last executing test programs: 3.398171122s ago: executing program 0 (id=4826): socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010029bd7000fed6df250200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4008004) write$nci(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) 2.977651657s ago: executing program 0 (id=4829): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4000800) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff2}, {}, {0x8, 0xb}}}, 0x24}}, 0x40004) 2.502730075s ago: executing program 0 (id=4832): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2.23278665s ago: executing program 0 (id=4835): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, 0x0}, 0x20) 2.140553156s ago: executing program 2 (id=4836): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x336, 0x0, 0x0, 0xc9e}, 0x600) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x44}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffa}], 0x0, 0xfffffffa, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64], 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000380)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) 2.123306037s ago: executing program 0 (id=4837): socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010029bd7000fed6df250200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4008004) write$nci(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) 1.755845298s ago: executing program 1 (id=4840): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4000800) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff2}, {}, {0x8, 0xb}}}, 0x24}}, 0x40004) 1.747283408s ago: executing program 0 (id=4841): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, 0x0) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 1.505862542s ago: executing program 2 (id=4842): close(0x3) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default]}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) close(0x3) 1.315318163s ago: executing program 1 (id=4843): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40440dc}, 0x4000080) 1.094275436s ago: executing program 3 (id=4844): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x21, 0x2, 0x2) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.067777018s ago: executing program 2 (id=4845): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, 0x0}, 0x20) 1.024568971s ago: executing program 1 (id=4846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}, [{0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 870.92908ms ago: executing program 2 (id=4847): unshare(0x22020400) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl(r0, 0x8b29, &(0x7f0000000040)) 867.80363ms ago: executing program 3 (id=4848): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 733.278987ms ago: executing program 3 (id=4849): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x8, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x5}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004043}, 0x20040000) 688.24922ms ago: executing program 2 (id=4850): socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x10000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010029bd7000fed6df250200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4008004) write$nci(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) 664.754581ms ago: executing program 1 (id=4851): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4000800) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff2}, {}, {0x8, 0xb}}}, 0x24}}, 0x40004) 540.117528ms ago: executing program 3 (id=4852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, 0x0, &(0x7f0000000180)}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) pipe(&(0x7f0000000540)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000580)={0x0, 0x7fffffff}, &(0x7f00000005c0)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) unshare(0x400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 307.270522ms ago: executing program 2 (id=4853): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 240.475236ms ago: executing program 3 (id=4854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6362, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7f, 0xf2}}, @TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x7, 0x5, 0xd9c0}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 148.015551ms ago: executing program 1 (id=4855): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, 0x0}, 0x20) 27.144798ms ago: executing program 3 (id=4856): close(0x3) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default]}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) accept$netrom(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) close(0x3) 0s ago: executing program 1 (id=4857): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) kernel console output (not intermixed with test programs): h an up link [ 440.184989][T15113] syzkaller0: entered promiscuous mode [ 440.203882][T15113] syzkaller0: entered allmulticast mode [ 440.239750][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.246491][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.103651][T15121] tipc: Enabled bearer , priority 0 [ 442.121291][T15129] tipc: Resetting bearer [ 442.144746][T15119] tipc: Disabling bearer [ 442.227602][T15132] syzkaller0: entered promiscuous mode [ 442.233088][T15132] syzkaller0: entered allmulticast mode [ 442.306581][T15136] tipc: Enabling of bearer rejected, failed to enable media [ 442.497117][ T786] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 442.665954][ T786] usb 3-1: device descriptor read/64, error -71 [ 442.848749][T15157] syzkaller0: entered promiscuous mode [ 442.854275][T15157] syzkaller0: entered allmulticast mode [ 442.946293][ T786] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 443.096018][ T786] usb 3-1: device descriptor read/64, error -71 [ 443.216232][ T786] usb usb3-port1: attempt power cycle [ 443.639826][ T786] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 443.686871][ T786] usb 3-1: device descriptor read/8, error -71 [ 443.966561][ T786] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 444.006931][ T786] usb 3-1: device descriptor read/8, error -71 [ 444.144856][ T786] usb usb3-port1: unable to enumerate USB device [ 444.775258][T15167] batadv_slave_1: entered promiscuous mode [ 444.783300][T15166] batadv_slave_1: left promiscuous mode [ 444.889906][T15171] netlink: 'syz.3.3582': attribute type 13 has an invalid length. [ 444.921690][T15173] tipc: Enabling of bearer rejected, failed to enable media [ 445.503545][T15198] syzkaller0: entered promiscuous mode [ 445.516197][T15198] syzkaller0: entered allmulticast mode [ 446.346039][ T966] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 446.508487][ T966] usb 4-1: device descriptor read/64, error -71 [ 446.781862][ T966] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 446.936025][ T966] usb 4-1: device descriptor read/64, error -71 [ 447.057080][ T966] usb usb4-port1: attempt power cycle [ 447.470144][ T966] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 447.506940][ T966] usb 4-1: device descriptor read/8, error -71 [ 447.778193][ T966] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 447.817786][ T966] usb 4-1: device descriptor read/8, error -71 [ 447.912953][T15204] 8021q: VLANs not supported on hsr0 [ 447.923977][T15214] tipc: Enabling of bearer rejected, failed to enable media [ 447.944642][ T966] usb usb4-port1: unable to enumerate USB device [ 448.002509][T15228] syzkaller0: entered promiscuous mode [ 448.008320][T15228] syzkaller0: entered allmulticast mode [ 448.246866][T15237] syzkaller0: entered promiscuous mode [ 448.252541][T15237] syzkaller0: entered allmulticast mode [ 448.599680][T15250] syzkaller0: entered promiscuous mode [ 448.609588][T15250] syzkaller0: entered allmulticast mode [ 450.870968][T15258] tipc: Enabling of bearer rejected, failed to enable media [ 451.139296][T15300] syzkaller0: entered promiscuous mode [ 451.144828][T15300] syzkaller0: entered allmulticast mode [ 451.397557][T15311] tipc: Enabling of bearer rejected, failed to enable media [ 451.465960][ T5850] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 451.525243][T15314] syzkaller0: entered promiscuous mode [ 451.530954][T15314] syzkaller0: entered allmulticast mode [ 451.636050][ T5850] usb 2-1: device descriptor read/64, error -71 [ 451.906681][ T5850] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 452.079407][ T5850] usb 2-1: device descriptor read/64, error -71 [ 452.200092][ T5850] usb usb2-port1: attempt power cycle [ 452.559833][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 452.605986][ T5850] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 452.639118][ T5850] usb 2-1: device descriptor read/8, error -71 [ 452.908198][ T5850] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 452.948947][ T5850] usb 2-1: device descriptor read/8, error -71 [ 453.068066][ T5850] usb usb2-port1: unable to enumerate USB device [ 453.731621][T15337] syzkaller0: entered promiscuous mode [ 453.741118][T15337] syzkaller0: entered allmulticast mode [ 453.829480][T15343] syzkaller0: entered promiscuous mode [ 453.835121][T15343] syzkaller0: entered allmulticast mode [ 454.113879][T15355] tipc: Enabled bearer , priority 0 [ 454.134588][T15354] tipc: Disabling bearer [ 454.246126][ T5850] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 454.402380][T15366] syzkaller0: entered promiscuous mode [ 454.416803][T15366] syzkaller0: entered allmulticast mode [ 454.445977][ T5850] usb 4-1: Using ep0 maxpacket: 32 [ 454.462073][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.479326][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.489693][ T5850] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 454.503608][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.516887][ T5850] usb 4-1: config 0 descriptor?? [ 454.942414][ T5850] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 454.954240][ T5850] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 455.143742][ T5850] ft260 0003:0403:6030.000F: chip code: 0000 0000 [ 455.344479][ T5850] ft260 0003:0403:6030.000F: failed to retrieve system status [ 455.354724][ T5850] ft260: probe of 0003:0403:6030.000F failed with error -5 [ 456.708001][T15398] syzkaller0: entered promiscuous mode [ 456.713590][T15398] syzkaller0: entered allmulticast mode [ 456.789493][T15396] netlink: 'syz.1.3641': attribute type 1 has an invalid length. [ 456.822689][T15396] bond3: (slave bridge2): making interface the new active one [ 456.832157][T15396] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 456.895972][ T5850] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 457.005620][ T966] usb 4-1: USB disconnect, device number 40 [ 457.070064][ T5850] usb 1-1: device descriptor read/64, error -71 [ 457.123947][T15414] syzkaller0: entered promiscuous mode [ 457.134429][T15414] syzkaller0: entered allmulticast mode [ 457.170096][T15418] bond2: (slave veth15): Enslaving as an active interface with a down link [ 457.211777][T15418] bond2: (slave ip6gretap1): making interface the new active one [ 457.220663][T15418] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 457.316977][T15422] syzkaller0: entered promiscuous mode [ 457.323026][T15422] syzkaller0: entered allmulticast mode [ 457.351037][ T5850] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 457.368391][T15422] tipc: Enabled bearer , priority 0 [ 457.378165][T15421] tipc: Resetting bearer [ 457.410472][T15421] tipc: Disabling bearer [ 457.445212][T15426] syzkaller0: entered promiscuous mode [ 457.451213][T15426] syzkaller0: entered allmulticast mode [ 457.509159][ T5850] usb 1-1: device descriptor read/64, error -71 [ 457.639754][ T5850] usb usb1-port1: attempt power cycle [ 458.046534][ T5850] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 458.089469][ T5850] usb 1-1: device descriptor read/8, error -71 [ 458.368126][ T5850] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 458.406747][ T5850] usb 1-1: device descriptor read/8, error -71 [ 458.526463][ T5850] usb usb1-port1: unable to enumerate USB device [ 459.562277][T15453] bond1: (slave veth7): Enslaving as an active interface with a down link [ 459.664116][T15457] syzkaller0: entered promiscuous mode [ 459.674655][T15457] syzkaller0: entered allmulticast mode [ 459.859974][T15470] tipc: Enabling of bearer rejected, failed to enable media [ 459.993505][T15479] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3669'. [ 460.006310][T15479] block nbd0: not configured, cannot reconfigure [ 460.074616][T15481] bond1: (slave veth19): Enslaving as an active interface with a down link [ 460.378700][T15499] syzkaller0: entered promiscuous mode [ 460.384226][T15499] syzkaller0: entered allmulticast mode [ 460.446367][ T5850] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 460.636838][ T5850] usb 1-1: no configurations [ 460.645685][ T5850] usb 1-1: can't read configurations, error -22 [ 460.765688][T15513] tipc: Enabled bearer , priority 0 [ 460.789557][T15512] tipc: Disabling bearer [ 460.806135][ T5850] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 460.917894][T15519] netlink: 'syz.1.3688': attribute type 13 has an invalid length. [ 460.987519][ T5850] usb 1-1: no configurations [ 461.005378][ T5850] usb 1-1: can't read configurations, error -22 [ 461.017121][ T5850] usb usb1-port1: attempt power cycle [ 461.081478][T15525] wg1 speed is unknown, defaulting to 1000 [ 461.201166][T15531] syzkaller1: entered promiscuous mode [ 461.207137][T15531] syzkaller1: entered allmulticast mode [ 461.259937][T15536] tipc: Enabled bearer , priority 0 [ 461.282214][T15535] tipc: Disabling bearer [ 461.457198][ T5850] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 461.486985][ T5850] usb 1-1: no configurations [ 461.491636][ T5850] usb 1-1: can't read configurations, error -22 [ 461.645957][ T5850] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 461.679217][ T5850] usb 1-1: no configurations [ 461.683838][ T5850] usb 1-1: can't read configurations, error -22 [ 461.690562][ T5850] usb usb1-port1: unable to enumerate USB device [ 462.154496][T15557] tipc: Enabled bearer , priority 0 [ 462.181418][T15556] tipc: Disabling bearer [ 462.417103][T15571] bridge_slave_0: left allmulticast mode [ 462.422801][T15571] bridge_slave_0: left promiscuous mode [ 462.431892][T15571] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.570108][T15579] tipc: Enabled bearer , priority 0 [ 462.605697][T15578] tipc: Disabling bearer [ 463.070378][T15603] tipc: Enabled bearer , priority 0 [ 463.091305][T15602] tipc: Disabling bearer [ 463.202435][T15607] syzkaller0: entered promiscuous mode [ 463.208561][T15607] syzkaller0: entered allmulticast mode [ 463.380439][T15613] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3731'. [ 463.646075][T15629] tipc: Enabled bearer , priority 0 [ 463.688313][ T786] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 463.698117][T15628] tipc: Disabling bearer [ 463.742423][T15635] bridge_slave_0: left allmulticast mode [ 463.749925][T15635] bridge_slave_0: left promiscuous mode [ 463.755612][T15635] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.874290][T15639] syzkaller0: entered promiscuous mode [ 463.880050][T15639] syzkaller0: entered allmulticast mode [ 463.906170][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 463.931706][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.943451][ T5847] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 463.952242][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.962622][ T786] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 