last executing test programs: 3m2.523328475s ago: executing program 1 (id=6116): syz_open_procfs(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) 3m1.523402605s ago: executing program 1 (id=6123): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"d28cbfec70113aa16b365924c3128c89fe8764c41caa3ec7a095ce3692ae1fe3160c3dd483cc71d285c48c8fa445272281be36882ff896da39f0ef45a90bfac537ba4c98038e0b871c2ba811d3d568ccdddd1e0e7edef9061d12bdd0fc1c83093613293d1779955c62df6a03c3a539051393b577bb6645c4ed2ddfd06df82c7359de2082e16a4c302d18db9ce698f22b519d55adbbe4881dda46ddbbab0a1ca428e404f0640e62eb7d76c8ca94cff34f26de20c2f44c22228eee44edcbec829ed8b5f24a8259fcc97d67b96441486cf9832274eff5271d383c178cd90827052ef8e6dee13ef4f8e23b8396f5bc4b03b8ee875350ac778233a13551f55cac915ce11f145063ef5b5111272d0859d6cdb62ab72a92f24d83ef5ff87aa8f6eae3986c403add562c0a17839921dea6186d3b71b3d466070a005541677a477392f9a499322ed2f09c6e1b401aff07b6673274e7c344152c2617edc2f667329b51bcc9d235de56d8642823643e0107339044417e2708d10e7dafefb5b2e72f696e1dc37c48f3c9266c9c8d2e771aabd4b7e4e7c2bccde0345d5d43ad7a4d98e9e1e3e152784ca29d286fe783f3579055a428ab231b9e815355d8ca4007607cd2ff60953a2d68353c4cc677124b7431edca5f604841f3baa901000000010000008dd78c219be7f0c53dddd4cea58ecac6cef53ed2ed1b67e63a7e04000000000000003949884286c101417e6deeff735b8b3b9109e47725bbd5c400b24489fec1afe6771d5c8871f7cd31e7390cef6dce398b8a1dd7213229d28ccb581a71c04ca04e9eb516a197583ba8470b0df0b2158a076bf257520500a7bfb42766c883231c1a2a4527dabb5037f9fa00172bc8b9327494b553735a4ebbfb8c9e7f5034b442418c7490919f81308b4a73bd46d06e40e5796e568c206d51adc1be7186cb80962e8dfa41c354acd9ad5fbf4c59b6fa6dd83aa9aa0a23210b057328efa4239b8211b3a5061ce22a193eb93f69c4d525f53e733b397786d808b928297748a3d54e5bb71bab6139d5e2721d237f4c99896a2e398d049df2e9c63c424606fc73cece699407f3041826cc271a3cb44cc4d76ab77ddb15ef7dda76ddfa4830c5ba28cf7dcc154e88ef9f228a8158d6ae6fdc32ef2af1642e48d5218f10ba7c222e43da4e13f59e96ab4b467283b76d8b0c36665f02d943936041c00d7dbd2a3ab101aa56277b9ec5111428c047fb8b144f260b2fae62db101aad238ee50d222202969ed5929c2f8ab41e6e342ad1b0037be7e2d887f0563a722be94364dfe62482f7862da76fd58827712a1a80f69cc85f1fa9ba92cbfc48f7e4f11b2b87c71e6733a95d8ded91da74913fcf81bb1bb9cb8f380f402abf9df0990e0100750c49f9328238eced88d16068bce90b00"}) r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)) 3m0.187618022s ago: executing program 1 (id=6129): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0xaf, 0x6, 0x0, {0x5, 0x4, 0x0, 0xd, 0x4, 0x66, 0x1, 0x1, 0xc, 0x1, @multicast1, @loopback}}}}}}, 0x0) 3m0.069513519s ago: executing program 1 (id=6131): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) pivot_root(&(0x7f0000001080)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00') 2m59.984288092s ago: executing program 1 (id=6134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000080)={@val={0x3, 0x800}, @val={0x1, 0x0, 0xa, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback, {[@ssrr={0x89, 0x7, 0x40, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @cipso={0x86, 0x21, 0x1, [{0x7, 0x7, "d0a747a378"}, {0x6, 0xe, "17893b0b53f5543f901e0e77"}, {0x6, 0x6, "a169a31a"}]}]}}}}}, 0x6a) 2m59.631256894s ago: executing program 1 (id=6138): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)) 2m58.827280767s ago: executing program 32 (id=6138): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"d28cbfec70113aa16b365924c3128c89fe8764c41caa3ec7a095ce3692ae1fe3160c3dd483cc71d285c48c8fa445272281be36882ff896da39f0ef45a90bfac537ba4c98038e0b871c2ba811d3d568ccdddd1e0e7edef9061d12bdd0fc1c83093613293d1779955c62df6a03c3a539051393b577bb6645c4ed2ddfd06df82c7359de2082e16a4c302d18db9ce698f22b519d55adbbe4881dda46ddbbab0a1ca428e404f0640e62eb7d76c8ca94cff34f26de20c2f44c22228eee44edcbec829ed8b5f24a8259fcc97d67b96441486cf9832274eff5271d383c178cd90827052ef8e6dee13ef4f8e23b8396f5bc4b03b8ee875350ac778233a13551f55cac915ce11f145063ef5b5111272d0859d6cdb62ab72a92f24d83ef5ff87aa8f6eae3986c403add562c0a17839921dea6186d3b71b3d466070a005541677a477392f9a499322ed2f09c6e1b401aff07b6673274e7c344152c2617edc2f667329b51bcc9d235de56d8642823643e0107339044417e2708d10e7dafefb5b2e72f696e1dc37c48f3c9266c9c8d2e771aabd4b7e4e7c2bccde0345d5d43ad7a4d98e9e1e3e152784ca29d286fe783f3579055a428ab231b9e815355d8ca4007607cd2ff60953a2d68353c4cc677124b7431edca5f604841f3baa901000000010000008dd78c219be7f0c53dddd4cea58ecac6cef53ed2ed1b67e63a7e04000000000000003949884286c101417e6deeff735b8b3b9109e47725bbd5c400b24489fec1afe6771d5c8871f7cd31e7390cef6dce398b8a1dd7213229d28ccb581a71c04ca04e9eb516a197583ba8470b0df0b2158a076bf257520500a7bfb42766c883231c1a2a4527dabb5037f9fa00172bc8b9327494b553735a4ebbfb8c9e7f5034b442418c7490919f81308b4a73bd46d06e40e5796e568c206d51adc1be7186cb80962e8dfa41c354acd9ad5fbf4c59b6fa6dd83aa9aa0a23210b057328efa4239b8211b3a5061ce22a193eb93f69c4d525f53e733b397786d808b928297748a3d54e5bb71bab6139d5e2721d237f4c99896a2e398d049df2e9c63c424606fc73cece699407f3041826cc271a3cb44cc4d76ab77ddb15ef7dda76ddfa4830c5ba28cf7dcc154e88ef9f228a8158d6ae6fdc32ef2af1642e48d5218f10ba7c222e43da4e13f59e96ab4b467283b76d8b0c36665f02d943936041c00d7dbd2a3ab101aa56277b9ec5111428c047fb8b144f260b2fae62db101aad238ee50d222202969ed5929c2f8ab41e6e342ad1b0037be7e2d887f0563a722be94364dfe62482f7862da76fd58827712a1a80f69cc85f1fa9ba92cbfc48f7e4f11b2b87c71e6733a95d8ded91da74913fcf81bb1bb9cb8f380f402abf9df0990e0100750c49f9328238eced88d16068bce90b00"}) r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)) 3.398115068s ago: executing program 2 (id=7188): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000500)=@secondary) 2.615385903s ago: executing program 3 (id=7206): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400c041}, 0x8000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 2.543160291s ago: executing program 3 (id=7207): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000540)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32, @ANYBLOB="0600130084e000000a0006000802110000010000060010008005000006001200010000009600ac"], 0xd8}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 2.386197429s ago: executing program 2 (id=7212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x4000) 2.384463937s ago: executing program 3 (id=7213): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)}, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe8000000000"], 0xfdef) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.267651747s ago: executing program 3 (id=7215): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="ae24b8dcbce0f8e4"], 0x8) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x0, 0xb}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000fc0)={'geneve1\x00', &(0x7f0000000f40)=@ethtool_dump={0x40, 0x4, 0x2}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) 2.231899329s ago: executing program 2 (id=7217): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e21, 0x3, 'ovf\x00', 0x1, 0x80005, 0x66}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, 0x0, 0x0) 2.007190808s ago: executing program 2 (id=7221): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0xf0}}, 0x18) sendmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="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", 0x6a2}], 0x2}}], 0x1, 0xf5) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x2, 0xf0}}, 0x18) sendmmsg(r2, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40", 0x56}, {&(0x7f00000003c0)="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", 0x6a2}], 0x2}}], 0x1, 0xf5) 1.490890926s ago: executing program 5 (id=7226): unshare(0x8040480) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, 0x0) 1.335151248s ago: executing program 5 (id=7228): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000003c0)={0x8, 0x2b, 0x6df65de1}, 0xc) 1.290919847s ago: executing program 5 (id=7230): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) close(0x3) 1.251416927s ago: executing program 3 (id=7231): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000), 0x8) 1.182315273s ago: executing program 5 (id=7233): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f000000bfc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/59, 0x3b}, 0xa3}], 0x1, 0x40000000, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)='`', 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300), 0x0) 1.095371947s ago: executing program 3 (id=7234): dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0x16, 0xb3, "05b93d265bb7c170980f690ea9e7b939b64a4e53ac4ef093f4a0e17a00e7cca6a7bddccc69fa3c9e1e7296884e22232ea6cc5f0468e003777072f044f7a9e211f807225748866c08787bc3429214bd9aa7e7165c2030f7c860322969e71930c64d2c3efa9a7162347b983a8f4d87e6538e1c1dcd43d2e6d43d0d55f45d5bd73c5829a6053bb409b028e11326615d8cfde808d8ebabfe6266f0f573657c7ab722ef278ac812b27ddca7e64707b432a658253379"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x60, 0x8}}, 0x0, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000500)={0x40, 0xb, 0x2, "fd3e"}, 0x0, &(0x7f0000000580)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, "84b8"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x800}, 0x0, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x81}, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1) 887.604391ms ago: executing program 4 (id=7236): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x40080) 807.805835ms ago: executing program 0 (id=7237): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e", 0x27}, {&(0x7f0000000e80)="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", 0x10f}, {&(0x7f0000001340)="641a6a2b8647e6b5208cf9599b1d890aa834ebb75a925ab48c8442218425232932fc2e37e327de21450df098c113e179a0186c6e0cd8e0", 0x37}], 0x3}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000014c0)="fa98151f51a5cd01a13cca732ada71da23eb1dbc1760afa900e0a7e5bd78d1aae07a60bfa40ae396026e0e2659a1e1332ac789341255aedc3223c16d66ce458c85f3c4372aa7f0ba420f8f046adc689289630718809a", 0x56}, {&(0x7f0000001540)="417e1fcc84ba36d92eced7b76463a43ac6c3c9eb0773f03237cfb1c88c6f5c3ff8deb0767df1a43ed83eee5101fafe74471d69f3cdc3446cf9ded344d8fd6aa575be67f8f82a441939bdba0aa19c5c1438243d72a5b568bbc12cc965c0c639ee7fbb0c980242dc0b2856e9142f0909a2d9f4388e6c9be93c703892c4e14676278a121f86052dbb6694647460a139614be42fb89d5b1da1a07994b7509c5dcc1c63cba1acb07b44c35d557db3b025ebb1fd5688a91a7ff0e10cc58cad5b11d03df3e48d", 0xc3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="9ed900f8a0d57b7656fa291a92dc9f58d067b2f1f69c6459442d67fb9436fd2078b14a2f", 0x24}, {&(0x7f00000002c0)="1a88f556665b77544a4f49495e71b694fb12eed4456b2ee14a4b13db92ebb7c2218e99c782d0b6a4bdeb49b9fc1638681e1b9d3264936a5602931030d6d53f6b979b85b0fedb3308b25785b1460fa910931a49d5107106e4e748a8679ded0e7b6fd03f2739a7ebb6399eabcd10bbaca33fa48116bc41b10eab20e805e435f5c7a75325387052bf0d4fefc4d414aed4ce8f82b0c627471a7fa0a789bbf6b5632a048ec0f3e391965bf6c6a64065b36c8c01cc6cfbbaba2316e3a8c34704a0de866867ff8af9f6f2227f7e9686fa75c310943d8ef74921e792ea7d378c237bb817c3", 0xe1}, {&(0x7f00000003c0)="7131821ef34992a7c3b4a30c7b10ab67375b1bdb027a5e1bdf1bff0a522c00e69535b60e7a4de35915f5f45a8f035f024d1a2ebd2ca1851fde44ef6ea33b34a5f71eb9c5db3573f871121fd352bffebb0535c4fa382bb7b35858425c0574055585dfc9236c0b008a04e25cda5f35f40550110c34741f377c963922a4acf4b39fbb260a7ef745bf706ed34c423eca2fbed0acf3b4915062e4aa13d770c023c057da26bec248682391fe18b640a7071c29834424d724b2755a8a6ea73eaf2b7c14bccfbe19b3f14366c9687e3f48eb4fe042c246f0433b0b0f178070597759", 0xde}, {&(0x7f0000000500)="43a8b66c36146a75fecd9759f847600123ee1de4e2faafd48bfa46508a87f84670a26d20c29b1072d6f45a98bf367face890b3ea383d417a2f533b5344812ec897d37bf53e023934bd9a96ae9a18b79c563a292a0ad0766518fcc808ad6c262d2abac2b18be23b5256a91cbd0e3e344ce14edd63b5356c98468e962a4de8194de1d51dca9fdda8a9f5bc9ba033db01eabcddea9b1d55303545c37762558c5a61c7665683be6896ee4ccd1eb69bc9f90aea0855ca0b21525c25966dd0d892b18e8750b19fdb095ffbe37cf68c5e5525ea457cc0565899fa663d834edb2cb71a04", 0xe0}, {&(0x7f0000000640)="2fa964bc6a347f3a58f8008d86c2b4a5625b59e154d7e4ee0f881289882e78808fef081bcbc323b0fef970094e925254d7543cf89f6ac674ea7f30b7b2c1313d0da8b70f5da8598ac90150ae4061ef4314a97d91c6d601f9e959b21911424486799078a2f4e7bc5508bf403ce9ebadb624b98507da134303fdad2411ad8e78baa7c091caec2828900597a5b64715bca43fe81706b60b6d6c931aedb065cfff4226f55cf9213c5309a6d5b51f7569bdd79729babdc4a8000ec8a11a7036a0ca57387e776b252aa0527ac158d975908592f709dd47dbdd", 0xd6}, {&(0x7f0000000740)="eb41c017c4afe48a3d0493647bf9e92cce9398e7528188dc568e62b73d3f816a91b3db04b468e8cc56e39edcc218e384d032072c10ebc2f56726faf68cd92c2f0b98bcb39041aceb21cbc7b5a01a23b93e46e3357ce20ad1f2", 0x59}, {&(0x7f00000001c0)="a334e4d3bf504a2f0c559abdfae63a1156aa6d7b07a8b4fcd69955f08303417d04e608b546150c7dfe7aa334581047", 0x2f}, {&(0x7f0000000800)="49e4393af5dc573387c284a08f23654033ae55cd20", 0x15}, {&(0x7f0000000840)="1aed3923fa06a8ab9dfb450d26359cac5d9da1706555e76f791a8c8feb27ea83dd66daf98adcab6606", 0x29}], 0x9}}], 0x3, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 807.663204ms ago: executing program 4 (id=7238): unshare(0x20000400) r0 = socket(0xf, 0x3, 0x2) connect$netlink(r0, 0x0, 0x0) 759.656755ms ago: executing program 0 (id=7239): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f21df33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x1d) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 748.890499ms ago: executing program 4 (id=7240): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x48000, 0x9, 0x6, 0x4, 0xffff}, 0x8d23}}]}, {0x4}, {0xfffffffffffffde9, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x15}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x4011) 630.312756ms ago: executing program 0 (id=7241): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) 619.03382ms ago: executing program 2 (id=7242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}], {0x14}}, 0x6c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x400) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(0x0, 0x204, 0x82) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xffffffffffffff0b, 0xaf, 0xe754}]}}}}}}}, 0x0) 491.054201ms ago: executing program 0 (id=7243): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) close(0x3) 429.406146ms ago: executing program 4 (id=7244): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000680)="e2a9967a484b", 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 427.474191ms ago: executing program 2 (id=7245): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = add_key(0x0, &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000500)=@secondary) 387.673513ms ago: executing program 0 (id=7246): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c61"], 0x50}}, 0x4000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4008081) recvmsg(r1, &(0x7f0000000040)={&(0x7f0000000840)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f01) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01008d00ffff"}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6400000000010104021000000000000005000000240001801400018008000100e00000011ebdfeade00000000208001a400000000808000740fffffffd08000340000010021400048008000140000000000000000000e4ffffffffffffff000000000000"], 0x64}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, 0xffffffffffffffff, 0x0) close(0x4) 244.239942ms ago: executing program 4 (id=7247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000040)=0x1000, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 243.948591ms ago: executing program 5 (id=7248): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000150000000900020073797a31000000000500010007000000280007800a00110010030000000000001800018014000240"], 0x50}, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050) 80.347553ms ago: executing program 5 (id=7249): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e", 0x27}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7e1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635be000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb6040000000000000000000000000019dd7f96a348ebb6b50000c7aa5035897b20a6c23f", 