361][ T9617] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 369.120859][ T9617] ? __kmalloc_noprof+0x1ad/0x720 [ 369.132487][ T9617] ? kasan_save_track+0x4f/0x80 [ 369.138439][ T9617] report_bug_entry+0x19a/0x290 [ 369.146291][ T9617] ? usb_submit_urb+0x1100/0x18b0 [ 369.157701][ T9617] ? usb_submit_urb+0x1105/0x18b0 [ 369.163933][ T9617] handle_bug+0xce/0x200 [ 369.169755][ T9617] exc_invalid_op+0x1a/0x50 [ 369.176076][ T9617] asm_exc_invalid_op+0x1a/0x20 [ 369.182626][ T9617] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 369.189387][ T9617] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 369.218596][ T9617] RSP: 0018:ffffc9000f70f718 EFLAGS: 00010246 [ 369.227009][ T9617] RAX: 0000000000000000 RBX: ffff8880345f4700 RCX: 0000000080001480 [ 369.236710][ T9617] RDX: ffff888022ecce00 RSI: ffffffff8ca31080 RDI: ffffffff90655eb0 [ 369.247423][ T9617] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 369.256669][ T9617] R10: ffffc9000f70f800 R11: fffff52001ee1f0c R12: 1ffff1100ef04a6c [ 369.265055][ T9617] R13: ffff888077825360 R14: ffff888022ecce00 R15: 0000000080001480 [ 369.273682][ T9617] ? usb_submit_urb+0x1091/0x18b0 [ 369.278967][ T9617] usb_start_wait_urb+0x13f/0x5b0 [ 369.284169][ T9617] ? trace_kmalloc+0x2a/0xf0 [ 369.288848][ T9617] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 369.294487][ T9617] usb_control_msg+0x234/0x3e0 [ 369.299557][ T9617] dtv5100_i2c_msg+0x231/0x2f0 [ 369.304398][ T9617] dtv5100_i2c_xfer+0x1a5/0x610 [ 369.309364][ T9617] __i2c_transfer+0x7be/0x1fe0 [ 369.314204][ T9617] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 369.320077][ T9617] ? lockdep_hardirqs_on+0x7a/0x110 [ 369.325340][ T9617] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 369.331194][ T9617] ? rt_mutex_lock_nested+0x156/0x1c0 [ 369.336701][ T9617] ? i2c_transfer+0xc8/0x2d0 [ 369.341379][ T9617] i2c_transfer+0x1cc/0x2d0 [ 369.345954][ T9617] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 369.354865][ T9617] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 369.362694][ T9617] ? _copy_from_user+0x94/0xb0 [ 369.368469][ T9617] i2cdev_write+0x113/0x1e0 [ 369.375480][ T9617] vfs_writev+0x4bb/0x990 [ 369.383984][ T9617] ? __pfx_i2cdev_write+0x10/0x10 [ 369.391197][ T9617] ? __pfx_vfs_writev+0x10/0x10 [ 369.397774][ T9617] ? __fget_files+0x2a/0x420 [ 369.404711][ T9617] ? __fget_files+0x3a2/0x420 [ 369.410703][ T9617] ? __fget_files+0x2a/0x420 [ 369.417040][ T9617] do_writev+0x154/0x2e0 [ 369.421856][ T9617] ? __pfx_do_writev+0x10/0x10 [ 369.427587][ T9617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.433897][ T9617] do_syscall_64+0x174/0x580 [ 369.438741][ T9617] ? clear_bhb_loop+0x40/0x90 [ 369.443507][ T9617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.449533][ T9617] RIP: 0033:0x7ff6d639de59 [ 369.454177][ T9617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.474274][ T9617] RSP: 002b:00007ff6d71c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 369.482765][ T9617] RAX: ffffffffffffffda RBX: 00007ff6d6625fa0 RCX: 00007ff6d639de59 [ 369.490802][ T9617] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004 [ 369.499160][ T9617] RBP: 00007ff6d6433e6f R08: 0000000000000000 R09: 0000000000000000 [ 369.510322][ T9617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.519230][ T9617] R13: 00007ff6d6626038 R14: 00007ff6d6625fa0 R15: 00007ff6d674fa48 [ 369.528680][ T9617] [ 369.532427][ T9617] Kernel Offset: disabled [ 369.536845][ T9617] Rebooting in 86400 seconds..