463.976849][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.990316][ T786] usb 1-1: config 0 descriptor?? [ 464.042041][T15644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3743'. [ 464.137017][ T5847] usb 4-1: no configurations [ 464.142173][ T5847] usb 4-1: can't read configurations, error -22 [ 464.308924][ T5847] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 464.396156][ T5770] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 464.409736][ T786] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 464.419411][ T786] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 464.499098][ T5847] usb 4-1: no configurations [ 464.503772][ T5847] usb 4-1: can't read configurations, error -22 [ 464.510426][ T5847] usb usb4-port1: attempt power cycle [ 464.576102][ T5770] usb 2-1: Using ep0 maxpacket: 32 [ 464.583106][ T5770] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 464.591380][ T5770] usb 2-1: config 0 has no interface number 0 [ 464.597590][ T5770] usb 2-1: config 0 interface 184 has no altsetting 0 [ 464.610378][ T5770] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 464.610563][ T786] ft260 0003:0403:6030.0010: chip code: 0000 0000 [ 464.626195][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.634276][ T5770] usb 2-1: Product: syz [ 464.638606][ T5770] usb 2-1: Manufacturer: syz [ 464.643313][ T5770] usb 2-1: SerialNumber: syz [ 464.651865][ T5770] usb 2-1: config 0 descriptor?? [ 464.662253][ T5770] smsc75xx v1.0.0 [ 464.811465][ T786] ft260 0003:0403:6030.0010: failed to retrieve system status [ 464.819323][ T786] ft260: probe of 0003:0403:6030.0010 failed with error -5 [ 464.935957][ T5847] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 464.967456][ T5847] usb 4-1: no configurations [ 464.972145][ T5847] usb 4-1: can't read configurations, error -22 [ 465.147038][ T5847] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 465.189102][ T5847] usb 4-1: no configurations [ 465.193791][ T5847] usb 4-1: can't read configurations, error -22 [ 465.204635][ T5847] usb usb4-port1: unable to enumerate USB device [ 465.221910][T15662] tipc: Enabled bearer , priority 0 [ 465.231332][T15662] syzkaller0: entered promiscuous mode [ 465.237098][T15662] syzkaller0: entered allmulticast mode [ 465.261272][T15662] tipc: Resetting bearer [ 465.270857][T15661] tipc: Resetting bearer [ 465.278361][ T5770] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 465.289540][ T5770] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 465.308572][T15661] tipc: Disabling bearer [ 465.500900][ T5770] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 465.514229][ T5770] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 465.529296][ T5770] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 465.540269][ T5770] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 465.689269][T15673] syzkaller0: entered promiscuous mode [ 465.694817][T15673] syzkaller0: entered allmulticast mode [ 465.890941][T15676] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3754'. [ 466.265521][ T5847] usb 1-1: USB disconnect, device number 40 [ 466.302596][T15693] bridge_slave_0: left allmulticast mode [ 466.308867][T15693] bridge_slave_0: left promiscuous mode [ 466.314600][T15693] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.476107][ T5770] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 466.549321][T15701] syzkaller0: entered promiscuous mode [ 466.554911][T15701] syzkaller0: entered allmulticast mode [ 466.626470][ T5770] usb 3-1: device descriptor read/64, error -71 [ 466.831293][T15705] tipc: Enabling of bearer rejected, failed to enable media [ 467.031361][T15717] loop3: detected capacity change from 0 to 512 [ 467.651573][ T27] usb 2-1: USB disconnect, device number 11 [ 467.686837][ T5770] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 467.856212][ T5770] usb 3-1: device descriptor read/64, error -71 [ 467.919612][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 467.956021][T15729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3771'. [ 467.965121][T15729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3771'. [ 467.986383][ T5770] usb usb3-port1: attempt power cycle [ 468.286108][ T786] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 468.294391][T15742] loop3: detected capacity change from 0 to 512 [ 468.326071][T15640] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 468.396381][ T5770] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 468.426706][ T5770] usb 3-1: device descriptor read/8, error -71 [ 468.466860][ T786] usb 1-1: no configurations [ 468.471660][ T786] usb 1-1: can't read configurations, error -22 [ 468.525957][T15640] usb 2-1: Using ep0 maxpacket: 32 [ 468.533133][T15640] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 468.541632][T15640] usb 2-1: config 0 has no interface number 0 [ 468.547918][T15640] usb 2-1: config 0 interface 184 has no altsetting 0 [ 468.558018][T15640] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 468.567148][T15640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.575156][T15640] usb 2-1: Product: syz [ 468.579620][T15640] usb 2-1: Manufacturer: syz [ 468.584279][T15640] usb 2-1: SerialNumber: syz [ 468.590741][T15640] usb 2-1: config 0 descriptor?? [ 468.598676][T15640] smsc75xx v1.0.0 [ 468.626594][ T786] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 468.696084][ T5770] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 468.726911][ T5770] usb 3-1: device descriptor read/8, error -71 [ 468.809428][ T786] usb 1-1: no configurations [ 468.814318][ T786] usb 1-1: can't read configurations, error -22 [ 468.821026][ T786] usb usb1-port1: attempt power cycle [ 468.846861][ T5770] usb usb3-port1: unable to enumerate USB device [ 469.067040][T15744] syzkaller0: entered promiscuous mode [ 469.072674][T15744] syzkaller0: entered allmulticast mode [ 469.211546][T15640] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 469.222674][T15640] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 469.246217][ T786] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 469.288116][ T786] usb 1-1: no configurations [ 469.293879][ T786] usb 1-1: can't read configurations, error -22 [ 469.324920][T15750] tipc: Enabled bearer , priority 0 [ 469.332390][T15750] syzkaller0: entered promiscuous mode [ 469.339888][T15750] syzkaller0: entered allmulticast mode [ 469.365800][T15750] tipc: Resetting bearer [ 469.377274][T15749] tipc: Resetting bearer [ 469.397246][T15749] tipc: Disabling bearer [ 469.433590][T15640] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 469.447874][T15640] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 469.457613][T15640] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 469.467371][ T786] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 469.476258][T15640] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 469.509203][ T786] usb 1-1: no configurations [ 469.513849][ T786] usb 1-1: can't read configurations, error -22 [ 469.520582][ T786] usb usb1-port1: unable to enumerate USB device [ 469.783939][T15758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3785'. [ 469.793500][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3785'. [ 470.007873][T15763] tipc: Enabling of bearer rejected, failed to enable media [ 470.065757][T15768] loop3: detected capacity change from 0 to 512 [ 470.406058][ T5850] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 470.556041][ T5850] usb 3-1: device descriptor read/64, error -71 [ 470.830961][T15776] netlink: 'syz.3.3790': attribute type 13 has an invalid length. [ 470.890788][ T5850] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 471.066288][ T5850] usb 3-1: device descriptor read/64, error -71 [ 471.099511][ T23] usb 2-1: USB disconnect, device number 12 [ 471.203162][ T5850] usb usb3-port1: attempt power cycle [ 471.210919][T15789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3796'. [ 471.326211][T15640] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 471.477981][T15794] loop1: detected capacity change from 0 to 512 [ 471.517962][T15640] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 471.529346][T15349] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 471.536100][T15640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.567570][T15640] usb 4-1: config 0 descriptor?? [ 471.630943][T15801] netlink: 'syz.0.3801': attribute type 13 has an invalid length. [ 471.696909][ T5850] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 471.729169][ T5850] usb 3-1: device descriptor read/8, error -71 [ 471.945973][ T23] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 471.992309][T15640] usbhid 4-1:0.0: can't add hid device: -71 [ 471.999073][T15640] usbhid: probe of 4-1:0.0 failed with error -71 [ 472.006274][ T5850] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 472.008736][T15640] usb 4-1: USB disconnect, device number 45 [ 472.049950][ T5850] usb 3-1: device descriptor read/8, error -71 [ 472.187796][ T5850] usb usb3-port1: unable to enumerate USB device [ 472.196872][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.207876][ T23] usb 1-1: config 0 has no interfaces? [ 472.215240][ T23] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 472.224374][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.232675][ T23] usb 1-1: Product: syz [ 472.238170][ T23] usb 1-1: Manufacturer: syz [ 472.242828][ T23] usb 1-1: SerialNumber: syz [ 472.251347][ T23] usb 1-1: config 0 descriptor?? [ 472.461385][T15640] usb 1-1: USB disconnect, device number 45 [ 472.888218][ T786] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 473.006917][T15811] syzkaller0: entered promiscuous mode [ 473.012443][T15811] syzkaller0: entered allmulticast mode [ 473.036021][ T5084] Bluetooth: hci3: command 0x0405 tx timeout [ 473.077260][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 473.093337][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.114816][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.131593][ T786] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 473.152056][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.178137][ T786] usb 4-1: config 0 descriptor?? [ 473.352161][T15824] tipc: Enabling of bearer rejected, failed to enable media [ 473.369832][T15821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3812'. [ 473.404647][T15821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3812'. [ 473.598579][ T786] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 473.623151][ T786] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 473.751492][T15842] syzkaller0: entered promiscuous mode [ 473.757488][T15842] syzkaller0: entered allmulticast mode [ 473.792365][ T786] ft260 0003:0403:6030.0011: chip code: 0000 0000 [ 473.886104][ T5850] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 473.976728][T15640] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 473.994706][ T786] ft260 0003:0403:6030.0011: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 474.082097][ T5850] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 474.091552][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.101624][ T5850] usb 1-1: config 0 descriptor?? [ 474.136033][T15640] usb 2-1: device descriptor read/64, error -71 [ 474.196073][ T786] ft260 0003:0403:6030.0011: failed to retrieve status: -32, no wakeup [ 474.205615][ T786] ft260 0003:0403:6030.0011: failed to retrieve status: -32 [ 474.219740][ T786] ft260 0003:0403:6030.0011: failed to reset I2C controller: -71 [ 474.241707][ T786] usb 4-1: USB disconnect, device number 46 [ 474.416005][T15640] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 474.494280][T15861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3823'. [ 474.521785][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 474.530537][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 474.541680][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 474.549265][ T5850] usbhid 1-1:0.0: can't add hid device: -32 [ 474.555295][ T5850] usbhid: probe of 1-1:0.0 failed with error -32 [ 474.555708][T15863] tipc: Enabling of bearer rejected, failed to enable media [ 474.568764][ T5850] usb 1-1: USB disconnect, device number 46 [ 474.586196][T15640] usb 2-1: device descriptor read/64, error -71 [ 474.717656][T15640] usb usb2-port1: attempt power cycle [ 474.933203][T15876] syzkaller0: entered promiscuous mode [ 474.938829][T15876] syzkaller0: entered allmulticast mode [ 475.126799][T15640] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 475.172589][T15640] usb 2-1: device descriptor read/8, error -71 [ 475.190722][T15890] netlink: 'syz.0.3832': attribute type 13 has an invalid length. [ 475.250590][T15893] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3833'. [ 475.390716][T15899] tipc: Enabling of bearer rejected, failed to enable media [ 475.467139][T15640] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 475.551490][T15640] usb 2-1: device descriptor read/8, error -71 [ 475.596196][ T966] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 475.633339][T15913] syzkaller0: entered promiscuous mode [ 475.639094][T15913] syzkaller0: entered allmulticast mode [ 475.676623][T15640] usb usb2-port1: unable to enumerate USB device [ 475.786234][ T966] usb 1-1: Using ep0 maxpacket: 32 [ 475.801457][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.824883][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.863470][ T966] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 475.881652][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.889861][T15925] netlink: 'syz.3.3842': attribute type 1 has an invalid length. [ 475.896628][ T966] usb 1-1: config 0 descriptor?? [ 476.010401][T15928] netlink: 'syz.3.3843': attribute type 13 has an invalid length. [ 476.126089][T15640] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 476.326123][ T966] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 476.334647][T15640] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 476.343244][ T966] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 476.348284][T15640] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.368048][T15937] tipc: Enabling of bearer rejected, failed to enable media [ 476.376889][T15640] usb 3-1: config 0 descriptor?? [ 476.512554][ T966] ft260 0003:0403:6030.0012: chip code: 0000 0000 [ 476.661230][T15946] syzkaller0: entered promiscuous mode [ 476.667104][T15946] syzkaller0: entered allmulticast mode [ 476.713558][ T966] ft260 0003:0403:6030.0012: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 476.797514][T15640] usbhid 3-1:0.0: can't add hid device: -71 [ 476.805693][T15640] usbhid: probe of 3-1:0.0 failed with error -71 [ 476.819428][T15640] usb 3-1: USB disconnect, device number 20 [ 476.914534][ T966] ft260 0003:0403:6030.0012: failed to retrieve status: -32, no wakeup [ 476.928180][ T966] ft260 0003:0403:6030.0012: failed to retrieve status: -32 [ 476.939038][ T966] ft260 0003:0403:6030.0012: failed to reset I2C controller: -71 [ 476.963605][ T966] usb 1-1: USB disconnect, device number 47 [ 477.054985][T15960] netlink: 'syz.3.3852': attribute type 1 has an invalid length. [ 477.132945][T15964] netlink: 'syz.3.3853': attribute type 13 has an invalid length. [ 477.286672][T15970] tipc: Enabling of bearer rejected, failed to enable media [ 477.503443][T15980] syzkaller0: entered promiscuous mode [ 477.511418][T15980] syzkaller0: entered allmulticast mode [ 477.746523][T15989] netlink: 'syz.3.3862': attribute type 1 has an invalid length. [ 477.809720][T15993] netlink: 'syz.0.3864': attribute type 13 has an invalid length. [ 477.836688][T15996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3865'. [ 