0x10f}, {&(0x7f0000001340)="641a6a2b8647e6b5208cf9599b1d890aa834ebb75a925ab48c8442218425232932fc2e37e327de21450df098c113e179a0186c6e0cd8e0", 0x37}], 0x3}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000014c0)="fa98151f51a5cd01a13cca732ada71da23eb1dbc1760afa900e0a7e5bd78d1aae07a60bfa40ae396026e0e2659a1e1332ac789341255aedc3223c16d66ce458c85f3c4372aa7f0ba420f8f046adc689289630718809a", 0x56}, {&(0x7f0000001540)="417e1fcc84ba36d92eced7b76463a43ac6c3c9eb0773f03237cfb1c88c6f5c3ff8deb0767df1a43ed83eee5101fafe74471d69f3cdc3446cf9ded344d8fd6aa575be67f8f82a441939bdba0aa19c5c1438243d72a5b568bbc12cc965c0c639ee7fbb0c980242dc0b2856e9142f0909a2d9f4388e6c9be93c703892c4e14676278a121f86052dbb6694647460a139614be42fb89d5b1da1a07994b7509c5dcc1c63cba1acb07b44c35d557db3b025ebb1fd5688a91a7ff0e10cc58cad5b11d03df3e48d", 0xc3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="9ed900f8a0d57b7656fa291a92dc9f58d067b2f1f69c6459442d67fb9436fd2078b14a2f", 0x24}, {&(0x7f00000002c0)="1a88f556665b77544a4f49495e71b694fb12eed4456b2ee14a4b13db92ebb7c2218e99c782d0b6a4bdeb49b9fc1638681e1b9d3264936a5602931030d6d53f6b979b85b0fedb3308b25785b1460fa910931a49d5107106e4e748a8679ded0e7b6fd03f2739a7ebb6399eabcd10bbaca33fa48116bc41b10eab20e805e435f5c7a75325387052bf0d4fefc4d414aed4ce8f82b0c627471a7fa0a789bbf6b5632a048ec0f3e391965bf6c6a64065b36c8c01cc6cfbbaba2316e3a8c34704a0de866867ff8af9f6f2227f7e9686fa75c310943d8ef74921e792ea7d378c237bb817c3", 0xe1}, {&(0x7f00000003c0)="7131821ef34992a7c3b4a30c7b10ab67375b1bdb027a5e1bdf1bff0a522c00e69535b60e7a4de35915f5f45a8f035f024d1a2ebd2ca1851fde44ef6ea33b34a5f71eb9c5db3573f871121fd352bffebb0535c4fa382bb7b35858425c0574055585dfc9236c0b008a04e25cda5f35f40550110c34741f377c963922a4acf4b39fbb260a7ef745bf706ed34c423eca2fbed0acf3b4915062e4aa13d770c023c057da26bec248682391fe18b640a7071c29834424d724b2755a8a6ea73eaf2b7c14bccfbe19b3f14366c9687e3f48eb4fe042c246f0433b0b0f178070597759", 0xde}, {&(0x7f0000000500)="43a8b66c36146a75fecd9759f847600123ee1de4e2faafd48bfa46508a87f84670a26d20c29b1072d6f45a98bf367face890b3ea383d417a2f533b5344812ec897d37bf53e023934bd9a96ae9a18b79c563a292a0ad0766518fcc808ad6c262d2abac2b18be23b5256a91cbd0e3e344ce14edd63b5356c98468e962a4de8194de1d51dca9fdda8a9f5bc9ba033db01eabcddea9b1d55303545c37762558c5a61c7665683be6896ee4ccd1eb69bc9f90aea0855ca0b21525c25966dd0d892b18e8750b19fdb095ffbe37cf68c5e5525ea457cc0565899fa663d834edb2cb71a04", 0xe0}, {&(0x7f0000000640)="2fa964bc6a347f3a58f8008d86c2b4a5625b59e154d7e4ee0f881289882e78808fef081bcbc323b0fef970094e925254d7543cf89f6ac674ea7f30b7b2c1313d0da8b70f5da8598ac90150ae4061ef4314a97d91c6d601f9e959b21911424486799078a2f4e7bc5508bf403ce9ebadb624b98507da134303fdad2411ad8e78baa7c091caec2828900597a5b64715bca43fe81706b60b6d6c931aedb065cfff4226f55cf9213c5309a6d5b51f7569bdd79729babdc4a8000ec8a11a7036a0ca57387e776b252aa0527ac158d975908592f709dd47dbdd", 0xd6}, {&(0x7f0000000740)="eb41c017c4afe48a3d0493647bf9e92cce9398e7528188dc568e62b73d3f816a91b3db04b468e8cc56e39edcc218e384d032072c10ebc2f56726faf68cd92c2f0b98bcb39041aceb21cbc7b5a01a23b93e46e3357ce20ad1f2", 0x59}, {&(0x7f00000001c0)="a334e4d3bf504a2f0c559abdfae63a1156aa6d7b07a8b4fcd69955f08303417d04e608b546150c7dfe7aa334581047", 0x2f}, {&(0x7f0000000800)="49e4393af5dc573387c284a08f23654033ae55cd20", 0x15}, {&(0x7f0000000840)="1aed3923fa06a8ab9dfb450d26359cac5d9da1706555e76f791a8c8feb27ea83dd66daf98adcab6606", 0x29}], 0x9}}], 0x3, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 47.598651ms ago: executing program 4 (id=7250): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004200"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x18}) 0s ago: executing program 0 (id=7251): socket$kcm(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) kernel console output (not intermixed with test programs): of length 231, skipping remainder of the config [ 1113.441370][T22640] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1113.481780][T22640] usb 2-1: config 1 has no interface number 0 [ 1113.493655][T22640] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1113.509843][T22640] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1113.543098][T22640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.561161][T22640] usb 2-1: Product: syz [ 1113.581631][T22640] usb 2-1: Manufacturer: syz [ 1113.595003][T22640] usb 2-1: SerialNumber: syz [ 1114.002344][T22640] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1114.109336][T16463] udevd[16463]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1114.226211][T23691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5820'. [ 1114.725359][ T30] audit: type=1326 audit(1783699622.529:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23713 comm="syz.0.5828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42daf9de59 code=0x7ffc0000 [ 1114.754038][ T30] audit: type=1326 audit(1783699622.559:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23713 comm="syz.0.5828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42daf9de59 code=0x7ffc0000 [ 1114.911308][T23719] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1115.123511][T23727] syzkaller0: entered promiscuous mode [ 1115.129760][T23727] syzkaller0: entered allmulticast mode [ 1115.541109][T23735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5835'. [ 1115.571144][T23738] fuse: Bad value for 'fd' [ 1115.920302][T23748] syzkaller0: entered promiscuous mode [ 1115.929042][T23748] syzkaller0: entered allmulticast mode [ 1116.008132][ T5724] usb 2-1: USB disconnect, device number 19 [ 1116.055780][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.062349][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.080423][T23750] batadv_slave_1: entered promiscuous mode [ 1116.081295][T23751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5841'. [ 1116.105470][T23753] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1116.113274][T23751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1116.165612][T23751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.429407][T23762] xt_hashlimit: size too large, truncated to 1048576 [ 1116.487453][T23764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5847'. [ 1116.837273][T23782] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 1117.005155][T23787] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1120.092220][T23901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5898'. [ 1120.205535][T23905] loop2: detected capacity change from 0 to 8 [ 1120.378363][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1120.378384][ T30] audit: type=1326 audit(1783699628.179:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23910 comm="syz.1.5903" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777fb9de59 code=0x7ffc0000 [ 1120.513616][ T30] audit: type=1326 audit(1783699628.209:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23910 comm="syz.1.5903" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777fb9de59 code=0x7ffc0000 [ 1120.541192][ T30] audit: type=1326 audit(1783699628.239:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23910 comm="syz.1.5903" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777fb9de59 code=0x7ffc0000 [ 1120.567504][ T30] audit: type=1326 audit(1783699628.239:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23910 comm="syz.1.5903" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777fb9de59 code=0x7ffc0000 [ 1120.593154][ T30] audit: type=1326 audit(1783699628.239:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23910 comm="syz.1.5903" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f777fb9de59 code=0x7ffc0000 [ 1120.618148][ T30] audit: type=1326 audit(1783699628.239:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23910 comm="syz.1.5903" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777fb9de59 code=0x7ffc0000 [ 1120.685106][ T30] audit: type=1326 audit(1783699628.239:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23910 comm="syz.1.5903" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777fb9de59 code=0x7ffc0000 [ 1120.728154][ T30] audit: type=1326 audit(1783699628.239:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23910 comm="syz.1.5903" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777fb9de59 code=0x7ffc0000 [ 1120.831683][ T30] audit: type=1326 audit(1783699628.239:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23910 comm="syz.1.5903" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777fb9de59 code=0x7ffc0000 [ 1120.858309][ T30] audit: type=1326 audit(1783699628.239:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23910 comm="syz.1.5903" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f777fb9de59 code=0x7ffc0000 [ 1120.990191][T23905] Dev loop2: unable to read RDB block 8 [ 1121.021635][T23905] loop2: unable to read partition table [ 1121.066391][T23905] loop2: partition table beyond EOD, truncated [ 1121.105261][T23905] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1121.126247][T23932] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 1122.175438][T23965] sch_tbf: burst 2 is lower than device lo mtu (1550) ! [ 1122.866759][T23989] sctp: [Deprecated]: syz.0.5935 (pid 23989) Use of int in maxseg socket option. [ 1122.866759][T23989] Use struct sctp_assoc_value instead [ 1123.050821][T23991] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 1123.851206][T24011] syzkaller0: entered promiscuous mode [ 1123.860918][T24011] syzkaller0: entered allmulticast mode [ 1124.158411][T24019] KVM: debugfs: duplicate directory 24019-7 [ 1124.187059][T24021] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 1124.432483][T24029] batadv_slave_1: entered promiscuous mode [ 1124.455578][T24028] batadv_slave_1: left promiscuous mode [ 1124.676855][T24041] syzkaller0: entered promiscuous mode [ 1124.683398][T24041] syzkaller0: entered allmulticast mode [ 1124.825824][T24045] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 1124.905867][T24049] IPv6: NLM_F_CREATE should be specified when creating new route [ 1124.918794][T24049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1124.926720][T24049] IPv6: NLM_F_CREATE should be set when creating new route [ 1124.934130][T24049] IPv6: NLM_F_CREATE should be set when creating new route [ 1125.398261][T24069] netlink: 'syz.0.5967': attribute type 1 has an invalid length. [ 1125.450584][T24069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1125.497635][T24071] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1125.525361][T24069] vlan2: entered allmulticast mode [ 1125.544555][T24069] bond1: (slave vlan2): making interface the new active one [ 1125.559280][T24069] vlan2: entered promiscuous mode [ 1125.569967][T24069] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 1126.061450][T24077] syzkaller0: entered promiscuous mode [ 1126.073835][T24077] syzkaller0: entered allmulticast mode [ 1126.217078][T24081] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 1126.600058][T24103] vlan2: entered allmulticast mode [ 1126.606349][T24103] bridge0: port 3(vlan2) entered blocking state [ 1126.613289][T24103] bridge0: port 3(vlan2) entered disabled state [ 1126.622683][T24103] vlan2: entered promiscuous mode [ 1127.881416][T24149] fuse: Invalid uid '0x0000000000000003' [ 1128.121629][T22640] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1128.249591][T24167] kvm: pic: non byte write [ 1128.271646][T22640] usb 5-1: Using ep0 maxpacket: 16 [ 1128.288553][T22640] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1128.297964][T22640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.317576][T22640] usb 5-1: Product: syz [ 1128.322975][T22640] usb 5-1: Manufacturer: syz [ 1128.327677][T22640] usb 5-1: SerialNumber: syz [ 1128.335920][T22640] usb 5-1: config 0 descriptor?? [ 1128.753708][T22640] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1128.767671][T22640] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1128.778626][T22640] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1128.787760][T22640] usb 5-1: media controller created [ 1128.809464][T22640] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1129.361734][T22640] zl10353_read_register: readreg error (reg=127, ret==0) [ 1129.374789][T24199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6015'. [ 1129.380799][T22640] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1129.414164][T24195] veth3: entered promiscuous mode [ 1129.421102][T22640] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1129.474150][T22640] usb 5-1: USB disconnect, device number 110 [ 1129.609760][T22640] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1130.203989][T24220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6024'. [ 1130.253591][T24220] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6024'. [ 1130.675692][T24235] sctp: [Deprecated]: syz.3.6030 (pid 24235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1130.675692][T24235] Use struct sctp_sack_info instead [ 1130.698982][T24232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6029'. [ 1130.718439][T24233] veth7: entered promiscuous mode [ 1130.930858][T24243] syz_tun: entered allmulticast mode [ 1131.182293][T22640] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1131.351634][T22640] usb 3-1: Using ep0 maxpacket: 16 [ 1131.384073][T22640] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1131.429409][T22640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.458024][T22640] usb 3-1: Product: syz [ 1131.473800][T22640] usb 3-1: Manufacturer: syz [ 1131.490370][T22640] usb 3-1: SerialNumber: syz [ 1131.517284][T22640] usb 3-1: config 0 descriptor?? [ 1131.953259][T22640] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1132.026068][T22640] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1132.065927][T22640] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1132.096873][T22640] usb 3-1: media controller created [ 1132.170378][T22640] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1132.246879][T24279] netlink: 'syz.0.6044': attribute type 1 has an invalid length. [ 1132.393949][T24279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6044'. [ 1132.427203][T24280] veth5: entered promiscuous mode [ 1132.712140][T22640] zl10353_read_register: readreg error (reg=127, ret==0) [ 1132.731018][T22640] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1132.754563][T22640] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1132.781199][T22640] usb 3-1: USB disconnect, device number 2 [ 1132.932689][T22640] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1133.461948][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1133.461968][ T30] audit: type=1326 audit(1783699641.259:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24296 comm="syz.4.6051" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277cf9de59 code=0x7ffc0000 [ 1133.605744][ T30] audit: type=1326 audit(1783699641.259:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24296 comm="syz.4.6051" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277cf9de59 code=0x7ffc0000 [ 1133.695468][ T30] audit: type=1326 audit(1783699641.279:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24296 comm="syz.4.6051" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277cf9de59 code=0x7ffc0000 [ 1133.766975][ T30] audit: type=1326 audit(1783699641.279:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24296 comm="syz.4.6051" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277cf9de59 code=0x7ffc0000 [ 1133.902183][ T30] audit: type=1326 audit(1783699641.319:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24296 comm="syz.4.6051" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f277cf9de59 code=0x7ffc0000 [ 1134.009326][ T30] audit: type=1326 audit(1783699641.319:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24296 comm="syz.4.6051" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277cf9de59 code=0x7ffc0000 [ 1134.129616][ T30] audit: type=1326 audit(1783699641.319:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24296 comm="syz.4.6051" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277cf9de59 code=0x7ffc0000 [ 1134.201683][T22640] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1134.203974][ T30] audit: type=1326 audit(1783699641.319:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24296 comm="syz.4.6051" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277cf9de59 code=0x7ffc0000 [ 1134.313487][ T30] audit: type=1326 audit(1783699641.319:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24296 comm="syz.4.6051" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277cf9de59 code=0x7ffc0000 [ 1134.364105][ T30] audit: type=1326 audit(1783699641.319:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24296 comm="syz.4.6051" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f277cf9de59 code=0x7ffc0000 [ 1134.414123][T22640] usb 4-1: Using ep0 maxpacket: 8 [ 1134.430496][T22640] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 1134.447987][T22640] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 1134.481281][T22640] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1134.514298][T22640] usb 4-1: config 250 has no interface number 0 [ 1134.536489][T22640] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1134.578674][T22640] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1134.616088][T22640] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1134.641138][T22640] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1134.660983][T22640] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1134.695865][T22640] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1134.727812][T22640] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1134.750604][T22640] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1134.775410][T22640] usb 4-1: Product: syz [ 1134.779899][T22640] usb 4-1: SerialNumber: syz [ 1134.800992][T22640] hub 4-1:250.228: bad descriptor, ignoring hub [ 1134.810142][T22640] hub 4-1:250.228: probe with driver hub failed with error -5 [ 1134.981611][T22644] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1135.028040][T22640] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 38 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1135.093260][T22640] usb 4-1: USB disconnect, device number 38 [ 1135.151848][T22644] usb 2-1: Using ep0 maxpacket: 16 [ 1135.161419][T22640] usblp0: removed [ 1135.180953][T22644] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1135.216635][T24327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6062'. [ 1135.231064][T22644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.279762][T22644] usb 2-1: Product: syz [ 1135.293931][T22644] usb 2-1: Manufacturer: syz [ 1135.313594][T22644] usb 2-1: SerialNumber: syz [ 1135.339434][T22644] usb 2-1: config 0 descriptor?? [ 1135.581650][T22640] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1135.756142][T22640] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1135.784906][T22644] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1135.804368][T22640] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1135.825207][T22640] usb 4-1: can't read configurations, error -71 [ 1135.833152][T22644] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1135.857248][T22644] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1135.875058][T22644] usb 2-1: media controller created [ 1135.936814][T22644] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1136.555831][T24344] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6069'. [ 1136.574782][T22644] zl10353_read_register: readreg error (reg=127, ret==0) [ 1136.593527][T22644] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1136.622141][T22644] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1136.654506][T22644] usb 2-1: USB disconnect, device number 20 [ 1136.703017][ T7388] vlan2: left promiscuous mode [ 1136.791067][T22644] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1136.888771][T24354] binder: 24353:24354 ioctl c0306201 200000001980 returned -14 [ 1137.357420][T24367] loop2: detected capacity change from 0 to 7 [ 1137.370532][T24367] Dev loop2: unable to read RDB block 7 [ 1137.378962][T22640] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1137.386930][T24367] loop2: AHDI p1 p2 p3 [ 1137.395372][T24367] loop2: partition table partially beyond EOD, truncated [ 1137.403407][T24367] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1137.410767][T24367] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1137.541674][T22640] usb 2-1: Using ep0 maxpacket: 8 [ 1137.555999][T22640] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1137.564814][T22640] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1137.576417][T22640] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1137.586161][T22640] usb 2-1: config 250 has no interface number 0 [ 1137.593128][T22640] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1137.605245][T22640] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1137.616260][T22640] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1137.629391][T22640] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1137.641932][T22640] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1137.656068][T22640] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1137.667066][T22640] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1137.676889][T22640] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1137.688132][T22640] usb 2-1: Product: syz [ 1137.692819][T22640] usb 2-1: SerialNumber: syz [ 1137.712426][T22640] hub 2-1:250.228: bad descriptor, ignoring hub [ 1137.729283][T22640] hub 2-1:250.228: probe with driver hub failed with error -5 [ 1137.955613][T22640] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 21 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1138.020581][T22640] usb 2-1: USB disconnect, device number 21 [ 1138.059411][T22640] usblp0: removed [ 1138.236292][T24383] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6086'. [ 1138.461875][T22640] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1138.491620][ T5724] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1138.541604][T22639] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1138.617891][T22640] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1138.628401][T22640] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1138.639572][T22640] usb 2-1: can't read configurations, error -71 [ 1138.671587][ T5724] usb 5-1: Using ep0 maxpacket: 8 [ 1138.678919][ T5724] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1138.692226][T22639] usb 3-1: Using ep0 maxpacket: 16 [ 1138.699293][ T5724] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1138.713064][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.720062][T22639] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1138.731397][T22639] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.739984][T22639] usb 3-1: Product: syz [ 1138.741294][ T5724] usb 5-1: config 0 descriptor?? [ 1138.746699][T22639] usb 3-1: Manufacturer: syz [ 1138.755070][T22639] usb 3-1: SerialNumber: syz [ 1138.765528][T22639] usb 3-1: config 0 descriptor?? [ 1138.948142][T24397] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6092'. [ 1138.977323][ T5724] usbhid 5-1:0.0: can't add hid device: -71 [ 1138.992549][ T5724] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1139.016757][ T5724] usb 5-1: USB disconnect, device number 111 [ 1139.186727][T22639] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1139.192980][T24402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6094'. [ 1139.204582][T24402] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6094'. [ 1139.205998][T22639] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1139.225771][T22639] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1139.235093][T22639] usb 3-1: media controller created [ 1139.257498][T22639] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1139.814927][T22639] zl10353_read_register: readreg error (reg=127, ret==0) [ 1139.848925][T22639] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1139.878955][T22639] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1139.930125][T22639] usb 3-1: USB disconnect, device number 3 [ 1140.078441][T22639] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1140.152280][T22648] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1140.188380][ T4942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1140.206196][ T4942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1140.217536][ T4942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1140.229954][ T4942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1140.238316][ T4942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1140.341751][T22648] usb 5-1: Using ep0 maxpacket: 8 [ 1140.358358][T22648] usb 5-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 1140.425458][T22648] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1140.465932][T22648] usb 5-1: config 1 has no interface number 0 [ 1140.482596][T22648] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1140.516243][T22648] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 1140.559769][T22648] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 1140.595067][T22648] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1140.607540][T18547] syz_tun (unregistering): left allmulticast mode [ 1140.620778][T22648] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.661667][T22648] usb 5-1: Product: syz [ 1140.676887][T22648] usb 5-1: Manufacturer: syz [ 1140.689924][T22648] usb 5-1: SerialNumber: syz [ 1141.064075][T22648] usb 5-1: USB disconnect, device number 112 [ 1141.365089][T24426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.374692][T24426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.382516][T24426] bridge_slave_0: entered allmulticast mode [ 1141.390603][T24426] bridge_slave_0: entered promiscuous mode [ 1141.401835][T24426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.409733][T24426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.418224][T24426] bridge_slave_1: entered allmulticast mode [ 1141.434053][T24426] bridge_slave_1: entered promiscuous mode [ 1141.485018][T24426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.498422][T24426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.550995][T24426] team0: Port device team_slave_0 added [ 1141.560925][T24426] team0: Port device team_slave_1 added [ 1141.615807][T24426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.629346][T24426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.669968][T24426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.687797][T24426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.696626][T24426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.746450][T24426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.920245][T24426] hsr_slave_0: entered promiscuous mode [ 1141.941181][T24426] hsr_slave_1: entered promiscuous mode [ 1141.955532][T24426] debugfs: 'hsr0' already exists in 'hsr' [ 1141.969159][T24426] Cannot create hsr debugfs directory [ 1142.001638][T22651] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1142.171532][T22651] usb 3-1: Using ep0 maxpacket: 16 [ 1142.191278][T22651] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1142.221002][T22651] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.246122][T22651] usb 3-1: Product: syz [ 1142.261204][T22651] usb 3-1: Manufacturer: syz [ 1142.275307][T22651] usb 3-1: SerialNumber: syz [ 1142.293209][ T4942] Bluetooth: hci2: command tx timeout [ 1142.307201][T22651] usb 3-1: config 0 descriptor?? [ 1142.414471][T24479] random: crng reseeded on system resumption [ 1142.515292][T24426] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.672851][T24426] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.742101][T22651] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1142.766414][T22651] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1142.777151][T22651] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1142.785941][T22651] usb 3-1: media controller created [ 1142.808136][T22651] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1142.842773][T24426] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.971586][T22640] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1143.033384][T24426] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.121702][T22640] usb 2-1: Using ep0 maxpacket: 8 [ 1143.133537][T22640] usb 2-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 1143.156145][T22640] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1143.169366][T22640] usb 2-1: config 1 has no interface number 0 [ 1143.176025][T22640] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1143.188738][T22640] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 1143.199932][T22640] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 1143.251200][T22640] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1143.271653][T22640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.279850][T22640] usb 2-1: Product: syz [ 1143.284947][T22640] usb 2-1: Manufacturer: syz [ 1143.289722][T22640] usb 2-1: SerialNumber: syz [ 1143.402596][T24426] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1143.412958][T22651] zl10353_read_register: readreg error (reg=127, ret==0) [ 1143.419334][T24426] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1143.428478][T22651] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1143.436077][T24426] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1143.445136][T22651] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1143.469068][T24426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1143.478833][T22651] usb 3-1: USB disconnect, device number 4 [ 1143.483371][T24426] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1143.498821][T24426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1143.515289][T24426] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1143.549323][T24426] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1143.595704][T22651] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1143.652887][T22640] usb 2-1: USB disconnect, device number 24 [ 1143.736171][T16485] udevd[16485]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1143.835977][T24426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.863605][T24426] 8021q: adding VLAN 0 to HW filter on device team0 [ 1143.877913][T14449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.885365][T14449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1143.909521][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.916822][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.112623][T24426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.361750][T24426] veth0_vlan: entered promiscuous mode [ 1144.373132][ T4942] Bluetooth: hci2: command tx timeout [ 1144.423017][T24426] veth1_vlan: entered promiscuous mode [ 1144.547260][T24516] input: syz1 as /devices/virtual/input/input42 [ 1144.664082][T24426] veth0_macvtap: entered promiscuous mode [ 1144.693407][T24426] veth1_macvtap: entered promiscuous mode [ 1144.753867][T24426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1144.766807][T24426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1144.820741][ T8198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.843828][ T8198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.880725][ T8198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.892338][T22640] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1144.902581][ T8198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.068009][T22640] usb 5-1: Using ep0 maxpacket: 16 [ 1145.104870][T22640] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1145.157116][T22640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.207541][T22640] usb 