477.861064][T15996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3865'. [ 477.919624][T16000] syzkaller0: entered promiscuous mode [ 477.925347][T16000] syzkaller0: entered allmulticast mode [ 478.078801][T16006] tipc: Enabling of bearer rejected, failed to enable media [ 478.126518][ T966] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 478.143790][T16010] syzkaller0: entered promiscuous mode [ 478.149504][T16010] syzkaller0: entered allmulticast mode [ 478.236724][ T5850] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 478.328443][ T966] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 478.345911][ T966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.365241][ T966] usb 4-1: config 0 descriptor?? [ 478.426641][ T5850] usb 1-1: Using ep0 maxpacket: 32 [ 478.438993][ T5850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.452700][ T5850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.462763][ T5850] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 478.472049][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.484328][ T5850] usb 1-1: config 0 descriptor?? [ 478.800860][ T966] usbhid 4-1:0.0: can't add hid device: -71 [ 478.816919][ T966] usbhid: probe of 4-1:0.0 failed with error -71 [ 478.830978][ T966] usb 4-1: USB disconnect, device number 47 [ 478.923511][ T5850] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 478.955261][T16034] netlink: 'syz.1.3877': attribute type 13 has an invalid length. [ 478.956075][ T5850] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 479.029528][T16036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3878'. [ 479.043352][T16036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3878'. [ 479.121102][ T5850] ft260 0003:0403:6030.0013: chip code: 0000 0000 [ 479.213991][T16040] syzkaller0: entered promiscuous mode [ 479.220426][T16040] syzkaller0: entered allmulticast mode [ 479.254263][T16042] tipc: Enabling of bearer rejected, failed to enable media [ 479.324646][ T5850] ft260 0003:0403:6030.0013: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 479.525260][ T5850] ft260 0003:0403:6030.0013: failed to retrieve status: -32, no wakeup [ 479.540305][ T5850] ft260 0003:0403:6030.0013: failed to retrieve status: -32 [ 479.559328][ T5850] ft260 0003:0403:6030.0013: failed to reset I2C controller: -71 [ 479.602706][ T5850] usb 1-1: USB disconnect, device number 48 [ 479.874372][T16066] netlink: 'syz.3.3887': attribute type 13 has an invalid length. [ 479.948636][T16068] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 479.962979][T16068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.981130][T16070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3888'. [ 479.990429][T16070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3888'. [ 480.170630][T16079] tipc: Enabling of bearer rejected, failed to enable media [ 480.184865][T16076] syzkaller0: entered promiscuous mode [ 480.191285][T16076] syzkaller0: entered allmulticast mode [ 480.534516][T16098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3898'. [ 480.748828][T16111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3901'. [ 480.759152][T16111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3901'. [ 480.772309][T16110] netlink: 'syz.0.3900': attribute type 13 has an invalid length. [ 480.850750][T16115] syzkaller0: entered promiscuous mode [ 480.856766][T16115] syzkaller0: entered allmulticast mode [ 481.016466][ T786] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 481.045151][T16121] tipc: Enabling of bearer rejected, failed to enable media [ 481.216474][ T786] usb 3-1: Using ep0 maxpacket: 32 [ 481.236639][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.273434][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.299360][ T786] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 481.323509][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.338597][ T786] usb 3-1: config 0 descriptor?? [ 481.364601][T16137] syzkaller0: entered promiscuous mode [ 481.370997][T16137] syzkaller0: entered allmulticast mode [ 481.483459][T16142] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3912'. [ 481.640566][T16148] netlink: 'syz.0.3913': attribute type 13 has an invalid length. [ 481.761377][T16153] syzkaller0: entered promiscuous mode [ 481.767678][ T786] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 481.772327][T16153] syzkaller0: entered allmulticast mode [ 481.783772][ T786] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 481.960492][ T786] ft260 0003:0403:6030.0014: chip code: 0000 0000 [ 481.988695][T16163] syzkaller0: entered promiscuous mode [ 481.994767][T16163] syzkaller0: entered allmulticast mode [ 482.166538][ T786] ft260 0003:0403:6030.0014: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 482.238731][T16176] netlink: 'syz.1.3923': attribute type 1 has an invalid length. [ 482.368239][ T786] ft260 0003:0403:6030.0014: failed to retrieve status: -32, no wakeup [ 482.382831][ T786] ft260 0003:0403:6030.0014: failed to retrieve status: -32 [ 482.393282][ T786] ft260 0003:0403:6030.0014: failed to reset I2C controller: -71 [ 482.420863][ T786] usb 3-1: USB disconnect, device number 21 [ 482.687113][ T5847] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 482.719210][T16184] delete_channel: no stack [ 482.878937][ T5847] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 482.889156][ T5847] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 482.898607][ T5847] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 482.907933][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.957991][T16187] syzkaller0: entered promiscuous mode [ 482.963505][T16187] syzkaller0: entered allmulticast mode [ 483.112126][T16191] __nla_validate_parse: 4 callbacks suppressed [ 483.112137][T16191] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3929'. [ 483.165175][T16193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3930'. [ 483.174531][T16193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3930'. [ 483.260648][T16197] netlink: 'syz.2.3932': attribute type 1 has an invalid length. [ 483.286208][ T786] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 483.467892][ T786] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 483.481808][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.505970][ T786] usb 1-1: config 0 descriptor?? [ 483.610696][T16205] loop2: detected capacity change from 0 to 512 [ 483.875228][T15349] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 483.950731][ T786] usbhid 1-1:0.0: can't add hid device: -71 [ 483.964918][ T786] usbhid: probe of 1-1:0.0 failed with error -71 [ 483.977707][ T786] usb 1-1: USB disconnect, device number 49 [ 484.041578][T16215] syzkaller0: entered promiscuous mode [ 484.047249][T16215] syzkaller0: entered allmulticast mode [ 484.172759][T16217] bond1: option mode: unable to set because the bond device has slaves [ 484.194312][T16217] bond1: (slave veth9): Enslaving as an active interface with a down link [ 484.284594][ T5772] Bluetooth: hci1: command 0x0406 tx timeout [ 484.341261][T16219] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3939'. [ 484.352867][T16221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3940'. [ 484.362712][T16221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3940'. [ 484.466486][T16225] netlink: 'syz.3.3941': attribute type 1 has an invalid length. [ 484.643385][T16235] syzkaller0: entered promiscuous mode [ 484.658438][T16235] syzkaller0: entered allmulticast mode [ 485.011708][T16251] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3951'. [ 485.110284][T16254] loop0: detected capacity change from 0 to 512 [ 485.405642][ T786] usb 2-1: USB disconnect, device number 17 [ 485.824959][T16270] netlink: 'syz.2.3956': attribute type 1 has an invalid length. [ 486.015401][T16273] syzkaller0: entered promiscuous mode [ 486.036217][T16273] syzkaller0: entered allmulticast mode [ 486.203040][T16280] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3960'. [ 486.828682][ T786] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 486.849727][T16293] loop2: detected capacity change from 0 to 512 [ 486.902245][T15349] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 486.996097][T15640] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 487.027671][ T786] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 487.059509][ T786] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 487.081243][ T786] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 487.093450][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.225182][T15640] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 487.269224][T15640] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 487.308033][T15640] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 487.318844][T15640] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.333470][T15640] usb 1-1: Product: syz [ 487.338084][T15640] usb 1-1: Manufacturer: syz [ 487.342854][T15640] usb 1-1: SerialNumber: syz [ 487.565207][ T5850] usb 1-1: USB disconnect, device number 50 [ 487.686064][ T966] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 487.878156][ T966] usb 3-1: Using ep0 maxpacket: 32 [ 487.885584][ T966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.901228][ T966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.911465][ T966] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 487.921852][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.937043][ T966] usb 3-1: config 0 descriptor?? [ 488.209779][T16307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3970'. [ 488.378159][ T966] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 488.401172][ T966] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 488.577241][ T966] ft260 0003:0403:6030.0015: chip code: 0000 0000 [ 488.673235][T16318] loop0: detected capacity change from 0 to 512 [ 488.720474][T15349] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 488.786918][ T966] ft260 0003:0403:6030.0015: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 488.996417][ T966] ft260 0003:0403:6030.0015: failed to retrieve status: -32, no wakeup [ 489.015612][ T966] ft260 0003:0403:6030.0015: failed to retrieve status: -32 [ 489.036015][ T966] ft260 0003:0403:6030.0015: failed to reset I2C controller: -71 [ 489.061384][T16334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3980'. [ 489.065519][ T966] usb 3-1: USB disconnect, device number 22 [ 489.163360][T16336] tipc: Enabled bearer , priority 0 [ 489.194386][T16336] syzkaller0: entered promiscuous mode [ 489.200356][T16336] syzkaller0: entered allmulticast mode [ 489.207024][T16336] tipc: Resetting bearer [ 489.217157][T16335] tipc: Resetting bearer [ 489.276200][T15640] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 489.448661][ T786] usb 2-1: USB disconnect, device number 18 [ 489.515094][T15640] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 489.531673][T15640] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 489.563311][T15640] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 489.577383][T15640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.613852][T15640] usb 4-1: Product: syz [ 489.634360][T15640] usb 4-1: Manufacturer: syz [ 489.655197][T15640] usb 4-1: SerialNumber: syz [ 489.889818][T15640] usb 4-1: USB disconnect, device number 48 [ 491.125687][T16356] loop3: detected capacity change from 0 to 512 [ 491.179905][T16333] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 492.353551][T16335] tipc: Disabling bearer [ 492.423716][T16361] syzkaller0: entered promiscuous mode [ 492.433485][T16361] syzkaller0: entered allmulticast mode [ 492.563888][T16372] netlink: 'syz.3.3988': attribute type 1 has an invalid length. [ 492.788842][T16385] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3991'. [ 492.813113][T16387] bond2: option mode: unable to set because the bond device has slaves [ 492.958417][T16391] tipc: Enabled bearer , priority 0 [ 493.003454][T16390] tipc: Disabling bearer [ 493.032451][T16396] loop0: detected capacity change from 0 to 512 [ 493.246064][ T966] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 493.333904][T16333] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 493.452975][ T966] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 493.468825][ T966] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 493.489628][ T966] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 493.490371][ T786] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 493.500050][ T966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.527603][T16402] syzkaller0: entered promiscuous mode [ 493.533124][T16402] syzkaller0: entered allmulticast mode [ 493.547414][ T966] usb 2-1: Product: syz [ 493.551696][ T966] usb 2-1: Manufacturer: syz [ 493.556770][ T966] usb 2-1: SerialNumber: syz [ 493.575275][T16406] netlink: 'syz.2.4002': attribute type 1 has an invalid length. [ 493.708313][ T786] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 493.717794][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.729304][ T786] usb 4-1: config 0 descriptor?? [ 493.794205][ T23] usb 2-1: USB disconnect, device number 19 [ 493.922227][T16416] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 493.932734][T16416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 493.945210][T16418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4006'. [ 494.093349][T16423] loop0: detected capacity change from 0 to 512 [ 494.448681][ T786] usbhid 4-1:0.0: can't add hid device: -71 [ 494.454913][ T786] usbhid: probe of 4-1:0.0 failed with error -71 [ 494.460258][T16333] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 494.464202][ T786] usb 4-1: USB disconnect, device number 49 [ 494.528962][T16431] netlink: 'syz.1.4012': attribute type 1 has an invalid length. [ 494.696694][T16435] syzkaller0: entered promiscuous mode [ 494.702225][T16435] syzkaller0: entered allmulticast mode [ 495.157117][T16455] loop0: detected capacity change from 0 to 512 [ 495.494759][T16333] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 495.628073][ T23] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 495.845909][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 495.855484][ T23] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 495.885934][ T23] usb 4-1: config 0 has no interface number 0 [ 495.910683][ T23] usb 4-1: config 0 interface 184 has no altsetting 0 [ 495.932876][ T23] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 495.950854][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.966109][ T23] usb 4-1: Product: syz [ 495.973369][ T23] usb 4-1: Manufacturer: syz [ 495.978514][ T23] usb 4-1: SerialNumber: syz [ 495.987377][ T23] usb 4-1: config 0 descriptor?? [ 496.008219][ T23] smsc75xx v1.0.0 [ 496.153037][T16490] syzkaller0: entered promiscuous mode [ 496.159166][T16490] syzkaller0: entered allmulticast mode [ 496.282031][T16494] Bluetooth: MGMT ver 1.22 [ 496.549429][ T5850] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 496.634073][ T23] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 496.676088][ T23] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 496.717665][T16509] loop2: detected capacity change from 0 to 512 [ 496.754296][T16333] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 496.777241][ T5850] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 496.801951][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.836079][ T5850] usb 2-1: config 0 descriptor?? [ 496.888484][ T23] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 496.916658][ T23] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 496.929888][ T23] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 496.941583][ T23] smsc75xx: probe of 