5-1: Product: syz [ 1145.227745][T22640] usb 5-1: Manufacturer: syz [ 1145.243810][T22640] usb 5-1: SerialNumber: syz [ 1145.266145][T22640] usb 5-1: config 0 descriptor?? [ 1145.309170][T14449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.343678][T14449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.393382][ T7388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.437380][ T7388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.734128][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1145.747680][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1145.758627][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1145.775686][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1145.777190][T22640] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1145.800215][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1145.904745][T22640] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1145.919978][T22640] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1145.936905][T22640] usb 5-1: media controller created [ 1145.955228][T22640] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1146.201753][T22637] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1146.377752][T22637] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1146.407408][T22637] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1146.427200][T22637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.453303][ T4942] Bluetooth: hci2: command tx timeout [ 1146.459176][T22637] usb 1-1: Product: syz [ 1146.465932][T22637] usb 1-1: Manufacturer: syz [ 1146.477041][T22637] usb 1-1: SerialNumber: syz [ 1146.522074][T22640] zl10353_read_register: readreg error (reg=127, ret==0) [ 1146.536543][T22640] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1146.546644][T22640] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1146.581412][T22640] usb 5-1: USB disconnect, device number 113 [ 1146.725244][T22637] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1146.756125][T24533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.759465][T22637] usb 1-1: MIDIStreaming interface descriptor not found [ 1146.764702][T24533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.780933][T24533] bridge_slave_0: entered allmulticast mode [ 1146.809431][T24533] bridge_slave_0: entered promiscuous mode [ 1146.819647][T24533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.827380][T24533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.836017][T24533] bridge_slave_1: entered allmulticast mode [ 1146.838709][T22637] usb 1-1: too many endpoints [ 1146.848917][T22640] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1146.862896][T24533] bridge_slave_1: entered promiscuous mode [ 1147.016992][T24533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1147.034388][T22637] usb 1-1: USB disconnect, device number 22 [ 1147.069519][T24533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.245132][T24533] team0: Port device team_slave_0 added [ 1147.281695][ T5724] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1147.303688][T24533] team0: Port device team_slave_1 added [ 1147.444640][T24533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.466629][ T5724] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1147.473069][T24533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.505411][ T5724] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1147.526755][T24533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.539211][ T5724] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1147.571631][T24533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.580375][T24533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.607971][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.635039][ T5724] usb 4-1: config 0 descriptor?? [ 1147.644065][T24533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.892287][ T4942] Bluetooth: hci1: command tx timeout [ 1148.006030][T24533] hsr_slave_0: entered promiscuous mode [ 1148.024368][T24533] hsr_slave_1: entered promiscuous mode [ 1148.033880][T24533] debugfs: 'hsr0' already exists in 'hsr' [ 1148.039768][T24533] Cannot create hsr debugfs directory [ 1148.108965][ T5724] steelseries 0003:1038:1410.002D: unknown main item tag 0x0 [ 1148.138377][ T5724] steelseries 0003:1038:1410.002D: unknown main item tag 0x0 [ 1148.151540][ T5724] steelseries 0003:1038:1410.002D: unknown main item tag 0x0 [ 1148.172236][ T5724] steelseries 0003:1038:1410.002D: unknown main item tag 0x0 [ 1148.180219][ T5724] steelseries 0003:1038:1410.002D: unknown main item tag 0x0 [ 1148.191253][ T5724] steelseries 0003:1038:1410.002D: unknown main item tag 0x0 [ 1148.204054][ T5724] steelseries 0003:1038:1410.002D: unknown main item tag 0x0 [ 1148.219379][ T5724] steelseries 0003:1038:1410.002D: unknown main item tag 0x0 [ 1148.221877][T22637] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1148.228798][ T5724] steelseries 0003:1038:1410.002D: unknown main item tag 0x0 [ 1148.242649][ T5724] steelseries 0003:1038:1410.002D: unknown main item tag 0x0 [ 1148.253415][ T5724] steelseries 0003:1038:1410.002D: missing HID_OUTPUT_REPORT 0 [ 1148.298456][T22640] usb 4-1: USB disconnect, device number 41 [ 1148.392368][T22644] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1148.413726][T22637] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1148.435351][T22637] usb 5-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 1148.453222][T22637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.474268][T22637] usb 5-1: Product: syz [ 1148.484248][T22637] usb 5-1: Manufacturer: syz [ 1148.506616][T22637] usb 5-1: SerialNumber: syz [ 1148.535167][ T4942] Bluetooth: hci2: command tx timeout [ 1148.562232][T22644] usb 1-1: Using ep0 maxpacket: 16 [ 1148.577947][T22644] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1148.606249][T22644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.628020][T22644] usb 1-1: Product: syz [ 1148.634883][T22644] usb 1-1: Manufacturer: syz [ 1148.650447][T22644] usb 1-1: SerialNumber: syz [ 1148.666198][T22644] usb 1-1: config 0 descriptor?? [ 1148.814867][T22637] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1148.963064][T24533] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1148.976778][T24533] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1148.986513][T24533] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1149.023382][T24533] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1149.040910][T24533] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1149.052828][T22637] usb 5-1: USB disconnect, device number 114 [ 1149.071277][T24533] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1149.096171][T24533] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1149.107966][T22644] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1149.138234][T16463] udevd[16463]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1149.144443][T24533] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1149.178814][T22644] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1149.212142][T22644] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1149.230539][T22644] usb 1-1: media controller created [ 1149.265416][T22644] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1149.461062][T24533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.499655][T24533] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.524548][T24586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.531794][T24586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.579527][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.586815][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.624671][T24610] block device autoloading is deprecated and will be removed. [ 1149.741212][T24533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.855117][T24533] veth0_vlan: entered promiscuous mode [ 1149.868217][T22644] zl10353_read_register: readreg error (reg=127, ret==0) [ 1149.888218][T22644] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1149.905202][T24533] veth1_vlan: entered promiscuous mode [ 1149.910959][T22644] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1149.947079][T22644] usb 1-1: USB disconnect, device number 23 [ 1149.972234][ T4942] Bluetooth: hci1: command tx timeout [ 1150.062925][T22644] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1150.092599][T24533] veth0_macvtap: entered promiscuous mode [ 1150.128523][T24533] veth1_macvtap: entered promiscuous mode [ 1150.264104][T24533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.324848][T24533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1150.365066][T17746] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.403005][T17746] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.445066][T17746] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.476499][T17746] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.805576][T17746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.818465][T17746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.907503][T17746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.918514][T17746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.992340][ T5724] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1151.151922][T22648] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1151.181716][ T5724] usb 5-1: Using ep0 maxpacket: 16 [ 1151.195222][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024 [ 1151.224688][ T5724] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1151.275970][ T5724] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1151.310634][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.326189][T22648] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1151.343855][T22648] usb 4-1: config 0 has no interface number 0 [ 1151.357271][ T5724] usb 5-1: config 0 descriptor?? [ 1151.366429][T22648] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1151.386946][T22648] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1151.410129][T22648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.419857][T22648] usb 4-1: Product: syz [ 1151.424570][T22648] usb 4-1: Manufacturer: syz [ 1151.429467][T22648] usb 4-1: SerialNumber: syz [ 1151.445567][T22648] usb 4-1: config 0 descriptor?? [ 1151.641718][T22651] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1151.822090][T22651] usb 6-1: Using ep0 maxpacket: 16 [ 1151.835231][T22651] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1151.847334][T22651] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.856594][ T5724] hid-picolcd 0003:04D8:C002.002E: No report with id 0x11 found [ 1151.864961][T22651] usb 6-1: Product: syz [ 1151.880109][T22651] usb 6-1: Manufacturer: syz [ 1151.887356][T22651] usb 6-1: SerialNumber: syz [ 1151.916495][T22651] usb 6-1: config 0 descriptor?? [ 1151.997774][T22644] usb 5-1: USB disconnect, device number 115 [ 1152.053429][ T4942] Bluetooth: hci1: command tx timeout [ 1152.280079][T22648] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1152.335531][T22651] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1152.349860][T22651] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1152.360637][T22651] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1152.368919][ T5724] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1152.376986][T22651] usb 6-1: media controller created [ 1152.413784][T22651] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1152.544741][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1152.556830][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1152.569109][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1152.581173][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1152.596366][ T5724] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1152.605747][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.619268][ T5724] usb 3-1: config 0 descriptor?? [ 1152.626929][T24674] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1152.681622][T22639] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1152.716940][T22648] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1152.730061][T22648] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1152.746129][T22648] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 1152.762027][T22648] usb 4-1: USB disconnect, device number 42 [ 1152.841624][T22639] usb 1-1: Using ep0 maxpacket: 32 [ 1152.849566][T22639] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1152.860576][T22639] usb 1-1: config 0 has no interface number 0 [ 1152.875775][T22639] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1152.886179][T22639] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1152.900573][T22639] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.909428][T22639] usb 1-1: Product: syz [ 1152.914495][T22639] usb 1-1: Manufacturer: syz [ 1152.919791][T22639] usb 1-1: SerialNumber: syz [ 1152.928730][T22639] usb 1-1: config 0 descriptor?? [ 1153.002063][T22651] zl10353_read_register: readreg error (reg=127, ret==0) [ 1153.012826][T22651] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1153.024728][T22651] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1153.064608][T22651] usb 6-1: USB disconnect, device number 2 [ 1153.102954][ T5724] plantronics 0003:047F:FFFF.002F: reserved main item tag 0xd [ 1153.171080][ T5724] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1153.203426][T22651] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1153.367883][ T5724] usb 3-1: USB disconnect, device number 5 [ 1153.550728][T22639] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1153.572344][T22639] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1153.593706][T22639] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1153.622033][T22639] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 1153.671771][T22637] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 1153.843716][T22637] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1153.858518][T22637] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1153.889800][T22637] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1153.909246][T22637] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1153.946267][T22637] usb 5-1: SerialNumber: syz [ 1153.966645][T24698] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1154.131732][ T4942] Bluetooth: hci1: command tx timeout [ 1154.193771][ T5724] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1154.217983][T24698] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1154.354349][ T5724] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1154.365885][ T5724] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1154.374624][ T5724] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1154.384359][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.395774][ T5724] usb 6-1: config 0 descriptor?? [ 1154.658620][T22637] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1154.825295][ T5724] hid_parser_main: 71 callbacks suppressed [ 1154.825315][ T5724] steelseries 0003:1038:1410.0030: unknown main item tag 0x0 [ 1154.861846][ T5724] steelseries 0003:1038:1410.0030: unknown main item tag 0x0 [ 1154.871535][ T5724] steelseries 0003:1038:1410.0030: item fetching failed at offset 2/40 [ 1154.895466][ T5724] steelseries 0003:1038:1410.0030: parse failed [ 1154.913993][ T5724] steelseries 0003:1038:1410.0030: probe with driver steelseries failed with error -22 [ 1155.019157][T22639] usb 6-1: USB disconnect, device number 3 [ 1155.050906][T22651] usb 5-1: USB disconnect, device number 116 [ 1155.074862][T22651] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 1155.241823][ T5724] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1155.432386][ T5724] usb 4-1: Using ep0 maxpacket: 16 [ 1155.447035][ T5724] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1155.472591][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.480906][ T5724] usb 4-1: Product: syz [ 1155.487437][ T5724] usb 4-1: Manufacturer: syz [ 1155.494408][ T5724] usb 4-1: SerialNumber: syz [ 1155.504519][ T5724] usb 4-1: config 0 descriptor?? [ 1155.520845][T22639] usb 1-1: USB disconnect, device number 24 [ 1155.542285][ T5725] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1155.722037][ T5725] usb 3-1: Using ep0 maxpacket: 32 [ 1155.747532][ T5725] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1155.773363][ T5725] usb 3-1: config 0 has no interface number 0 [ 1155.800337][ T5725] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1155.840829][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.853269][ T5725] usb 3-1: Product: syz [ 1155.857767][ T5725] usb 3-1: Manufacturer: syz [ 1155.872513][ T5725] usb 3-1: SerialNumber: syz [ 1155.892310][ T5725] usb 3-1: config 0 descriptor?? [ 1155.923887][ T5724] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1155.931763][T22644] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1155.960899][ T5724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1156.002431][ T5724] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1156.031891][ T5724] usb 4-1: media controller created [ 1156.068774][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1156.096007][T22644] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.115964][T22644] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1156.143547][T22644] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1156.180605][T22644] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.235397][T22644] usb 6-1: config 0 descriptor?? [ 1156.682391][ T5724] zl10353_read_register: readreg error (reg=127, ret==0) [ 1156.692268][T22644] hid-steam 0003:28DE:1142.0031: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1156.702387][ T5724] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1156.712518][ T5724] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1156.733555][ T5724] usb 4-1: USB disconnect, device number 43 [ 1156.773926][T22644] hid-steam 0003:28DE:1142.0031: Steam wireless receiver connected [ 1156.828481][ T5724] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1156.942621][T22644] hid-steam 0003:28DE:1142.0032: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1156.954525][ T5725] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1156.954563][ T5725] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1156.958813][ T5725] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1157.009125][ T5725] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1157.056818][ T5725] usb 3-1: USB disconnect, device number 6 [ 1157.451579][T24795] xt_hashlimit: size too large, truncated to 1048576 [ 1157.453818][T22637] usb 6-1: USB disconnect, device number 4 [ 1157.547928][T22637] hid-steam 0003:28DE:1142.0031: Steam wireless receiver disconnected [ 1157.562523][ T5724] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1157.572463][T22644] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1157.734905][ T5724] usb 4-1: Using ep0 maxpacket: 8 [ 1157.744856][T22644] usb 1-1: Using ep0 maxpacket: 16 [ 1157.753976][ T5724] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1157.759368][T22644] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1157.773770][ T5724] usb 4-1: string descriptor 0 read error: -22 [ 1157.784858][ T5724] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.40 [ 1157.804039][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.813331][T22644] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1157.828487][T22644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.839055][T22644] usb 1-1: Product: syz [ 1157.843689][T22644] usb 1-1: Manufacturer: syz [ 1157.848485][T22644] usb 1-1: SerialNumber: syz [ 1157.865714][T22644] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1157.885577][T22644] r8152-cfgselector 1-1: config 0 descriptor?? [ 1158.137774][T22644] r8152-cfgselector 1-1: Needed 1 retries to read version [ 1158.159442][T22644] r8152-cfgselector 1-1: Unknown version 0x1c60 [ 1158.172363][T22644] r8152-cfgselector 1-1: No union descriptors [ 1158.277797][T24818] fuse: Bad value for 'user_id' [ 1158.285982][ T5724] cypress 0003:04B4:BCA1.0033: unknown main item tag 0x4 [ 1158.294036][T24818] fuse: Bad value for 'user_id' [ 1158.307037][ T5724] cypress 0003:04B4:BCA1.0033: unknown main item tag 0x3 [ 1158.316443][ T5724] cypress 0003:04B4:BCA1.0033: unknown main item tag 0x6 [ 1158.327147][ T5724] cypress 0003:04B4:BCA1.0033: unexpected long global item [ 1158.336811][ T5724] cypress 0003:04B4:BCA1.0033: parse failed [ 1158.344114][ T5724] cypress 0003:04B4:BCA1.0033: probe with driver cypress failed with error -22 [ 1158.368067][T22644] r8152-cfgselector 1-1: USB disconnect, device number 25 [ 1158.392904][T22639] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1158.481070][T22637] usb 4-1: USB disconnect, device number 44 [ 1158.571565][T22639] usb 6-1: Using ep0 maxpacket: 16 [ 1158.588039][T22639] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1158.597575][T22639] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.607236][T22639] usb 6-1: Product: syz [ 1158.612331][T22639] usb 6-1: Manufacturer: syz [ 1158.617089][T22639] usb 6-1: SerialNumber: syz [ 1158.634707][T22639] usb 6-1: config 0 descriptor?? [ 1158.649358][T24826] xt_hashlimit: size too large, truncated to 1048576 [ 1159.058387][T22639] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1159.102999][T22639] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1159.120188][T22639] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1159.129042][T22639] usb 6-1: media controller created [ 1159.154159][T22639] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1159.453441][T24854] syz_tun (unregistering): left allmulticast mode [ 1159.666008][T24862] xt_hashlimit: size too large, truncated to 1048576 [ 1159.733007][T22639] zl10353_read_register: readreg error (reg=127, ret==0) [ 1159.742438][T22639] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1159.771016][T22639] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1159.796595][T22639] usb 6-1: USB disconnect, device number 5 [ 1159.904876][T22639] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1160.237833][T24879] random: crng reseeded on system resumption [ 1161.427977][T24919] netlink: 'syz.2.6274': attribute type 1 has an invalid length. [ 1161.461576][ T5725] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1161.547814][T24924] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1161.640677][T24924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6274'. [ 1161.658045][ T5725] usb 6-1: Using ep0 maxpacket: 16 [ 1161.693552][ T5725] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1161.729928][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.740875][T24919] veth3: entered promiscuous mode [ 1161.756503][T24919] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1161.767728][ T5725] usb 6-1: Product: syz [ 1161.775535][ T5725] usb 6-1: Manufacturer: syz [ 1161.786824][ T5725] usb 6-1: SerialNumber: syz [ 1161.811162][ T5725] usb 6-1: config 0 descriptor?? [ 1161.951964][T22644] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1162.118268][T22644] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1162.159685][T22644] usb 4-1: not running at top speed; connect to a high speed hub [ 1162.180633][T22644] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1162.199633][T22644] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1162.220497][T22644] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.240754][T22644] usb 4-1: config 14 has no interface number 0 [ 1162.241257][ T5725] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1162.270647][T22644] usb 4-1: config 14 has no interface number 1 [ 1162.292587][ T5725] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1162.299726][T22644] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1162.328955][ T5725] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1162.350888][ T5725] usb 6-1: media controller created [ 1162.376651][T22644] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1162.422221][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1162.436067][T22644] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1162.485065][T22644] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1162.518253][T22644] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1162.537596][T22644] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1162.584677][T22644] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1162.611953][T22644] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.653900][T22644] usb 4-1: Product: syz [ 1162.664466][T22644] usb 4-1: Manufacturer: syz [ 1162.679131][T22644] usb 4-1: SerialNumber: syz [ 1163.003477][ T5725] zl10353_read_register: readreg error (reg=127, ret==0) [ 1163.022690][ T5725] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1163.040294][ T5725] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1163.072191][ T5725] usb 6-1: USB disconnect, device number 6 [ 1163.144310][T22644] legousbtower 4-1:14.57: interrupt endpoints not found [ 1163.209178][ T5725] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1163.289829][T24960] xt_HMARK: spi-set and port-set can't be combined [ 1163.543459][T22644] legousbtower 4-1:14.228: get version request failed: -32 [ 1163.559448][T22644] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -32 [ 1164.992293][T22648] usb 4-1: USB disconnect, device number 45 [ 1165.743521][T25000] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 1165.825354][ T4942] Bluetooth: Wrong link type (-22) [ 1166.442005][T25015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6310'. [ 1166.576976][T25021] fuse: Unknown parameter 'user_i00000000000000000000' [ 1166.805714][T25029] syzkaller0: entered promiscuous mode [ 1166.814290][T25029] syzkaller0: entered allmulticast mode [ 1172.856255][T25057] syzkaller0: entered promiscuous mode [ 1172.868128][T25057] syzkaller0: entered allmulticast mode [ 1173.286872][T22639] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1173.483831][T22639] usb 6-1: Using ep0 maxpacket: 32 [ 1173.515030][T22639] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1173.523767][T22639] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1173.533476][T22639] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1173.563058][T22639] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1173.573052][T22639] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1173.584938][T22639] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1173.598152][T22639] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1173.607360][T22639] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.623605][T22639] usb 6-1: config 0 descriptor?? [ 1173.893168][T22639] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1174.096254][ C1] usblp0: nonzero read bulk status received: -71 [ 1174.103545][ T5725] usb 6-1: USB disconnect, device number 7 [ 1174.389575][T25072] usblp0: removed [ 1177.510988][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.517511][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.039110][T25120] netlink: 'syz.5.6349': attribute type 1 has an invalid length. [ 1178.212573][T25123] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6349'. [ 1179.629307][T25122] veth3: entered promiscuous mode [ 1179.962556][T25142] dvmrp0: entered allmulticast mode [ 1180.109131][T25148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6359'. [ 1180.182788][T25150] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6359'. [ 1180.663487][T25159] bridge0: port 3(wlan1) entered blocking state [ 1180.686692][T25159] bridge0: port 3(wlan1) entered disabled state [ 1180.712905][T25159] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 1180.776841][T25159] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 1180.818924][T25159] bridge0: port 3(wlan1) entered blocking state [ 1180.825483][T25159] bridge0: port 3(wlan1) entered forwarding state [ 1181.114322][T25175] netlink: 'syz.3.6367': attribute type 1 has an invalid length. [ 1181.231296][T25171] syzkaller0: entered promiscuous mode [ 1181.249213][T25171] syzkaller0: entered allmulticast mode [ 1181.309225][T25182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6367'. [ 1181.369764][T25177] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1181.505287][T25179] veth3: entered promiscuous mode [ 1181.546854][T25179] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1184.463281][T25191] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6370'. [ 1184.567408][T25194] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6370'. [ 1188.525195][T25214] netlink: 'syz.2.6378': attribute type 1 has an invalid length. [ 1188.694996][T25217] netlink: 'syz.2.6378': attribute type 10 has an invalid length. [ 1188.703086][T25217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6378'. [ 1189.123721][ T6645] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1189.134995][T25182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1189.147137][T24586] bridge0: port 3(wlan1) entered disabled state [ 1189.175212][T25197] ipip0: entered allmulticast mode [ 1189.291813][ T6645] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1189.360842][T25214] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1189.445683][T25229] loop2: detected capacity change from 0 to 7 [ 1189.467902][T25229] Dev loop2: unable to read RDB block 7 [ 1189.479944][T25229] loop2: AHDI p1 p2 p3 [ 1189.485934][T25229] loop2: partition table partially beyond EOD, truncated [ 1189.499644][T25229] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1189.515459][T25229] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1189.619727][T25215] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 1189.727012][T25216] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 1189.763070][T25217] dummy0: entered promiscuous mode [ 1189.786090][ T137] bond2: (slave dummy0): link status up again after 0 ms [ 1189.804323][ T137] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1189.825183][T25217] bond2: (slave dummy0): Removing an active aggregator [ 1189.835752][T25217] bond2: (slave dummy0): Releasing backup interface [ 1190.048777][T25247] netlink: 'syz.3.6390': attribute type 1 has an invalid length. [ 1190.166807][T25251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6389'. [ 1190.248264][T25247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6390'. [ 1190.277430][T25260] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6389'. [ 1190.315475][T25254] veth5: entered promiscuous mode [ 1190.348905][T25254] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 1190.378695][T25247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1190.519016][T25262] syzkaller0: entered promiscuous mode [ 1190.544031][T25262] syzkaller0: entered allmulticast mode [ 1191.069406][T25274] loop2: detected capacity change from 0 to 7 [ 1191.097904][T25274] Dev loop2: unable to read RDB block 7 [ 1191.126371][T25274] loop2: AHDI p1 p2 p3 [ 1191.140870][T25274] loop2: partition table partially beyond EOD, truncated [ 1191.163921][T25274] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1191.191112][T25274] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1192.382733][T25291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6403'. [ 1192.499955][T25294] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6403'. [ 1196.527442][T18359] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.546601][T25287] bond0: (slave bond_slave_0): Releasing backup interface [ 1196.635368][ T8190] bridge_slave_1: left allmulticast mode [ 1196.662519][ T8190] bridge_slave_1: left promiscuous mode [ 1196.689614][ T8190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.745476][ T8190] bridge_slave_0: left allmulticast mode [ 1196.762600][ T8190] bridge_slave_0: left promiscuous mode [ 1196.774618][ T8190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.075140][T25319] fuse: Unknown parameter '0x0000000000000003' [ 1197.461775][ T8190] bond1 (unregistering): (slave vlan2): Releasing active interface [ 1197.586263][ T8190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1197.614079][ T8190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.644384][ T8190] bond0 (unregistering): Released all slaves [ 1197.680437][ T8190] bond1 (unregistering): (slave veth3): Releasing active interface [ 1197.690888][ T8190] bond1 (unregistering): Released all slaves [ 1197.794960][T25334] syzkaller0: entered promiscuous mode [ 1197.807327][T25334] syzkaller0: entered allmulticast mode [ 1198.813473][T25356] fuse: Unknown parameter '0x0000000000000003' [ 1204.483913][ T8190] tipc: Left network mode [ 1204.785996][T25392] fuse: Unknown parameter '0x0000000000000003' [ 1205.418308][ T8190] hsr_slave_0: left promiscuous mode [ 1205.440433][ T8190] hsr_slave_1: left promiscuous mode [ 1205.450483][ T8190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1205.481018][ T8190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.509856][ T8190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1205.542813][ T8190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1205.596894][ T8190] veth1_macvtap: left promiscuous mode [ 1205.612058][ T8190] veth0_macvtap: left promiscuous mode [ 1205.631250][ T8190] veth1_vlan: left promiscuous mode [ 1205.637565][ T8190] veth0_vlan: left promiscuous mode [ 1205.662302][T25427] fuse: Unknown parameter '0x0000000000000003' [ 1206.685065][ T8190] team0 (unregistering): Port device team_slave_1 removed [ 1206.754535][ T8190] team0 (unregistering): Port device team_slave_0 removed [ 1206.951839][T22651] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1207.129728][T22651] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1207.142031][T22651] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1207.186075][T22651] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1207.208385][T22651] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1207.235023][T22651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.252508][T22651] usb 1-1: config 0 descriptor?? [ 1207.329815][T25424] syzkaller0: entered promiscuous mode [ 1207.335743][T25424] syzkaller0: entered allmulticast mode [ 1207.724480][T22651] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1208.944254][ C1] plantronics 0003:047F:FFFF.0034: usb_submit_urb(ctrl) failed: -1 [ 1209.132428][T25490] fuse: Unknown parameter 'fd0x0000000000000003' [ 1209.475558][T25496] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6473'. [ 1209.738811][T22639] usb 1-1: USB disconnect, device number 26 [ 1210.046819][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1210.098693][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1210.133682][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1210.145934][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1210.155571][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1212.324329][ T4942] Bluetooth: hci3: command tx timeout [ 1213.771277][T18532] syz_tun (unregistering): left allmulticast mode [ 1214.371604][ T4942] Bluetooth: hci3: command tx timeout [ 1214.530104][T25529] fuse: Unknown parameter 'fd0x0000000000000003' [ 1215.164380][T25541] syzkaller0: entered promiscuous mode [ 1215.171406][T25541] syzkaller0: entered allmulticast mode [ 1215.501816][ T4942] Bluetooth: hci0: command 0x0406 tx timeout [ 1216.268305][T25563] fuse: Unknown parameter 'fd0x0000000000000003' [ 1216.451552][ T5636] Bluetooth: hci3: command tx timeout [ 1217.711546][T22651] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1217.904887][T22651] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.919609][T22651] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.939930][T22651] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1217.966190][T22651] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1217.993989][T22651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.024288][T22651] usb 6-1: config 0 descriptor?? [ 1218.536898][ T5636] Bluetooth: hci3: command tx timeout [ 1218.554518][T22651] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 1218.574668][T22651] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 1218.592831][T22651] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 1218.610328][T22651] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 1218.633559][T22651] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 1218.666465][T22651] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 1218.689684][T22651] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 1218.708697][T22651] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 1218.727047][T22651] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 1218.751008][T22651] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 1218.822127][T22651] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1218.869977][T22651] usb 6-1: USB disconnect, device number 8 [ 1218.983692][T25595] fido_id[25595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1220.101606][T22651] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1220.251561][T22651] usb 6-1: Using ep0 maxpacket: 32 [ 1220.259023][T22651] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1220.272839][T22651] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1220.286430][T22651] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1220.297312][T22651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.322911][T22651] usb 6-1: config 0 descriptor?? [ 1220.758924][T22651] kye 0003:0458:5010.0036: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1220.789153][T22651] kye 0003:0458:5010.0036: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 1220.800311][T22651] kye 0003:0458:5010.0036: tablet-enabling feature report not found [ 1220.808550][T22651] kye 0003:0458:5010.0036: tablet enabling failed [ 1220.961590][T22639] usb 6-1: USB disconnect, device number 9 [ 1223.077222][T25504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.087459][T25504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.110904][T25504] bridge_slave_0: entered allmulticast mode [ 1223.148171][T25504] bridge_slave_0: entered promiscuous mode [ 1223.178118][T25504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.196072][T25504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.206374][T25504] bridge_slave_1: entered allmulticast mode [ 1223.225383][T25504] bridge_slave_1: entered promiscuous mode [ 1223.271554][T22651] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1223.412989][T25504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.663513][T25504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1223.701957][T22651] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1223.713616][T22651] usb 4-1: not running at top speed; connect to a high speed hub [ 1223.726464][T22651] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1223.735274][T22651] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1223.744276][T22651] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.756927][T22651] usb 4-1: config 14 has no interface number 0 [ 1223.763777][T22651] usb 4-1: config 14 has no interface number 1 [ 1223.770911][T22651] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1223.804178][T22651] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1223.818082][T22651] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1223.829983][T22651] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1223.844594][T22651] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1223.858755][T22651] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1223.870655][T22651] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1223.880572][T22651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.889105][T22651] usb 4-1: Product: syz [ 1223.894121][T22651] usb 4-1: Manufacturer: syz [ 1223.899366][T22651] usb 4-1: SerialNumber: syz [ 1224.005203][T25504] team0: Port device team_slave_0 added [ 1224.137475][T25640] syzkaller0: entered promiscuous mode [ 1224.143269][T25640] syzkaller0: entered allmulticast mode [ 1224.162905][T25504] team0: Port device team_slave_1 added [ 1224.373603][ T29] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1224.414781][T22651] legousbtower 4-1:14.57: interrupt endpoints not found [ 1224.533757][ T29] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1224.588052][ T29] usb 6-1: config 179 has no interface number 0 [ 1224.598872][ T29] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1224.614512][ T29] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1224.634148][ T29] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 1224.646282][ T29] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1224.665153][ T29] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1224.678507][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.714509][T25649] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1224.881281][T22651] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1224.905449][T22651] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1224.959296][T22639] usb 6-1: USB disconnect, device number 10 [ 1225.481874][T25671] usb 4-1: LEGO USB Tower reset control request failed [ 1225.512951][T22639] usb 4-1: USB disconnect, device number 46 [ 1225.540973][T22639] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 1225.664190][ T4942] Bluetooth: hci5: command 0x0406 tx timeout [ 1227.830661][T22643] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1227.997707][T22643] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1228.007336][T22643] usb 6-1: not running at top speed; connect to a high speed hub [ 1228.019195][T22643] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1228.028057][T22643] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1228.036930][T22643] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.047743][T22643] usb 6-1: config 14 has no interface number 0 [ 1228.058968][T22643] usb 6-1: config 14 has no interface number 1 [ 1228.065673][T22643] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1228.077153][T22643] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1228.089609][T22643] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1228.125459][T22643] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1228.137526][T22643] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1228.144900][T22643] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1228.156057][T22643] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1228.165690][T22643] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.174108][T22643] usb 6-1: Product: syz [ 1228.178548][T22643] usb 6-1: Manufacturer: syz [ 1228.183931][T22643] usb 6-1: SerialNumber: syz [ 1228.633210][T22643] legousbtower 6-1:14.57: interrupt endpoints not found [ 1228.651666][T22639] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1228.832693][T22639] usb 4-1: Using ep0 maxpacket: 16 [ 1228.852804][T22639] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.870614][T22639] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1228.881841][T22639] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.889969][T22639] usb 4-1: Product: syz [ 1228.894776][T22639] usb 4-1: Manufacturer: syz [ 1228.899490][T22639] usb 4-1: SerialNumber: syz [ 1228.915136][T22639] usb 4-1: config 0 descriptor?? [ 1228.927823][T22639] sr9700 4-1:0.0: probe with driver sr9700 failed with error -22 [ 1229.050512][T22643] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1229.061293][T22643] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1229.132202][T22643] usb 4-1: USB disconnect, device number 47 [ 1229.617429][T25711] usb 6-1: LEGO USB Tower reset control request failed [ 1229.625989][ T29] usb 6-1: USB disconnect, device number 11 [ 1229.659240][ T29] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 1231.270809][T25504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.302507][T25504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.368815][T25504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1231.467044][T25504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1231.492752][T25504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.542859][T25504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1231.557862][ T8190] bridge_slave_1: left allmulticast mode [ 1231.576588][ T8190] bridge_slave_1: left promiscuous mode [ 1231.593477][ T8190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.630257][ T8190] bridge_slave_0: left allmulticast mode [ 1231.645532][ T8190] bridge_slave_0: left promiscuous mode [ 1231.651845][ T8190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.924610][T22643] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1232.113775][T22643] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1232.143884][T22643] usb 6-1: not running at top speed; connect to a high speed hub [ 1232.168189][T22643] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1232.184989][T22643] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1232.206193][T22643] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.228456][T22643] usb 6-1: config 14 has no interface number 0 [ 1232.242924][ T8190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1232.264273][T22643] usb 6-1: config 14 has no interface number 1 [ 1232.295026][T22643] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1232.317439][ T8190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1232.338141][T22643] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1232.366146][ T8190] bond0 (unregistering): Released all slaves [ 1232.380807][T22643] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1232.414824][ T8190] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1232.424722][T22643] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1232.473046][T22643] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1232.473866][ T8190] bond1 (unregistering): Released all slaves [ 1232.495545][T22643] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1232.510714][T22643] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1232.520692][T22643] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.521938][ T5724] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1232.548415][T22643] usb 6-1: Product: syz [ 1232.560046][T22643] usb 6-1: Manufacturer: syz [ 1232.572292][T22643] usb 6-1: SerialNumber: syz [ 1232.600714][ T8190] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1232.616022][ T8190] bond2 (unregistering): Released all slaves [ 1232.659454][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1232.731346][ T5724] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 1232.742572][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.794524][ T5724] usb 4-1: config 0 descriptor?? [ 1232.804029][T25504] hsr_slave_0: entered promiscuous mode [ 1232.817364][ T5724] pwc: Creative Labs Webcam 5 detected. [ 1232.853784][T25504] hsr_slave_1: entered promiscuous mode [ 1232.861228][T25504] debugfs: 'hsr0' already exists in 'hsr' [ 1232.870444][T25504] Cannot create hsr debugfs directory [ 1233.023336][T22643] legousbtower 6-1:14.57: interrupt endpoints not found [ 1233.250345][ T5724] pwc: send_video_command error -71 [ 1233.273592][ T5724] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1233.294131][ T5724] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1233.322628][ T5724] usb 4-1: USB disconnect, device number 48 [ 1233.416684][ T8190] hsr_slave_0: left promiscuous mode [ 1233.422526][T22643] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1233.437144][ T8190] hsr_slave_1: left promiscuous mode [ 1233.444981][ T8190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1233.450242][T22643] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1233.470456][ T8190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1233.950702][ T8190] team0 (unregistering): Port device team_slave_1 removed [ 1233.979423][T25791] usb 6-1: LEGO USB Tower reset control request failed [ 1233.994482][ T8190] team0 (unregistering): Port device team_slave_0 removed [ 1234.006624][T22637] usb 6-1: USB disconnect, device number 12 [ 1234.106597][T22637] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 1234.593967][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1234.707950][T25805] netlink: 'syz.5.6577': attribute type 1 has an invalid length. [ 1235.319983][T25823] netlink: 'syz.5.6583': attribute type 13 has an invalid length. [ 1235.826632][T25830] vlan2: entered allmulticast mode [ 1236.163347][T25855] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6591'. [ 1236.268632][T25504] bond0: (slave netdevsim1): Releasing backup interface [ 1236.683413][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1237.394118][T25504] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1237.434984][T25504] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1237.466221][T25504] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1237.517940][T25504] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1237.550921][T25504] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1237.596603][T25504] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1237.626326][T25504] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1237.667430][T25504] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1238.286683][T25504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.434546][T25504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.518675][T24586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.526111][T24586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.603462][T25914] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6608'. [ 1238.643477][T24586] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.650686][T24586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.682760][T25916] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6608'. [ 1238.937473][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.944013][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.277910][T25504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.340859][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1239.423942][T25928] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6614'. [ 1239.631157][T25504] veth0_vlan: entered promiscuous mode [ 1239.698063][T25504] veth1_vlan: entered promiscuous mode [ 1239.896909][T25504] veth0_macvtap: entered promiscuous mode [ 1239.971004][T25504] veth1_macvtap: entered promiscuous mode [ 1240.102999][T25504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1240.168553][T25504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1240.262409][T24586] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.286206][T24586] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.313691][T25955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6624'. [ 1240.359232][T24586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.536811][T24586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.884157][T25966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6629'. [ 1240.948977][ T8190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.960670][T25969] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 1240.995722][ T8190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.152087][T17748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.199567][T17748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.932552][T25999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6642'. [ 1241.973656][T25999] vlan0: entered allmulticast mode [ 1243.392811][T26035] syzkaller0: entered promiscuous mode [ 1243.405373][T26035] syzkaller0: entered allmulticast mode [ 1246.485269][ T5636] Bluetooth: hci5: unexpected event for opcode 0x0c13 [ 1247.505968][T26108] kvm: kvm [26107]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 1247.752151][T26108] kvm: kvm [26107]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1247.760962][T26108] kvm: kvm [26107]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1247.849502][T26108] kvm: kvm [26107]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1247.858967][T26108] kvm: kvm [26107]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1247.956400][T26108] kvm: kvm [26107]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1247.987582][T26108] kvm: kvm [26107]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1248.409643][T26125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6681'. [ 1251.765213][T26120] veth3: entered promiscuous mode [ 1251.978789][T26158] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6692'. [ 1253.379818][T26188] syzkaller0: entered promiscuous mode [ 1253.395847][T26188] syzkaller0: entered allmulticast mode [ 1253.794584][T26206] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6707'. [ 1254.307862][T26210] kvm: pic: non byte write [ 1254.522391][T26219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6710'. [ 1254.644762][T26221] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6710'. [ 1259.823821][T26227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6713'. [ 1263.128873][T26248] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6721'. [ 1266.621659][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 1267.121661][T22648] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1267.320230][T22648] usb 4-1: Using ep0 maxpacket: 16 [ 1267.371302][T22648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1267.497211][T26262] syzkaller0: entered promiscuous mode [ 1267.511946][T22648] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1267.537380][T26262] syzkaller0: entered allmulticast mode [ 1267.554202][T22648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.611529][T22648] usb 4-1: Product: syz [ 1267.639395][T22648] usb 4-1: Manufacturer: syz [ 1267.672787][T22648] usb 4-1: SerialNumber: syz [ 1267.727726][T22648] usb 4-1: config 0 descriptor?? [ 1267.804476][T22648] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1267.845474][T22648] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1268.440467][T22648] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1268.834111][T26290] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6732'. [ 1269.086903][T22648] em28xx 4-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 1269.125562][T22648] em28xx 4-1:0.0: board has no eeprom [ 1269.303628][T22637] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1269.364167][T22648] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1269.373823][T22648] em28xx 4-1:0.0: dvb set to bulk mode. [ 1269.379729][ T5724] em28xx 4-1:0.0: Binding DVB extension [ 1269.425035][T22648] usb 4-1: USB disconnect, device number 49 [ 1269.447174][T22648] em28xx 4-1:0.0: Disconnecting em28xx [ 1269.491726][T22637] usb 1-1: Using ep0 maxpacket: 32 [ 1269.499999][T22637] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1269.514327][T22637] usb 1-1: config 0 has no interface number 0 [ 1269.529883][T22637] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1269.548737][T22637] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1269.558738][T22637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.607196][T22637] usb 1-1: Product: syz [ 1269.616389][T22637] usb 1-1: Manufacturer: syz [ 1269.629403][ T5724] em28xx 4-1:0.0: Registering input extension [ 1269.630891][T22637] usb 1-1: SerialNumber: syz [ 1269.637438][T22648] em28xx 4-1:0.0: Closing input extension [ 1269.678430][T22637] usb 1-1: config 0 descriptor?? [ 1269.820048][T22648] em28xx 4-1:0.0: Freeing device [ 1270.324436][T22637] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1270.337025][T22637] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1271.398425][T22637] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1271.409579][T22637] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1271.428246][T22637] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1271.438672][T22637] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1271.476858][T22637] usb 1-1: USB disconnect, device number 27 [ 1271.746245][T22327] Bluetooth: hci1: command 0x0406 tx timeout [ 1273.002246][T26330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6745'. [ 1275.996897][T26354] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6752'. [ 1276.008940][T26354] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1276.081725][T22648] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1276.210473][T26360] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6755'. [ 1276.236437][T26365] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6756'. [ 1276.247709][T26360] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6755'. [ 1276.257344][T22648] usb 4-1: Using ep0 maxpacket: 16 [ 1276.286008][T22648] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1276.319254][T22648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.396376][T22648] usb 4-1: config 0 descriptor?? [ 1276.551974][T26368] syzkaller0: entered promiscuous mode [ 1276.557977][T26368] syzkaller0: entered allmulticast mode [ 1276.642715][T22651] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1276.813452][T22651] usb 1-1: Using ep0 maxpacket: 32 [ 1276.846572][T22651] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 1276.859610][T22648] hid_parser_main: 6 callbacks suppressed [ 1276.859638][T22648] asus 0003:0C45:5112.0037: unknown main item tag 0x0 [ 1276.885452][T22651] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024 [ 1276.903098][T22648] asus 0003:0C45:5112.0037: unknown main item tag 0x0 [ 1276.926985][T22648] asus 0003:0C45:5112.0037: unknown main item tag 0x0 [ 1276.937896][T22651] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1276.961492][T22648] asus 0003:0C45:5112.0037: unknown main item tag 0x0 [ 1276.976054][T22651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.987464][T22648] asus 0003:0C45:5112.0037: unknown main item tag 0x0 [ 1277.006517][T22648] asus 0003:0C45:5112.0037: unknown main item tag 0x0 [ 1277.022605][T22648] asus 0003:0C45:5112.0037: unknown main item tag 0x0 [ 1277.035729][T22651] usb 1-1: config 0 descriptor?? [ 1277.053979][T22648] asus 0003:0C45:5112.0037: unknown main item tag 0x0 [ 1277.065480][T22648] asus 0003:0C45:5112.0037: unknown main item tag 0x0 [ 1277.079614][T22651] hub 1-1:0.0: USB hub found [ 1277.097451][T22648] asus 0003:0C45:5112.0037: unknown main item tag 0x0 [ 1277.142648][T22648] asus 0003:0C45:5112.0037: hidraw0: USB HID v0.01 Device [HID 0c45:5112] on usb-dummy_hcd.3-1/input0 [ 1277.180205][T22648] usb 4-1: USB disconnect, device number 50 [ 1277.269309][ T4942] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 1277.299853][T22651] hub 1-1:0.0: 1 port detected [ 1277.483448][T22651] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1277.518403][T22651] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1277.537926][T22651] usbhid 1-1:0.0: can't add hid device: -71 [ 1277.544479][T22651] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1277.570552][T26396] fido_id[26396]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1277.600542][T22651] usb 1-1: USB disconnect, device number 28 [ 1278.141596][T22651] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1278.335289][T22651] usb 3-1: Using ep0 maxpacket: 16 [ 1278.427607][T22651] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1278.446543][T22651] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.455994][T22651] usb 3-1: Product: syz [ 1278.467573][T22651] usb 3-1: Manufacturer: syz [ 1278.476842][T22651] usb 3-1: SerialNumber: syz [ 1278.519991][T26426] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6776'. [ 1279.338038][T22651] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1279.383360][T22651] usb 3-1: USB disconnect, device number 7 [ 1279.572245][T26451] usb usb8: usbfs: process 26451 (syz.3.6787) did not claim interface 0 before use [ 1279.647892][T26453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6788'. [ 1279.659185][T26453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6788'. [ 1279.995067][T26456] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6789'. [ 1281.354090][T22648] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1281.572289][T22648] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1281.581630][T22648] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.613087][T22648] usb 3-1: config 0 descriptor?? [ 1281.623091][T22648] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1282.924194][T22648] usb 3-1: USB disconnect, device number 8 [ 1284.143778][T26485] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6800'. [ 1284.265359][T22651] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1284.331838][ T5724] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1284.407982][T26495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6802'. [ 1284.458854][T22651] usb 5-1: Using ep0 maxpacket: 8 [ 1284.482244][ T5724] usb 6-1: Using ep0 maxpacket: 8 [ 1284.492053][T22651] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1284.526290][T22651] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1284.543549][ T5724] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1284.561548][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.569728][T22651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.585809][ T5724] usb 6-1: Product: syz [ 1284.596759][T22651] usb 5-1: config 0 descriptor?? [ 1284.605223][ T5724] usb 6-1: Manufacturer: syz [ 1284.626568][ T5724] usb 6-1: SerialNumber: syz [ 1284.655734][ T5724] usb 6-1: config 0 descriptor?? [ 1284.703655][ T5724] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1284.857058][T22651] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1284.998650][T26511] netlink: 'syz.3.6807': attribute type 13 has an invalid length. [ 1285.024088][T26511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6807'. [ 1285.272182][T22639] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1285.285728][T26527] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6811'. [ 1285.304248][ T5724] gspca_sonixj: reg_w1 err -71 [ 1285.318863][ T5724] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1285.350724][T22651] usb 5-1: USB disconnect, device number 117 [ 1285.375378][ T5724] usb 6-1: USB disconnect, device number 13 [ 1285.453587][T22639] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.474065][T26531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6813'. [ 1285.488699][T22639] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1285.502997][T22639] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1285.531520][T22639] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1285.554503][T22639] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1285.569653][T22639] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1285.579951][T22639] usb 3-1: Product: syz [ 1285.584848][T22639] usb 3-1: Manufacturer: syz [ 1285.589818][T22639] usb 3-1: SerialNumber: syz [ 1285.605382][T22639] usb 3-1: config 0 descriptor?? [ 1285.721597][T22639] rc_core: IR keymap rc-imon-rsc not found [ 1285.744218][T22639] Registered IR keymap rc-empty [ 1285.756144][T22639] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1285.780261][T22639] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input46 [ 1285.797320][T22639] imon_raw 3-1:0.0: probe with driver imon_raw failed with error -90 [ 1285.866958][T22639] usb 3-1: USB disconnect, device number 9 [ 1286.047997][T26548] netlink: 'syz.0.6820': attribute type 13 has an invalid length. [ 1286.074685][T26548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6820'. [ 1287.128387][ T4942] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 