4-1:0.184 failed with error -61 [ 497.234885][T16518] syzkaller0: entered promiscuous mode [ 497.240575][T16518] syzkaller0: entered allmulticast mode [ 497.451264][ T5850] usbhid 2-1:0.0: can't add hid device: -71 [ 497.476460][ T5850] usbhid: probe of 2-1:0.0 failed with error -71 [ 497.496551][ T5850] usb 2-1: USB disconnect, device number 20 [ 497.742874][T16532] wg1 speed is unknown, defaulting to 1000 [ 497.856709][T16532] netlink: 'syz.0.4046': attribute type 2 has an invalid length. [ 498.162752][ T5850] usb 4-1: USB disconnect, device number 50 [ 498.787153][T16541] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4049'. [ 498.811360][T16553] loop0: detected capacity change from 0 to 512 [ 498.859066][T16333] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 499.282099][T16557] syzkaller0: entered promiscuous mode [ 499.302365][T16557] syzkaller0: entered allmulticast mode [ 500.399897][ T5850] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 500.456067][ T27] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 500.597949][ T5850] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 500.621523][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.645112][ T5850] usb 2-1: config 0 descriptor?? [ 500.656072][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 500.667094][ T27] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 500.679697][ T27] usb 1-1: config 0 has no interface number 0 [ 500.687669][ T27] usb 1-1: config 0 interface 184 has no altsetting 0 [ 500.702533][ T27] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 500.725902][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.744219][ T27] usb 1-1: Product: syz [ 500.748529][ T27] usb 1-1: Manufacturer: syz [ 500.753175][ T27] usb 1-1: SerialNumber: syz [ 500.770979][ T27] usb 1-1: config 0 descriptor?? [ 500.788922][ T27] smsc75xx v1.0.0 [ 501.077559][ T5850] uclogic 0003:5543:0781.0016: unknown main item tag 0x2 [ 501.094906][ T5850] uclogic 0003:5543:0781.0016: item fetching failed at offset 2/5 [ 501.107430][ T5850] uclogic 0003:5543:0781.0016: parse failed [ 501.113489][ T5850] uclogic: probe of 0003:5543:0781.0016 failed with error -22 [ 501.276340][ T5850] usb 2-1: USB disconnect, device number 21 [ 501.365746][T16571] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4060'. [ 501.420062][ T27] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 501.440537][ T27] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 501.455225][T16575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4062'. [ 501.473155][T16575] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.482010][T16575] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.490852][T16575] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.499657][T16575] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.511776][T16575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4062'. [ 501.523352][T16576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4062'. [ 501.533167][T16576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4062'. [ 501.667812][ T27] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 501.682603][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.682735][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.712751][ T27] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 501.722829][ T27] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 501.733032][ T27] smsc75xx: probe of 1-1:0.184 failed with error -61 [ 502.628676][T16592] syzkaller0: entered promiscuous mode [ 502.643788][T16592] syzkaller0: entered allmulticast mode [ 502.666228][T16592] tipc: Enabling of bearer rejected, failed to enable media [ 503.094337][T16599] netlink: 'syz.2.4071': attribute type 4 has an invalid length. [ 503.114636][T16599] netlink: 'syz.2.4071': attribute type 4 has an invalid length. [ 503.234927][ T786] usb 1-1: USB disconnect, device number 51 [ 503.684832][T16611] syzkaller0: entered promiscuous mode [ 503.696023][T16611] syzkaller0: entered allmulticast mode [ 503.706614][ T786] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 503.718705][T16611] tipc: Enabling of bearer rejected, failed to enable media [ 503.934419][ T786] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 503.956017][ T786] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 503.986235][ T786] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 504.012599][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.042740][ T786] hub 1-1:4.0: bad descriptor, ignoring hub [ 504.056474][ T786] hub: probe of 1-1:4.0 failed with error -5 [ 504.064041][ T786] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 504.288134][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4083'. [ 504.310081][T16623] bond0: Caught tx_queue_len zero misconfig [ 504.364307][T16623] netlink: 'syz.2.4083': attribute type 13 has an invalid length. [ 504.373739][T16623] gretap0: refused to change device tx_queue_len [ 504.384698][T16623] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 504.476033][ T786] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 504.677583][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 504.686748][ T786] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 504.697327][ T786] usb 4-1: config 0 has no interface number 0 [ 504.703453][ T786] usb 4-1: config 0 interface 184 has no altsetting 0 [ 504.738236][ T786] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 504.747960][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.766143][ T786] usb 4-1: Product: syz [ 504.769370][T16632] syzkaller0: entered promiscuous mode [ 504.775900][ T786] usb 4-1: Manufacturer: syz [ 504.775917][ T786] usb 4-1: SerialNumber: syz [ 504.778664][ T786] usb 4-1: config 0 descriptor?? [ 504.792471][T16632] syzkaller0: entered allmulticast mode [ 504.802725][ T786] smsc75xx v1.0.0 [ 504.804130][T16632] tipc: Enabling of bearer rejected, failed to enable media [ 505.412932][ T786] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 505.445880][ T786] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 505.561851][T16647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 505.573213][T16647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 505.597002][T16647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 505.617270][T16647] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 505.624491][T10143] syz_tun (unregistering): left promiscuous mode [ 505.631386][T16647] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 505.639063][T16647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 505.684659][ T786] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 505.685544][T16645] wg1 speed is unknown, defaulting to 1000 [ 505.696583][ T786] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 505.711817][ T786] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 505.721450][ T786] smsc75xx: probe of 4-1:0.184 failed with error -61 [ 505.755489][ T3444] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.766394][ T5770] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 505.849792][ T3444] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.899417][T16645] chnl_net:caif_netlink_parms(): no params data found [ 505.931323][ T3444] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.956046][ T5770] usb 2-1: Using ep0 maxpacket: 32 [ 505.963027][ T5770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.974397][ T5770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.984295][ T5770] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 505.993672][ T5770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.004374][ T5770] usb 2-1: config 0 descriptor?? [ 506.028202][ T3444] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 506.036865][ T3444] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 506.047432][ T3444] bridge0: port 2(netdevsim0) entered disabled state [ 506.059083][ T3444] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.097163][T16645] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.104408][T16645] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.111916][T16645] bridge_slave_0: entered allmulticast mode [ 506.122465][T16645] bridge_slave_0: entered promiscuous mode [ 506.133749][T16645] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.141460][T16645] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.148982][T16645] bridge_slave_1: entered allmulticast mode [ 506.156635][T16645] bridge_slave_1: entered promiscuous mode [ 506.195111][T16645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.208664][T16645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.301035][T16645] team0: Port device team_slave_0 added [ 506.328528][T16645] team0: Port device team_slave_1 added [ 506.397789][T16645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.415129][T16645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.476606][ T786] usb 1-1: USB disconnect, device number 52 [ 506.486153][T16645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.489121][ T5770] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 506.512716][ T5770] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 506.531948][T16645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.534813][ T3444] tipc: Left network mode [ 506.559104][T16645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.586056][T16645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.640063][ T3444] ip6gretap0 (unregistering): left promiscuous mode [ 506.668910][ T5770] ft260 0003:0403:6030.0017: chip code: 0000 0000 [ 506.694891][ T3444] bond1: (slave ip6gretap1): Releasing active interface [ 506.720576][T16657] syzkaller0: entered promiscuous mode [ 506.730082][T16657] syzkaller0: entered allmulticast mode [ 506.882340][ T5770] ft260 0003:0403:6030.0017: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 507.022900][T16645] hsr_slave_0: entered promiscuous mode [ 507.066631][T16645] hsr_slave_1: entered promiscuous mode [ 507.084672][T16645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 507.094270][ T5770] ft260 0003:0403:6030.0017: failed to retrieve status: -32, no wakeup [ 507.113293][T16645] Cannot create hsr debugfs directory [ 507.120673][ T5770] ft260 0003:0403:6030.0017: failed to retrieve status: -5 [ 507.257928][ T27] usb 4-1: USB disconnect, device number 51 [ 507.336044][ T5770] ft260 0003:0403:6030.0017: failed to reset I2C controller: -71 [ 507.419202][ T5770] usb 2-1: USB disconnect, device number 22 [ 507.675993][ T5772] Bluetooth: hci4: command tx timeout [ 507.716223][T16682] syzkaller0: entered promiscuous mode [ 507.726864][T16682] syzkaller0: entered allmulticast mode [ 507.785483][T16681] tipc: Enabling of bearer rejected, failed to enable media [ 508.609614][T16702] netlink: 'syz.1.4103': attribute type 13 has an invalid length. [ 508.803218][ T3444] hsr_slave_0: left promiscuous mode [ 508.841481][ T3444] hsr_slave_1: left promiscuous mode [ 508.895965][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.951976][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.114595][ T3444] bond6 (unregistering): Released all slaves [ 509.193125][ T3444] bond5 (unregistering): Released all slaves [ 509.245502][ T3444] bond4 (unregistering): Released all slaves [ 509.331434][ T3444] bond1 (unregistering): (slave veth19): Releasing active interface [ 509.377618][ T3444] bond1 (unregistering): (slave veth15): Releasing active interface [ 509.424975][ T3444] bond3 (unregistering): Released all slaves [ 509.484973][ T3444] bond2 (unregistering): Released all slaves [ 509.552108][ T3444] bond1 (unregistering): (slave veth5): Releasing active interface [ 509.633225][ T3444] bond1 (unregistering): (slave veth3): Releasing active interface [ 509.662542][ T3444] bond1 (unregistering): Released all slaves [ 509.765253][ T5772] Bluetooth: hci4: command tx timeout [ 510.671523][ T3444] team0 (unregistering): Port device team_slave_1 removed [ 510.715258][ T3444] team0 (unregistering): Port device team_slave_0 removed [ 510.764737][ T3444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.811230][ T3444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.114969][ T3444] bond0 (unregistering): Released all slaves [ 511.259005][T16724] tipc: Enabling of bearer rejected, failed to enable media [ 511.268936][T16726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 511.276420][T16726] IPv6: NLM_F_CREATE should be set when creating new route [ 511.383800][T16645] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 511.456919][T16645] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 511.539700][T16645] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 511.608363][T16645] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 511.689671][T16740] netlink: 'syz.1.4114': attribute type 13 has an invalid length. [ 511.838197][ T5772] Bluetooth: hci4: command tx timeout [ 512.053542][T16645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.149576][T16645] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.224161][ T1202] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.231408][ T1202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.271505][T16766] syzkaller0: entered promiscuous mode [ 512.282393][T16766] syzkaller0: entered allmulticast mode [ 512.306637][ T1202] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.313802][ T1202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.053007][T16645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.209718][T16645] veth0_vlan: entered promiscuous mode [ 513.258515][T16645] veth1_vlan: entered promiscuous mode [ 513.369943][T16645] veth0_macvtap: entered promiscuous mode [ 513.394609][T16645] veth1_macvtap: entered promiscuous mode [ 513.463394][T16645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.504601][T16645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.537197][T16645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.580646][T16645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.629324][T16645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.657358][T16645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.679222][T16645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.698268][T16645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.736090][T16645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.769463][T16645] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.825638][T16803] netlink: 'syz.1.4128': attribute type 13 has an invalid length. [ 513.926490][ T5772] Bluetooth: hci4: command tx timeout [ 513.987496][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.008475][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.050490][ T1202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.051320][T16806] syzkaller0: entered promiscuous mode [ 514.064300][T16806] syzkaller0: entered allmulticast mode [ 514.075253][ T1202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.776008][ T966] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 514.965915][ T966] usb 2-1: Using ep0 maxpacket: 32 [ 514.980974][ T966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.002894][ T966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.023228][ T966] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 515.045975][ T966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.066921][ T966] usb 2-1: config 0 descriptor?? [ 515.500772][ T966] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 515.525911][ T966] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 515.653029][T16828] netlink: 'syz.3.4137': attribute type 13 has an invalid length. [ 515.700522][ T966] ft260 0003:0403:6030.0018: chip code: 0000 0000 [ 515.834574][T16830] syzkaller0: entered promiscuous mode [ 515.842453][T16830] syzkaller0: entered allmulticast mode [ 515.901200][ T966] ft260 0003:0403:6030.0018: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 516.117451][ T966] ft260 0003:0403:6030.0018: failed to retrieve status: -32, no wakeup [ 516.135710][ T966] ft260 0003:0403:6030.0018: failed to retrieve status: -5 [ 516.144433][T16839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4140'. [ 516.163849][T16839] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4140'. [ 516.345270][ T966] ft260 0003:0403:6030.0018: failed to reset I2C controller: -71 [ 516.403922][ T966] usb 2-1: USB disconnect, device number 23 [ 517.062978][T16862] syzkaller0: entered promiscuous mode [ 517.075938][T16862] syzkaller0: entered allmulticast mode [ 517.134729][T16863] tipc: Enabling of bearer rejected, failed to enable media [ 517.153890][T16860] syzkaller0: entered promiscuous mode [ 517.167943][T16860] syzkaller0: entered allmulticast mode [ 517.766572][ T5770] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 517.917584][ T5847] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 517.970202][ T5770] usb 3-1: Using ep0 maxpacket: 32 [ 517.987774][ T5770] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 518.005982][ T5770] usb 3-1: config 0 has no interface number 0 [ 518.012235][ T5770] usb 3-1: config 0 interface 184 has no altsetting 0 [ 518.028445][ T5770] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 518.045917][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.064184][ T5770] usb 3-1: Product: syz [ 518.068442][ T5770] usb 3-1: Manufacturer: syz [ 518.073050][ T5770] usb 3-1: SerialNumber: syz [ 518.096852][ T5770] usb 3-1: config 0 descriptor?? [ 518.109145][ T5770] smsc75xx v1.0.0 [ 518.118131][ T5847] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 518.129840][ T5847] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 518.143915][ T5847] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 518.153370][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.193393][ T5847] hub 1-1:4.0: bad descriptor, ignoring hub [ 518.208451][ T5847] hub: probe of 1-1:4.0 failed with error -5 [ 518.220584][ T5847] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 518.718689][ T5770] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 518.729702][ T5770] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 518.947447][ T5770] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 518.966093][ T5770] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 518.979303][ T5770] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 518.990718][ T5770] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 519.166386][T15640] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 519.356900][T15640] usb 4-1: Using ep0 maxpacket: 32 [ 519.368999][T15640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.383254][T15640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.395534][T15640] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 519.409196][T15640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.433395][T15640] usb 4-1: config 0 descriptor?? [ 519.481939][T16886] syzkaller0: entered promiscuous mode [ 519.488361][T16886] syzkaller0: entered allmulticast mode [ 519.672722][T16889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4158'. [ 519.751210][T16891] tipc: Enabling of bearer rejected, failed to enable media [ 519.761428][T16891] syzkaller0: entered promiscuous mode [ 519.767093][T16891] syzkaller0: entered allmulticast mode [ 519.861662][T15640] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 519.869330][T15640] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 520.060435][T15640] ft260 0003:0403:6030.0019: chip code: 0000 0000 [ 520.261208][T15640] ft260 0003:0403:6030.0019: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 520.462636][T15640] ft260 0003:0403:6030.0019: failed to retrieve status: -32, no wakeup [ 520.532151][ T5770] usb 3-1: USB disconnect, device number 23 [ 520.680125][T15640] ft260 0003:0403:6030.0019: failed to reset I2C controller: -71 [ 520.728268][T15640] usb 4-1: USB disconnect, device number 52 [ 520.767019][ T786] usb 1-1: USB disconnect, device number 53 [ 521.133542][T16913] syzkaller0: entered promiscuous mode [ 521.145967][T16913] syzkaller0: entered allmulticast mode [ 521.391468][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4168'. [ 521.985942][ T5829] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 522.185928][ T5829] usb 3-1: Using ep0 maxpacket: 32 [ 522.193556][ T5829] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 522.202771][ T5829] usb 3-1: config 0 has no interface number 0 [ 522.216226][ T5829] usb 3-1: config 0 interface 184 has no altsetting 0 [ 522.235512][ T5829] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 522.258858][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.276233][ T5829] usb 3-1: Product: syz [ 522.285956][ T5829] usb 3-1: Manufacturer: syz [ 522.290843][ T5829] usb 3-1: SerialNumber: syz [ 522.297305][T16936] netlink: 'syz.3.4173': attribute type 13 has an invalid length. [ 522.320064][ T5829] usb 3-1: config 0 descriptor?? [ 522.327715][ T5829] smsc75xx v1.0.0 [ 522.618842][T16942] syzkaller0: entered promiscuous mode [ 522.647373][T16942] syzkaller0: entered allmulticast mode [ 522.730376][T16944] tipc: Enabling of bearer rejected, failed to enable media [ 522.742362][T16944] syzkaller0: entered promiscuous mode [ 522.760306][T16944] syzkaller0: entered allmulticast mode [ 522.946790][ T5829] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 522.986801][ T5829] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 523.017121][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4179'. [ 523.124966][T16950] syzkaller0: entered promiscuous mode [ 523.131196][T16950] syzkaller0: entered allmulticast mode [ 523.616681][ T5829] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 523.666457][ T5829] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 523.706029][ T5829] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 523.738430][ T5829] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 523.858583][T16969] syzkaller0: entered promiscuous mode [ 523.864342][T16969] syzkaller0: entered allmulticast mode [ 524.307538][T16973] tipc: Enabling of bearer rejected, failed to enable media [ 524.332158][T16973] syzkaller0: entered promiscuous mode [ 524.341127][T16973] syzkaller0: entered allmulticast mode [ 524.491922][T16977] syzkaller0: entered promiscuous mode [ 524.517570][T16977] syzkaller0: entered allmulticast mode [ 524.742080][ T966] usb 3-1: USB disconnect, device number 24 [ 525.016667][T16991] syzkaller0: entered promiscuous mode [ 525.035803][T16991] syzkaller0: entered allmulticast mode [ 525.526260][T17003] syzkaller0: entered promiscuous mode [ 525.538099][T17003] syzkaller0: entered allmulticast mode [ 526.076204][T15640] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 526.138650][ T786] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 526.269244][T15640] usb 1-1: Using ep0 maxpacket: 32 [ 526.287157][T15640] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 526.308567][T15640] usb 1-1: config 0 has no interface number 0 [ 526.329703][T15640] usb 1-1: config 0 interface 184 has no altsetting 0 [ 526.358356][ T786] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.383906][T15640] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 526.412917][ T786] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 526.422717][T15640] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.432989][T15640] usb 1-1: Product: syz [ 526.437529][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.446073][T15640] usb 1-1: Manufacturer: syz [ 526.450752][T15640] usb 1-1: SerialNumber: syz [ 526.468826][ T786] hub 2-1:4.0: bad descriptor, ignoring hub [ 526.474773][ T786] hub: probe of 2-1:4.0 failed with error -5 [ 526.491022][T15640] usb 1-1: config 0 descriptor?? [ 526.505066][T15640] smsc75xx v1.0.0 [ 526.521569][ T786] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 526.584822][T17017] syzkaller0: entered promiscuous mode [ 526.592604][T17017] syzkaller0: entered allmulticast mode [ 526.925486][T17021] syzkaller0: entered promiscuous mode [ 526.936578][T17021] syzkaller0: entered allmulticast mode [ 527.091663][T17024] bond1: option mode: unable to set because the bond device has slaves [ 527.114019][T15640] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 527.137030][T15640] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 527.192382][T17026] syzkaller0: entered promiscuous mode [ 527.202780][T17026] syzkaller0: entered allmulticast mode [ 527.495230][T17030] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.502975][T17030] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.520631][T17032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4213'. [ 527.538921][T17032] macsec0: left allmulticast mode [ 527.544005][T17032] veth1_macvtap: left allmulticast mode [ 527.550000][T17032] macsec0: left promiscuous mode [ 527.555333][T17032] bridge0: port 3(macsec0) entered disabled state [ 527.572864][T17032] bridge_slave_1: left allmulticast mode [ 527.580094][T17032] bridge_slave_1: left promiscuous mode [ 527.590412][T17032] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.738305][T17037] syzkaller0: entered promiscuous mode [ 527.743831][T17037] syzkaller0: entered allmulticast mode [ 527.790197][T15640] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 527.822052][T15640] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 527.833488][T15640] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 527.848984][T15640] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 527.992077][T17043] bond1: (slave ip6gretap1): making interface the new active one [ 528.008690][T17043] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 528.112301][T17046] syzkaller0: entered promiscuous mode [ 528.118606][T17046] syzkaller0: entered allmulticast mode [ 528.288451][T17048] loop3: detected capacity change from 0 to 512 [ 528.353083][T16333] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 528.826001][ T5770] usb 1-1: USB disconnect, device number 54 [ 529.029251][ T966] usb 2-1: USB disconnect, device number 24 [ 529.047939][T17054] tipc: Enabled bearer , priority 0 [ 529.156801][T17054] syzkaller0: entered promiscuous mode [ 529.172582][T17054] syzkaller0: entered allmulticast mode [ 529.179980][T17054] tipc: Resetting bearer [ 529.233229][T17053] tipc: Resetting bearer [ 531.679587][T17053] tipc: Disabling bearer [ 531.739907][ T5770] tipc: Node number set to 1559641010 [ 531.745568][T17066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4227'. [ 531.778045][T17066] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.786906][T17066] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.795614][T17066] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.804743][T17066] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.852459][T17069] syzkaller0: entered promiscuous mode [ 531.864721][T17069] syzkaller0: entered allmulticast mode [ 531.975062][T17074] tipc: Enabled bearer , priority 0 [ 532.040062][T17074] syzkaller0: entered promiscuous mode [ 532.045568][T17074] syzkaller0: entered allmulticast mode [ 532.053075][T17074] tipc: Resetting bearer [ 532.091248][T17072] tipc: Resetting bearer [ 532.136274][ T5770] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 532.337745][ T5770] usb 4-1: Using ep0 maxpacket: 32 [ 532.354110][ T5770] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 532.362654][ T5770] usb 4-1: config 0 has no interface number 0 [ 532.368976][ T5770] usb 4-1: config 0 interface 184 has no altsetting 0 [ 532.379456][ T5770] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 532.392312][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.403716][ T5770] usb 4-1: Product: syz [ 532.407974][ T5770] usb 4-1: Manufacturer: syz [ 532.412875][ T5770] usb 4-1: SerialNumber: syz [ 532.425228][ T5770] usb 4-1: config 0 descriptor?? [ 532.441919][ T5770] smsc75xx v1.0.0 [ 533.070084][ T5770] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 533.081300][ T5770] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 533.703936][ T5770] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 533.726794][ T5770] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 533.737143][ T5770] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 533.750552][ T5770] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 534.186683][T17072] tipc: Disabling bearer [ 534.303108][T17084] netlink: 'syz.1.4236': attribute type 13 has an invalid length. [ 534.351959][T17086] syzkaller0: entered promiscuous mode [ 534.363517][T17086] syzkaller0: entered allmulticast mode [ 534.501258][T17092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4239'. [ 534.539517][T17092] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.548413][T17092] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.557267][T17092] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.566228][T17092] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.662834][T17097] syzkaller0: entered promiscuous mode [ 534.686579][T17097] syzkaller0: entered allmulticast mode [ 534.830839][T17103] tipc: Started in network mode [ 534.836597][T17103] tipc: Node identity ded09f73f312, cluster identity 4711 [ 534.843882][T17103] tipc: Enabled bearer , priority 0 [ 534.920783][T17103] syzkaller0: entered promiscuous mode [ 534.921678][T15640] usb 4-1: USB disconnect, device number 53 [ 534.928206][T17103] syzkaller0: entered allmulticast mode [ 534.947132][T17103] tipc: Resetting bearer [ 534.968682][T17107] netlink: 'syz.1.4246': attribute type 13 has an invalid length. [ 535.012901][T17102] tipc: Resetting bearer [ 536.955567][T17102] tipc: Disabling bearer [ 536.993914][ T5850] tipc: Node number set to 767729523 [ 537.190455][T17128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4250'. [ 537.211190][T17128] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.220309][T17128] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.229440][T17128] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.238305][T17128] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.305472][T17134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4250'. [ 537.370474][T17128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4250'. [ 537.483527][T17138] loop0: detected capacity change from 0 to 512 [ 537.528772][T17134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4250'. [ 538.245018][T17142] syzkaller0: entered promiscuous mode [ 538.256327][T17142] syzkaller0: entered allmulticast mode [ 538.417638][T17154] syzkaller0: entered promiscuous mode [ 538.432525][T17154] syzkaller0: entered allmulticast mode [ 538.483889][ T5847] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 538.521386][T17156] syzkaller0: entered promiscuous mode [ 538.527169][T17156] syzkaller0: entered allmulticast mode [ 538.808465][ T5847] usb 1-1: Using ep0 maxpacket: 32 [ 538.815571][ T5847] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 538.831558][ T5847] usb 1-1: config 0 has no interface number 0 [ 538.838938][ T5847] usb 1-1: config 0 interface 184 has no altsetting 0 [ 538.938429][T17169] loop3: detected capacity change from 0 to 512 [ 539.497701][ T5847] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 539.511621][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.519727][ T5847] usb 1-1: Product: syz [ 539.524228][ T5847] usb 1-1: Manufacturer: syz [ 539.528920][ T5847] usb 1-1: SerialNumber: syz [ 539.535978][ T5847] usb 1-1: config 0 descriptor?? [ 539.543475][ T5847] smsc75xx v1.0.0 [ 539.698255][T17175] netlink: 'syz.2.4268': attribute type 13 has an invalid length. [ 540.159021][ T5847] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 540.180374][ T5847] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 540.437787][T17206] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 540.452862][T17206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4279'. [ 540.468034][T17206] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4279'. [ 540.722958][T17216] netlink: 'syz.3.4282': attribute type 13 has an invalid length. [ 540.809347][ T5847] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 540.838216][ T5847] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 540.858755][ T5847] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 540.876381][ T5847] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 540.962308][T17220] bond1: option mode: unable to set because the bond device has slaves [ 541.172566][T17226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4286'. [ 541.208489][T17226] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.217412][T17226] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.226860][T17226] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.235575][T17226] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.248527][T17226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4286'. [ 541.430017][T17232] tipc: Enabled bearer , priority 0 [ 541.450172][T17232] syzkaller0: entered promiscuous mode [ 541.459077][T17232] syzkaller0: entered allmulticast mode [ 541.511338][T17232] tipc: Resetting bearer [ 541.518068][T17234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4290'. [ 541.536236][T17231] tipc: Resetting bearer [ 541.569861][T17231] tipc: Disabling bearer [ 541.763116][T17236] syzkaller0: entered promiscuous mode [ 541.787676][T17236] syzkaller0: entered allmulticast mode [ 541.884082][ T5850] usb 1-1: USB disconnect, device number 55 [ 541.988317][T17244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4293'. [ 542.334448][T17253] netlink: 'syz.3.4297': attribute type 13 has an invalid length. [ 542.350062][T17253] gretap0: refused to change device tx_queue_len [ 542.383240][T17253] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 542.726440][T17261] tipc: Enabled bearer , priority 0 [ 542.793475][T17263] netlink: 'syz.1.4298': attribute type 10 has an invalid length. [ 542.834176][T17263] team0: Port device dummy0 added [ 542.864880][T17254] netlink: 'syz.1.4298': attribute type 10 has an invalid length. [ 542.907861][T17254] team0: Port device dummy0 removed [ 542.917762][T17254] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 542.942944][T17266] syzkaller0: entered promiscuous mode [ 542.948942][T17266] syzkaller0: entered allmulticast mode [ 542.957759][ T5770] IPVS: starting estimator thread 0... [ 542.968095][T17254] IPVS: nq: FWM 3 0x00000003 - no destination available [ 543.046113][T17267] IPVS: using max 20 ests per chain, 48000 per kthread [ 543.067243][ T5850] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 543.288659][ T5850] usb 4-1: Using ep0 maxpacket: 32 [ 543.329634][ T5850] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 543.337955][ T5850] usb 4-1: config 0 has no interface number 0 [ 543.344792][ T5850] usb 4-1: config 0 interface 184 has no altsetting 0 [ 543.376239][ T5850] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 543.392038][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.406740][ T5850] usb 4-1: Product: syz [ 543.416033][ T5850] usb 4-1: Manufacturer: syz [ 543.420671][ T5850] usb 4-1: SerialNumber: syz [ 543.436551][T17256] tipc: Disabling bearer [ 543.437032][ T5850] usb 4-1: config 0 descriptor?? [ 543.453197][ T5850] smsc75xx v1.0.0 [ 543.795277][T17287] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.864639][T17294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4311'. [ 543.951921][T17287] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.059700][ T5850] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 544.071073][ T5850] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 544.101170][T17287] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.180218][T17287] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.339133][T17287] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.377884][T17287] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.391938][T15640] IPVS: starting estimator thread 0... [ 544.404860][T17287] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.456592][T17287] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.496044][T17307] IPVS: using max 21 ests per chain, 50400 per kthread [ 544.715242][ T5850] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 544.734372][ T5850] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 544.744682][ T5850] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 544.758807][ T5850] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 544.764973][T17318] syzkaller0: entered promiscuous mode [ 544.784582][T17318] syzkaller0: entered allmulticast mode [ 544.980098][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4321'. [ 545.316340][T17340] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 545.401143][T17343] bond1: option mode: unable to set because the bond device has slaves [ 545.438180][T17343] bond1: (slave veth3): Enslaving as an active interface with a down link [ 545.493633][T17345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4329'. [ 545.808212][ T966] usb 4-1: USB disconnect, device number 54 [ 545.810530][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4332'. [ 546.188440][T17370] netlink: 'syz.3.4339': attribute type 13 has an invalid length. [ 546.272214][T17372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4340'. [ 546.316061][ T5850] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 546.510255][ T5850] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 546.521693][ T5850] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.531673][ T5850] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 546.540840][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.557580][ T5850] hub 1-1:4.0: USB hub found [ 546.736182][ T27] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 546.775274][ T5850] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 546.857043][ T5850] usb 1-1: USB disconnect, device number 56 [ 546.935903][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 546.943057][ T27] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 546.952937][ T27] usb 3-1: config 0 has no interface number 0 [ 546.973654][ T27] usb 3-1: config 0 interface 184 has no altsetting 0 [ 546.992459][ T27] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 547.015033][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.024034][ T27] usb 3-1: Product: syz [ 547.028992][ T27] usb 3-1: Manufacturer: syz [ 547.033618][ T27] usb 3-1: SerialNumber: syz [ 547.054382][ T27] usb 3-1: config 0 descriptor?? [ 547.072223][ T27] smsc75xx v1.0.0 [ 547.377002][T17408] syzkaller0: entered promiscuous mode [ 547.382567][T17408] syzkaller0: entered allmulticast mode [ 547.680322][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 547.704317][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 548.003804][T17428] syzkaller0: entered promiscuous mode [ 548.023151][T17428] syzkaller0: entered allmulticast mode [ 548.030486][T17430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4364'. [ 548.054776][T17430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4364'. [ 548.324045][T17437] syzkaller0: entered promiscuous mode [ 548.330854][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 548.346766][T17437] syzkaller0: entered allmulticast mode [ 548.354517][T17440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4366'. [ 548.363908][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 548.376109][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 548.385664][ T27] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 548.574448][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4368'. [ 549.194931][T17468] syzkaller0: entered promiscuous mode [ 549.204900][T17468] syzkaller0: entered allmulticast mode [ 549.502255][T15640] usb 3-1: USB disconnect, device number 25 [ 549.817646][T17476] netlink: 'syz.2.4378': attribute type 13 has an invalid length. [ 549.853817][T17476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4378'. [ 550.084297][T17479] syzkaller0: entered promiscuous mode [ 550.103329][T17479] syzkaller0: entered allmulticast mode [ 550.464129][T17492] bond1: option mode: unable to set because the bond device has slaves [ 550.531960][T17492] bond1: (slave veth11): Enslaving as an active interface with a down link [ 550.562485][T17494] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.572088][T17494] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.581511][T17494] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.590474][T17494] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.827198][T17503] syzkaller0: entered promiscuous mode [ 550.839652][T17503] syzkaller0: entered allmulticast mode [ 551.599685][T17526] syzkaller0: entered promiscuous mode [ 551.615473][T17526] syzkaller0: entered allmulticast mode [ 551.945448][T17533] loop0: detected capacity change from 0 to 512 [ 552.015394][T16333] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 552.402773][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4403'. [ 552.791749][T17552] syzkaller0: entered promiscuous mode [ 552.814375][T17552] syzkaller0: entered allmulticast mode [ 553.486051][T17566] loop1: detected capacity change from 0 to 512 [ 553.623184][T16333] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 554.048229][T17576] tipc: Enabled bearer , priority 0 [ 554.209807][T17576] syzkaller0: entered promiscuous mode [ 554.225600][T17576] syzkaller0: entered allmulticast mode [ 554.242671][T17576] tipc: Resetting bearer [ 554.283551][T17574] tipc: Resetting bearer [ 557.337536][T17574] tipc: Disabling bearer [ 557.360957][T17599] tipc: Enabling of bearer rejected, failed to enable media [ 557.370009][ T5770] tipc: Node number set to 1704428749 [ 557.474885][T17610] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 558.360961][T17638] syzkaller0: entered promiscuous mode [ 558.374101][T17638] syzkaller0: entered allmulticast mode [ 559.091759][T17659] loop2: detected capacity change from 0 to 512 [ 559.526054][ T5850] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 559.728413][ T5850] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 559.747343][ T5850] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.773024][ T5850] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 559.813799][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.851080][ T5850] hub 2-1:4.0: USB hub found [ 560.057342][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 560.069312][ T5850] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 560.130416][ T5850] usb 2-1: USB disconnect, device number 25 [ 560.357635][T17677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4449'. [ 560.379610][T17677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4449'. [ 560.417959][T17677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4449'. [ 560.435996][T17677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4449'. [ 560.920946][T17687] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 561.490374][T17695] loop1: detected capacity change from 0 to 512 [ 561.887543][T17709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4462'. [ 561.896654][T17709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4462'. [ 561.907234][T17709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4462'. [ 561.947666][T17709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4462'. [ 562.007030][T17711] syzkaller0: entered promiscuous mode [ 562.012794][T17711] syzkaller0: entered allmulticast mode [ 562.348331][T17720] syzkaller0: entered promiscuous mode [ 562.353877][T17720] syzkaller0: entered allmulticast mode [ 562.912325][T17729] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4467'. [ 562.941242][T17729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4467'. [ 563.124981][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.136073][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.846828][T17749] syzkaller0: entered promiscuous mode [ 563.864405][T17749] syzkaller0: entered allmulticast mode [ 564.124639][T17753] bond1: option mode: unable to set because the bond device has slaves [ 564.244078][T17753] bond1: (slave veth27): Enslaving as an active interface with a down link [ 565.396547][T17785] loop1: detected capacity change from 0 to 512 [ 565.439951][T16333] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 565.532427][T17790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4490'. [ 565.576634][T17790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4490'. [ 565.826314][T17801] netlink: 'syz.1.4494': attribute type 13 has an invalid length. [ 565.977218][T17803] syzkaller0: entered promiscuous mode [ 565.982825][T17803] syzkaller0: entered allmulticast mode [ 566.039228][T17805] bond1: option mode: unable to set because the bond device has slaves [ 566.159574][T17805] bond1: (slave veth13): Enslaving as an active interface with a down link [ 566.538535][T17816] tipc: Enabled bearer , priority 0 [ 566.542881][T17814] loop3: detected capacity change from 0 to 512 [ 566.569509][T17816] syzkaller0: entered promiscuous mode [ 566.590287][T17816] syzkaller0: entered allmulticast mode [ 566.603319][T16333] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 566.654141][T17818] tipc: Resetting bearer [ 566.701430][T17815] tipc: Resetting bearer [ 566.791561][T17815] tipc: Disabling bearer [ 567.924074][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4515'. [ 567.946582][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4515'. [ 568.328157][T15640] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 568.562907][T15640] usb 2-1: Using ep0 maxpacket: 32 [ 568.586898][T15640] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 568.602548][T15640] usb 2-1: config 0 has no interface number 0 [ 568.622293][T15640] usb 2-1: config 0 interface 184 has no altsetting 0 [ 568.646335][T15640] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 568.669137][T15640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.685039][T15640] usb 2-1: Product: syz [ 568.700647][T15640] usb 2-1: Manufacturer: syz [ 568.705302][T15640] usb 2-1: SerialNumber: syz [ 568.756167][T15640] usb 2-1: config 0 descriptor?? [ 568.773965][T15640] smsc75xx v1.0.0 [ 569.408060][T15640] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 569.425639][T15640] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 569.958162][T17892] netlink: 'syz.3.4530': attribute type 13 has an invalid length. [ 570.069876][T15640] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 570.086089][T15640] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 570.116084][T15640] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 570.136380][T15640] smsc75xx: probe of 2-1:0.184 failed with error -61 [ 570.295668][T17896] netlink: 'syz.3.4531': attribute type 1 has an invalid length. [ 570.417986][T17898] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 570.600720][T17904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4534'. [ 570.627218][T17904] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.636323][T17904] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.646012][T17904] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.654733][T17904] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.695478][T17904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4534'. [ 570.890923][T17908] syzkaller0: entered promiscuous mode [ 570.899969][T17908] syzkaller0: entered allmulticast mode [ 571.142375][T17916] tipc: Enabled bearer , priority 0 [ 571.159328][T17916] tipc: Resetting bearer [ 571.167949][T17913] tipc: Disabling bearer [ 571.356643][ T5770] usb 2-1: USB disconnect, device number 26 [ 572.126731][T17935] syzkaller0: entered promiscuous mode [ 572.132263][T17935] syzkaller0: entered allmulticast mode [ 572.158248][T17936] netlink: 'syz.1.4551': attribute type 13 has an invalid length. [ 572.245129][T17939] bond0: Caught tx_queue_len zero misconfig [ 572.903581][T17963] netlink: 'syz.2.4563': attribute type 13 has an invalid length. [ 573.126222][ T5850] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 573.138412][T17965] bond0: Caught tx_queue_len zero misconfig [ 573.328179][ T5850] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 573.344453][ T5850] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.361966][ T5850] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 573.371730][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.393208][ T5850] hub 4-1:4.0: USB hub found [ 573.812165][ T5850] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 573.877572][ T5850] usb 4-1: USB disconnect, device number 55 [ 574.438708][T17984] block nbd0: Unsupported socket: should be TCP or UNIX. [ 574.717849][T17989] loop3: detected capacity change from 0 to 512 [ 574.970221][T17997] netlink: 'syz.0.4577': attribute type 13 has an invalid length. [ 575.399397][T18004] syzkaller0: entered promiscuous mode [ 575.425448][T18004] syzkaller0: entered allmulticast mode [ 575.677337][T18013] bond2: option mode: unable to set because the bond device has slaves [ 575.707816][T18013] bond2: (slave veth19): Enslaving as an active interface with a down link [ 576.262825][T18029] loop2: detected capacity change from 0 to 512 [ 576.308816][T16333] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 576.466254][ T5850] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 576.666046][ T5850] usb 2-1: Using ep0 maxpacket: 32 [ 576.678231][ T5850] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 576.687871][ T5850] usb 2-1: config 0 has no interface number 0 [ 576.694072][ T5850] usb 2-1: config 0 interface 184 has no altsetting 0 [ 576.710723][ T5850] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 576.740334][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.772950][ T5850] usb 2-1: Product: syz [ 576.779494][ T5850] usb 2-1: Manufacturer: syz [ 576.785784][ T5850] usb 2-1: SerialNumber: syz [ 576.796740][ T5850] usb 2-1: config 0 descriptor?? [ 576.806235][ T5850] smsc75xx v1.0.0 [ 577.121221][T18044] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.130527][T18044] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.139537][T18044] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.148464][T18044] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.336827][T18049] netlink: 'syz.0.4599': attribute type 1 has an invalid length. [ 577.431952][ T5850] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 577.464937][ T5850] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 577.510938][T18052] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 577.931602][ T27] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 578.153201][ T5850] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 578.164377][ T27] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 578.175643][ T5850] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 578.206402][ T27] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.217240][ T5850] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 578.236086][ T27] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 578.263583][ T5850] smsc75xx: probe of 2-1:0.184 failed with error -61 [ 578.276179][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.342619][ T27] hub 3-1:4.0: USB hub found [ 578.748238][ T27] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 578.799181][ T27] usb 3-1: USB disconnect, device number 26 [ 579.017948][T18071] syzkaller0: entered promiscuous mode [ 579.023585][T18071] syzkaller0: entered allmulticast mode [ 579.429836][ T5770] usb 2-1: USB disconnect, device number 27 [ 579.458720][T18080] loop0: detected capacity change from 0 to 512 [ 579.510260][T18082] bond1: option mode: unable to set because the bond device has slaves [ 579.522125][T15349] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 579.600239][T18082] bond1: (slave veth5): Enslaving as an active interface with a down link [ 579.648688][T18085] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4614'. [ 579.903569][T18095] syzkaller0: entered promiscuous mode [ 579.913180][T18095] syzkaller0: entered allmulticast mode [ 579.978004][T18099] netlink: 'syz.2.4622': attribute type 13 has an invalid length. [ 580.017240][T18101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4623'. [ 580.336480][T18109] bond1: option mode: unable to set because the bond device has slaves [ 580.410920][T18109] bond1: (slave veth29): Enslaving as an active interface with a down link [ 580.511483][T18109] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4628'. [ 580.544248][T18119] syzkaller0: entered promiscuous mode [ 580.549871][T18119] syzkaller0: entered allmulticast mode [ 580.892824][T18130] netlink: 'syz.2.4636': attribute type 13 has an invalid length. [ 580.915081][T18129] loop0: detected capacity change from 0 to 512 [ 580.989794][T15349] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 582.187445][T18183] syzkaller0: entered promiscuous mode [ 582.192976][T18183] syzkaller0: entered allmulticast mode [ 582.720558][T18201] tipc: Enabled bearer , priority 0 [ 582.924149][T18212] syzkaller0: entered promiscuous mode [ 582.930288][T18212] syzkaller0: entered allmulticast mode [ 583.146161][ T5850] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 583.322395][T18190] tipc: Disabling bearer [ 583.330862][ T5850] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 583.343085][ T5850] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.353832][ T5850] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 583.362964][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.376105][ T5850] hub 1-1:4.0: USB hub found [ 583.477345][T18224] syz_tun: entered allmulticast mode [ 583.486667][T18223] syz_tun: left allmulticast mode [ 583.782303][ T5850] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 583.806225][T18238] tipc: Enabled bearer , priority 0 [ 583.813672][T18238] syzkaller0: entered promiscuous mode [ 583.817017][ T5850] usb 1-1: USB disconnect, device number 57 [ 583.820510][T18238] syzkaller0: entered allmulticast mode [ 583.846540][T18238] tipc: Resetting bearer [ 583.857277][T18237] tipc: Resetting bearer [ 583.878805][T18237] tipc: Disabling bearer [ 583.984916][T18243] syzkaller0: entered promiscuous mode [ 583.990990][T18243] syzkaller0: entered allmulticast mode [ 584.907447][T18270] tipc: Enabled bearer , priority 0 [ 584.946306][T18270] syzkaller0: entered promiscuous mode [ 584.958753][T18270] syzkaller0: entered allmulticast mode [ 585.022524][T18270] tipc: Resetting bearer [ 585.081528][T18268] tipc: Resetting bearer [ 585.105772][T18268] tipc: Disabling bearer [ 585.383746][T18285] netlink: 'syz.1.4696': attribute type 1 has an invalid length. [ 585.460144][T18292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 585.467457][T18292] IPv6: NLM_F_CREATE should be set when creating new route [ 586.030535][T18292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.062637][T18292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.322231][T18292] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.331580][T18292] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.340626][T18292] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.349879][T18292] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.461584][T18292] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.470704][T18292] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.480156][T18292] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.489520][T18292] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.719252][T18347] loop3: detected capacity change from 0 to 512 [ 588.437609][T18361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4719'. [ 588.995009][T18386] tipc: Enabled bearer , priority 0 [ 589.010563][T18385] tipc: Disabling bearer [ 589.086471][T18389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4728'. [ 589.800382][T18418] tipc: Enabled bearer , priority 0 [ 589.806562][T18421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4739'. [ 589.854257][T18417] tipc: Disabling bearer [ 590.114403][T18428] tipc: Enabled bearer , priority 0 [ 590.145289][T18428] syzkaller0: entered promiscuous mode [ 590.154578][T18428] syzkaller0: entered allmulticast mode [ 590.200045][T18428] tipc: Resetting bearer [ 590.212320][T18430] syzkaller0: entered promiscuous mode [ 590.220268][T18430] syzkaller0: entered allmulticast mode [ 590.230980][T18425] tipc: Resetting bearer [ 590.262605][T18425] tipc: Disabling bearer [ 590.531868][T16647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 590.576179][T16647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 590.589909][T16647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 590.609639][T16647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 590.619474][T10868] syz_tun (unregistering): left promiscuous mode [ 590.628627][T16647] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 590.636256][T16647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 590.840808][ T49] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.897584][T18452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 590.904886][T18452] IPv6: NLM_F_CREATE should be set when creating new route [ 591.384099][T18455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.414211][T18455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.699888][T18455] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.708853][T18455] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.718633][T18455] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.728234][T18455] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.818158][T18455] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.827357][T18455] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.836345][T18455] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.845245][T18455] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.888543][ T49] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.964079][T18460] tipc: Enabling of bearer rejected, failed to enable media [ 592.146674][ T49] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.234893][ T49] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.297751][T18476] syzkaller0: entered promiscuous mode [ 592.312263][T18476] syzkaller0: entered allmulticast mode [ 592.716493][T16647] Bluetooth: hci0: command tx timeout [ 592.802029][T18502] tipc: Enabled bearer , priority 0 [ 592.840944][T18501] tipc: Disabling bearer [ 592.862852][ T49] tipc: Left network mode [ 592.872728][T18441] chnl_net:caif_netlink_parms(): no params data found [ 593.120230][ T49] ip6gretap0 (unregistering): left promiscuous mode [ 593.265169][ T49] bond2: (slave ip6gretap1): Releasing active interface [ 593.380680][T18516] tipc: Enabled bearer , priority 0 [ 593.409366][T18524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4767'. [ 593.511097][T18524] team0 (unregistering): Port device team_slave_0 removed [ 593.530154][T18524] team0 (unregistering): Port device team_slave_1 removed [ 593.572476][T18519] syzkaller0: entered promiscuous mode [ 593.581322][T18519] syzkaller0: entered allmulticast mode [ 593.650952][T18508] tipc: Resetting bearer [ 593.759620][T18506] tipc: Resetting bearer [ 593.830071][T18506] tipc: Disabling bearer [ 594.214590][T18565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4777'. [ 594.224593][T18565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4777'. [ 594.244585][T18561] tipc: Enabled bearer , priority 0 [ 594.516017][T18441] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.523308][T18441] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.596545][T18441] bridge_slave_0: entered allmulticast mode [ 594.627345][T18441] bridge_slave_0: entered promiscuous mode [ 594.639577][T18567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4778'. [ 594.667442][T18565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4777'. [ 594.684051][T18565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4777'. [ 594.720826][T18559] tipc: Disabling bearer [ 594.796026][T16647] Bluetooth: hci0: command tx timeout [ 594.806082][T18441] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.813227][T18441] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.843642][T18441] bridge_slave_1: entered allmulticast mode [ 594.862882][T18441] bridge_slave_1: entered promiscuous mode [ 595.015938][T18577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4782'. [ 595.194062][T18441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.883397][T16647] Bluetooth: hci0: command tx timeout [ 597.579390][T18441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.597252][T18590] syzkaller0: entered promiscuous mode [ 597.602786][T18590] syzkaller0: entered allmulticast mode [ 597.733556][T18441] team0: Port device team_slave_0 added [ 597.806005][T18441] team0: Port device team_slave_1 added [ 597.859690][T18625] tipc: Enabled bearer , priority 0 [ 597.975350][T18441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.982903][T18441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.009226][T18441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.036532][T18623] tipc: Disabling bearer [ 598.219806][ T49] hsr_slave_0: left promiscuous mode [ 598.247812][ T49] hsr_slave_1: left promiscuous mode [ 598.265194][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.275243][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.288660][ T49] macsec0: left allmulticast mode [ 598.298338][ T49] veth1_macvtap: left allmulticast mode [ 598.311430][ T49] macsec0: left promiscuous mode [ 598.334968][ T49] bridge0: port 3(macsec0) entered disabled state [ 598.368698][ T49] bridge_slave_1: left allmulticast mode [ 598.374402][ T49] bridge_slave_1: left promiscuous mode [ 598.431415][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.741521][ T49] bond2 (unregistering): (slave veth19): Releasing active interface [ 598.831949][ T49] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 598.915592][ T49] bond7 (unregistering): Released all slaves [ 598.959082][T16647] Bluetooth: hci0: command tx timeout [ 598.989324][ T49] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 599.070962][ T49] bond6 (unregistering): Released all slaves [ 599.167268][ T49] bond5 (unregistering): Released all slaves [ 599.234386][ T49] bond4 (unregistering): Released all slaves [ 599.319561][ T49] bond2 (unregistering): (slave veth15): Releasing active interface [ 599.343908][ T49] bond3 (unregistering): (slave bridge2): Releasing active interface [ 599.398700][ T49] bond3 (unregistering): Released all slaves [ 599.443054][ T49] bond2 (unregistering): (slave veth9): Releasing active interface [ 599.462991][ T49] bond2 (unregistering): Released all slaves [ 599.491580][ T49] bond1 (unregistering): Released all slaves [ 600.053436][ T49] team0 (unregistering): Port device team_slave_1 removed [ 600.108328][ T49] team0 (unregistering): Port device team_slave_0 removed [ 600.153606][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.201463][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.472053][ T49] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 600.528773][ T49] bond0 (unregistering): Released all slaves [ 600.623415][T18441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.630545][T18441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.657366][T18441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.690593][T18678] tipc: Enabling of bearer rejected, failed to enable media [ 600.957888][T18441] hsr_slave_0: entered promiscuous mode [ 600.977709][T18441] hsr_slave_1: entered promiscuous mode [ 600.984144][T18441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 600.992661][T18441] Cannot create hsr debugfs directory [ 601.012001][T18695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4802'. [ 601.297114][T18700] loop0: detected capacity change from 0 to 512 [ 602.254022][T18710] syzkaller0: entered promiscuous mode [ 602.286922][T18710] syzkaller0: entered allmulticast mode [ 602.339203][ T49] IPVS: stop unused estimator thread 0... [ 602.868896][T18746] tipc: Enabling of bearer rejected, failed to enable media [ 603.201308][T18759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4812'. [ 603.684195][T18766] loop3: detected capacity change from 0 to 512 [ 604.420847][T18441] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 604.459105][T18441] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 604.480389][T18441] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 604.497721][T18441] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 604.822742][T18441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.870702][T18441] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.900189][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.907389][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.977580][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.985118][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.030172][T18804] nbd: must specify at least one socket [ 605.357153][T18815] netlink: 'syz.2.4822': attribute type 1 has an invalid length. [ 605.552443][T18441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.627964][T18441] veth0_vlan: entered promiscuous mode [ 605.636155][ T786] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 605.670179][T18441] veth1_vlan: entered promiscuous mode [ 605.733482][T18441] veth0_macvtap: entered promiscuous mode [ 605.763332][T18441] veth1_macvtap: entered promiscuous mode [ 605.802335][T18441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.825951][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 605.843071][T18441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.845525][ T786] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 605.857784][T18441] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.884704][T18441] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.895029][ T786] usb 4-1: config 0 has no interface number 0 [ 605.908162][ T786] usb 4-1: config 0 interface 184 has no altsetting 0 [ 605.909694][T18441] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.919074][ T786] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 605.933598][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.942091][ T786] usb 4-1: Product: syz [ 605.947304][ T786] usb 4-1: Manufacturer: syz [ 605.947741][T18441] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.952092][ T786] usb 4-1: SerialNumber: syz [ 605.976766][ T786] usb 4-1: config 0 descriptor?? [ 606.008758][ T786] smsc75xx v1.0.0 [ 606.100742][T18838] netlink: 47 bytes leftover after parsing attributes in process `syz.2.4828'. [ 606.117836][T18838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4828'. [ 606.207963][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.258651][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.294634][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.343028][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.627298][ T786] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 606.654086][ T786] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 606.763535][T18866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4832'. [ 607.159433][T18880] netlink: 'syz.2.4836': attribute type 10 has an invalid length. [ 607.182273][T18880] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4836'. [ 607.218922][T18880] bond0: entered promiscuous mode [ 607.267523][T18880] bond_slave_0: entered promiscuous mode [ 607.301740][T18880] bond_slave_1: entered promiscuous mode [ 607.320428][T18880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.339860][T18880] bridge0: port 3(bond0) entered blocking state [ 607.389267][T18880] bridge0: port 3(bond0) entered disabled state [ 607.412055][T18880] bond0: entered allmulticast mode [ 607.451877][T18880] bond_slave_0: entered allmulticast mode [ 607.492763][ T786] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 607.506186][T18880] bond_slave_1: entered allmulticast mode [ 607.537428][ T786] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 607.570509][ T786] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 607.591937][ T786] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 607.616400][ T786] usb 4-1: USB disconnect, device number 56 [ 607.979905][T18919] netlink: 'syz.1.4843': attribute type 1 has an invalid length. [ 608.221140][T18925] block nbd0: Unsupported socket: should be TCP or UNIX. [ 609.195821][ C1] ------------[ cut here ]------------ [ 609.201973][ C1] ODEBUG: free active (active state 0) object: ffff8880300dd890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 609.215433][ C1] WARNING: CPU: 1 PID: 18906 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 609.225686][ C1] Modules linked in: [ 609.229727][ C1] CPU: 1 PID: 18906 Comm: syz.0.4841 Not tainted syzkaller #0 [ 609.237242][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.247360][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 609.253741][ C1] Code: 4c 8b 4d 00 48 c7 c7 a0 8a 1c 8b 48 c7 c6 00 87 1c 8b 48 c7 c2 20 8c 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 3e 56 20 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 73 8d 5a [ 609.273411][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00010296 [ 609.279547][ C1] RAX: 3fcee0c378dce600 RBX: ffffffff97530ce0 RCX: ffff88802aba9e00 [ 609.287583][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 609.295576][ C1] RBP: ffffffff8accab20 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 609.303621][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff8880300dda00 [ 609.311643][ C1] R13: ffffffff89791d80 R14: ffff8880300dd000 R15: ffff8880300dd890 [ 609.319689][ C1] FS: 00007f97ca0d06c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 609.328675][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.335292][ C1] CR2: 00002000003ed030 CR3: 0000000077ffd000 CR4: 00000000003506e0 [ 609.343319][ C1] Call Trace: [ 609.346649][ C1] [ 609.349522][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 609.354925][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 609.360107][ C1] __kmem_cache_free+0xba/0x1e0 [ 609.364981][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 609.369978][ C1] call_timer_fn+0x189/0x540 [ 609.374588][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 609.379668][ C1] ? call_timer_fn+0xd2/0x540 [ 609.384364][ C1] ? __run_timers+0x800/0x800 [ 609.389096][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 609.394313][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 609.399563][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 609.404624][ C1] __run_timers+0x542/0x800 [ 609.409217][ C1] ? detach_timer+0x2b0/0x2b0 [ 609.414011][ C1] ? lock_chain_count+0x20/0x20 [ 609.418927][ C1] run_timer_softirq+0x67/0xf0 [ 609.423708][ C1] handle_softirqs+0x280/0x820 [ 609.428615][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 609.433407][ C1] ? do_softirq+0x1a0/0x1a0 [ 609.437994][ C1] __irq_exit_rcu+0xd3/0x190 [ 609.442610][ C1] ? irq_exit_rcu+0x20/0x20 [ 609.447224][ C1] irq_exit_rcu+0x9/0x20 [ 609.451498][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 609.457211][ C1] [ 609.460160][ C1] [ 609.463114][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 609.469173][ C1] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 609.474916][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 609.494689][ C1] RSP: 0018:ffffc90004967b18 EFLAGS: 00000206 [ 609.500819][ C1] RAX: 3fcee0c378dce600 RBX: ffff88802aba9e00 RCX: 3fcee0c378dce600 [ 609.508863][ C1] RDX: 0000000000000000 RSI: ffffffff8acada80 RDI: ffffffff8b1c80e0 [ 609.516909][ C1] RBP: 0000000000000000 R08: ffffffff8e8ad9ef R09: 1ffffffff1d15b3d [ 609.524916][ C1] R10: dffffc0000000000 R11: fffffbfff1d15b3e R12: dffffc0000000000 [ 609.532973][ C1] R13: 0000000000000246 R14: ffffffff8d132040 R15: 00000000ffffffff [ 609.541025][ C1] __might_resched+0x9f/0x630 [ 609.545752][ C1] ? __might_sleep+0xe0/0xe0 [ 609.550424][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 609.555453][ C1] ? __might_fault+0xc6/0x120 [ 609.560170][ C1] ? __might_fault+0xaa/0x120 [ 609.564866][ C1] do_recvmmsg+0x587/0x870 [ 609.569330][ C1] ? __sys_recvmmsg+0x290/0x290 [ 609.574204][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 609.580226][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 609.585265][ C1] ? do_recvmmsg+0x870/0x870 [ 609.589895][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 609.595108][ C1] do_syscall_64+0x55/0xa0 [ 609.599572][ C1] ? clear_bhb_loop+0x40/0x90 [ 609.604261][ C1] ? clear_bhb_loop+0x40/0x90 [ 609.608981][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.614888][ C1] RIP: 0033:0x7f97c919acb9 [ 609.619361][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.639252][ C1] RSP: 002b:00007f97ca0d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 609.647748][ C1] RAX: ffffffffffffffda RBX: 00007f97c9416090 RCX: 00007f97c919acb9 [ 609.655867][ C1] RDX: 03ffffffffffff81 RSI: 0000200000000780 RDI: 0000000000000003 [ 609.663857][ C1] RBP: 00007f97c9208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 609.671899][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 609.679921][ C1] R13: 00007f97c9416128 R14: 00007f97c9416090 R15: 00007ffdf2c87288 [ 609.687985][ C1] [ 609.691121][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 609.698426][ C1] CPU: 1 PID: 18906 Comm: syz.0.4841 Not tainted syzkaller #0 [ 609.705902][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.715973][ C1] Call Trace: [ 609.719274][ C1] [ 609.722141][ C1] dump_stack_lvl+0x18c/0x250 [ 609.726878][ C1] ? show_regs_print_info+0x20/0x20 [ 609.732114][ C1] ? load_image+0x400/0x400 [ 609.736639][ C1] panic+0x2dc/0x730 [ 609.740580][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 609.745095][ C1] __warn+0x2e0/0x470 [ 609.749172][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 609.754896][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 609.760609][ C1] report_bug+0x2be/0x4f0 [ 609.764938][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 609.770655][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 609.776377][ C1] ? debug_check_no_obj_freed+0x448/0x540 [ 609.782190][ C1] handle_bug+0xcf/0x120 [ 609.786436][ C1] exc_invalid_op+0x1a/0x50 [ 609.790942][ C1] asm_exc_invalid_op+0x1a/0x20 [ 609.795786][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 609.802127][ C1] Code: 4c 8b 4d 00 48 c7 c7 a0 8a 1c 8b 48 c7 c6 00 87 1c 8b 48 c7 c2 20 8c 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 3e 56 20 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 73 8d 5a [ 609.821842][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00010296 [ 609.827904][ C1] RAX: 3fcee0c378dce600 RBX: ffffffff97530ce0 RCX: ffff88802aba9e00 [ 609.835872][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 609.843855][ C1] RBP: ffffffff8accab20 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 609.851824][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff8880300dda00 [ 609.859960][ C1] R13: ffffffff89791d80 R14: ffff8880300dd000 R15: ffff8880300dd890 [ 609.867927][ C1] ? rose_transmit_link+0x740/0x740 [ 609.873148][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 609.878517][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 609.883620][ C1] __kmem_cache_free+0xba/0x1e0 [ 609.888467][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 609.893399][ C1] call_timer_fn+0x189/0x540 [ 609.897977][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 609.902995][ C1] ? call_timer_fn+0xd2/0x540 [ 609.907659][ C1] ? __run_timers+0x800/0x800 [ 609.912334][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 609.917519][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 609.922703][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 609.927720][ C1] __run_timers+0x542/0x800 [ 609.932220][ C1] ? detach_timer+0x2b0/0x2b0 [ 609.936983][ C1] ? lock_chain_count+0x20/0x20 [ 609.941913][ C1] run_timer_softirq+0x67/0xf0 [ 609.946663][ C1] handle_softirqs+0x280/0x820 [ 609.951418][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 609.956174][ C1] ? do_softirq+0x1a0/0x1a0 [ 609.960671][ C1] __irq_exit_rcu+0xd3/0x190 [ 609.965423][ C1] ? irq_exit_rcu+0x20/0x20 [ 609.969936][ C1] irq_exit_rcu+0x9/0x20 [ 609.974165][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 609.979823][ C1] [ 609.982740][ C1] [ 609.985668][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 609.991638][ C1] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 609.997371][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 610.017052][ C1] RSP: 0018:ffffc90004967b18 EFLAGS: 00000206 [ 610.023108][ C1] RAX: 3fcee0c378dce600 RBX: ffff88802aba9e00 RCX: 3fcee0c378dce600 [ 610.031071][ C1] RDX: 0000000000000000 RSI: ffffffff8acada80 RDI: ffffffff8b1c80e0 [ 610.039029][ C1] RBP: 0000000000000000 R08: ffffffff8e8ad9ef R09: 1ffffffff1d15b3d [ 610.046988][ C1] R10: dffffc0000000000 R11: fffffbfff1d15b3e R12: dffffc0000000000 [ 610.054951][ C1] R13: 0000000000000246 R14: ffffffff8d132040 R15: 00000000ffffffff [ 610.062928][ C1] __might_resched+0x9f/0x630 [ 610.067607][ C1] ? __might_sleep+0xe0/0xe0 [ 610.072187][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 610.077208][ C1] ? __might_fault+0xc6/0x120 [ 610.081967][ C1] ? __might_fault+0xaa/0x120 [ 610.086640][ C1] do_recvmmsg+0x587/0x870 [ 610.091054][ C1] ? __sys_recvmmsg+0x290/0x290 [ 610.095905][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 610.101793][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 610.106815][ C1] ? do_recvmmsg+0x870/0x870 [ 610.111394][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 610.116842][ C1] do_syscall_64+0x55/0xa0 [ 610.121249][ C1] ? clear_bhb_loop+0x40/0x90 [ 610.125913][ C1] ? clear_bhb_loop+0x40/0x90 [ 610.130576][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.136459][ C1] RIP: 0033:0x7f97c919acb9 [ 610.140869][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.160463][ C1] RSP: 002b:00007f97ca0d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 610.168868][ C1] RAX: ffffffffffffffda RBX: 00007f97c9416090 RCX: 00007f97c919acb9 [ 610.176834][ C1] RDX: 03ffffffffffff81 RSI: 0000200000000780 RDI: 0000000000000003 [ 610.184796][ C1] RBP: 00007f97c9208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 610.192751][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 610.200708][ C1] R13: 00007f97c9416128 R14: 00007f97c9416090 R15: 00007ffdf2c87288 [ 610.208680][ C1] [ 610.212051][ C1] Kernel Offset: disabled [ 610.216449][ C1] Rebooting in 86400 seconds..