1287.243028][T26585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6836'. [ 1287.753475][T22637] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1287.946154][T22637] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1287.989981][T22637] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1288.040410][T22637] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1288.070062][T22637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.089542][T22637] usb 5-1: Product: syz [ 1288.098693][T22637] usb 5-1: Manufacturer: syz [ 1288.111486][T22637] usb 5-1: SerialNumber: syz [ 1288.252447][T26587] bridge0: port 4(erspan0) entered blocking state [ 1288.279727][T26587] bridge0: port 4(erspan0) entered disabled state [ 1288.301223][T26587] erspan0: entered allmulticast mode [ 1288.336571][T26587] erspan0: entered promiscuous mode [ 1288.365147][T26587] bridge0: port 4(erspan0) entered blocking state [ 1288.371888][T26587] bridge0: port 4(erspan0) entered forwarding state [ 1288.417483][T22637] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1288.447203][T22637] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1288.452431][T26614] erspan0: left allmulticast mode [ 1288.489236][T22637] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1288.518244][T22637] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1288.540501][T26614] erspan0: left promiscuous mode [ 1288.542248][T22637] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1288.574870][T22637] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1288.592834][T22637] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1288.632561][T22637] usb 5-1: failed to enable PITCH for EP 0x82 [ 1288.639888][T26614] bridge0: port 4(erspan0) entered disabled state [ 1288.858003][T22637] usb 5-1: USB disconnect, device number 118 [ 1289.210785][T26628] udevd[26628]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1289.285896][T26631] input: syz1 as /devices/virtual/input/input48 [ 1289.477691][T26637] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1289.477691][T26637] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1289.706256][T26641] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6857'. [ 1289.814855][T26643] syzkaller0: entered promiscuous mode [ 1289.834030][T26643] syzkaller0: entered allmulticast mode [ 1290.065862][T26650] netlink: 'syz.2.6862': attribute type 1 has an invalid length. [ 1290.156133][T26651] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96 [ 1290.218803][T26650] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1290.328595][T26653] bond3: (slave geneve2): making interface the new active one [ 1290.366362][T26653] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1290.593634][T26663] input: syz1 as /devices/virtual/input/input49 [ 1290.987691][T26680] netlink: 'syz.4.6874': attribute type 3 has an invalid length. [ 1291.886894][T26704] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6885'. [ 1291.924486][T26704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6885'. [ 1291.976932][T26704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6885'. [ 1292.768473][T26723] input: syz1 as /devices/virtual/input/input50 [ 1292.825158][T26726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6896'. [ 1292.854182][T26726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6896'. [ 1293.285588][T26737] netlink: 'syz.5.6900': attribute type 1 has an invalid length. [ 1293.407359][T26740] syzkaller0: entered promiscuous mode [ 1293.433144][T26740] syzkaller0: entered allmulticast mode [ 1293.956636][T26756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6909'. [ 1294.006689][T26758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6909'. [ 1294.083836][T26754] syzkaller0: entered promiscuous mode [ 1294.103114][T26754] syzkaller0: entered allmulticast mode [ 1294.151349][T26760] input: syz1 as /devices/virtual/input/input51 [ 1294.462163][T26764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6911'. [ 1295.360186][T26784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6921'. [ 1295.449995][T26787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6921'. [ 1295.474405][T26789] input: syz1 as /devices/virtual/input/input52 [ 1296.063953][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880792a4400: rx timeout, send abort [ 1296.088798][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880792a4400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1298.279020][T26808] x_tables: duplicate underflow at hook 1 [ 1300.407307][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.413827][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.864486][T17746] bridge_slave_1: left allmulticast mode [ 1300.870408][T17746] bridge_slave_1: left promiscuous mode [ 1300.876421][T17746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.885586][T17746] bridge_slave_0: left allmulticast mode [ 1300.891283][T17746] bridge_slave_0: left promiscuous mode [ 1300.897308][T17746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.145491][T17746] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1301.192818][T17746] bond1 (unregistering): (slave vlan2): Releasing active interface [ 1301.225169][T17746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1301.238277][T17746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1301.248695][T17746] bond0 (unregistering): Released all slaves [ 1301.266319][T17746] bond1 (unregistering): (slave veth3): Releasing active interface [ 1301.279407][T17746] bond1 (unregistering): Released all slaves [ 1301.296874][T17746] bond2 (unregistering): Released all slaves [ 1301.323419][T17746] bond3 (unregistering): Released all slaves [ 1301.343409][T17746] bond4 (unregistering): Released all slaves [ 1301.405749][T26798] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1301.437393][T26798] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1301.717091][T17746] tipc: Left network mode [ 1302.049180][T26832] syzkaller0: entered promiscuous mode [ 1302.055462][T26832] syzkaller0: entered allmulticast mode [ 1302.870198][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888029557c00: rx timeout, send abort [ 1302.879107][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888029557c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1307.576993][T17746] hsr_slave_0: left promiscuous mode [ 1307.584152][T17746] hsr_slave_1: left promiscuous mode [ 1307.590409][T17746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1307.599147][T17746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.938679][T17746] team0 (unregistering): Port device team_slave_1 removed [ 1307.965263][T17746] team0 (unregistering): Port device team_slave_0 removed [ 1308.285509][T26848] bridge0: port 4(vlan4) entered blocking state [ 1308.309641][T26848] bridge0: port 4(vlan4) entered disabled state [ 1308.327833][T26848] vlan4: entered allmulticast mode [ 1308.344632][T26848] geneve0: entered allmulticast mode [ 1308.367050][T26848] vlan4: entered promiscuous mode [ 1308.387646][T26848] geneve0: entered promiscuous mode [ 1308.439674][T26870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6957'. [ 1309.096001][T22637] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1309.261800][T22637] usb 6-1: Using ep0 maxpacket: 16 [ 1309.278808][T22637] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1309.294332][T22637] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.306875][T22637] usb 6-1: Product: syz [ 1309.323959][T22637] usb 6-1: Manufacturer: syz [ 1309.330536][T22637] usb 6-1: SerialNumber: syz [ 1309.346180][T22637] usb 6-1: config 0 descriptor?? [ 1309.647719][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079e9f400: rx timeout, send abort [ 1309.656659][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888079e9f400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1309.760641][T22637] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1309.775344][T22637] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1309.804016][T22637] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1309.821595][T22637] usb 6-1: media controller created [ 1309.840099][T26915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1309.880996][T22637] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1309.967834][T22637] zl10353_read_register: readreg error (reg=127, ret==0) [ 1309.999042][T22637] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1310.032159][T22637] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1310.080046][T22637] usb 6-1: USB disconnect, device number 14 [ 1310.185989][T26927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6982'. [ 1310.227845][T22637] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1310.828109][T26959] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6998'. [ 1310.885881][T26959] team0 (unregistering): Port device team_slave_0 removed [ 1310.903828][T26959] team0 (unregistering): Port device team_slave_1 removed [ 1311.535397][T26993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7015'. [ 1311.559688][T26993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1311.571821][T26993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.589044][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888051529800: rx timeout, send abort [ 1311.597968][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888051529800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1311.939397][T22651] IPVS: starting estimator thread 0... [ 1312.041596][T27013] IPVS: using max 26 ests per chain, 62400 per kthread [ 1312.600439][T27035] netlink: 'syz.4.7033': attribute type 13 has an invalid length. [ 1312.609086][T27035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7033'. [ 1312.931892][T27050] input: syz1 as /devices/virtual/input/input53 [ 1313.162490][T27055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.174165][T27055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.204974][T27058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.212283][T27058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.219979][T27058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.227422][T27058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1313.237999][T27058] bridge0: entered promiscuous mode [ 1313.243994][T27058] bridge0: entered allmulticast mode [ 1313.332267][T27062] netlink: 'syz.4.7044': attribute type 13 has an invalid length. [ 1313.340408][T27062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7044'. [ 1313.554985][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803cf24800: rx timeout, send abort [ 1313.563988][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803cf24800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1313.748297][T27077] netlink: 'syz.4.7048': attribute type 13 has an invalid length. [ 1314.040203][T27081] mac80211_hwsim hwsim37 syzkaller0: Caught tx_queue_len zero misconfig [ 1314.067021][T27083] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 1314.094786][T27083] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 1314.241691][T27086] input: syz1 as /devices/virtual/input/input54 [ 1314.948268][T27109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7055'. [ 1315.130587][T27117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7066'. [ 1315.277088][T27123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7068'. [ 1315.378591][T27129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7072'. [ 1315.393188][T27126] syzkaller0: entered promiscuous mode [ 1315.412855][T27126] syzkaller0: entered allmulticast mode [ 1315.786412][T27150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7080'. [ 1316.081547][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880316eac00: rx timeout, send abort [ 1316.090395][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880316eac00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1316.276349][T27170] netlink: 'syz.4.7088': attribute type 13 has an invalid length. [ 1316.667671][T27185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7094'. [ 1317.264114][T27215] netlink: 592 bytes leftover after parsing attributes in process `syz.5.7111'. [ 1317.289851][T27218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7110'. [ 1317.402385][T27222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7114'. [ 1317.668677][T27237] tipc: Started in network mode [ 1317.682655][T27237] tipc: Node identity 32a8501e6efc, cluster identity 4711 [ 1317.703194][T27237] tipc: Enabled bearer , priority 0 [ 1317.723672][T27241] syzkaller0: entered promiscuous mode [ 1317.751218][T27241] syzkaller0: entered allmulticast mode [ 1317.859133][T27237] tipc: Resetting bearer [ 1317.883556][T27235] tipc: Resetting bearer [ 1317.955327][T27251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7127'. [ 1317.967997][T27235] tipc: Disabling bearer [ 1318.005008][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802bee2400: rx timeout, send abort [ 1318.013803][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802bee2400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1318.118321][T27255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.126218][T27255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.198906][T27259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.206213][T27259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1318.213904][T27259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.221149][T27259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.273897][T27259] bridge0: entered promiscuous mode [ 1318.289868][T27259] bridge0: entered allmulticast mode [ 1318.389383][T27266] netlink: 'syz.0.7133': attribute type 13 has an invalid length. [ 1318.691122][T27266] syzkaller0: entered promiscuous mode [ 1318.714079][T27266] syzkaller0: entered allmulticast mode [ 1319.406146][T27322] netlink: 'syz.0.7160': attribute type 13 has an invalid length. [ 1319.510245][T27322] syzkaller0: entered promiscuous mode [ 1319.524848][T27322] syzkaller0: entered allmulticast mode [ 1319.848731][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804b5fac00: rx timeout, send abort [ 1319.862624][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804b5fac00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1320.284108][T27359] netlink: 'syz.4.7176': attribute type 13 has an invalid length. [ 1320.908578][T27385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.023850][T27391] netlink: 'syz.5.7191': attribute type 61 has an invalid length. [ 1321.039381][T27391] netlink: 'syz.5.7191': attribute type 3 has an invalid length. [ 1321.477744][T27412] bridge0: entered promiscuous mode [ 1321.489544][T27412] bridge0: entered allmulticast mode [ 1321.637828][T27420] netlink: 'syz.5.7204': attribute type 61 has an invalid length. [ 1321.655110][T27420] netlink: 'syz.5.7204': attribute type 3 has an invalid length. [ 1321.739932][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888065117800: rx timeout, send abort [ 1321.749096][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888065117800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1322.026271][T27439] bridge0: entered promiscuous mode [ 1322.032156][T27439] bridge0: entered allmulticast mode [ 1322.134917][T22644] IPVS: starting estimator thread 0... [ 1322.155538][T27441] bridge0: left promiscuous mode [ 1322.198833][T27441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.206381][T27441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1322.243037][T27447] IPVS: using max 30 ests per chain, 72000 per kthread [ 1322.388624][T27441] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1322.416643][T27441] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1322.489404][T27441] veth3: left promiscuous mode [ 1322.499426][T27441] veth5: left promiscuous mode [ 1322.563122][ T6645] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1322.621559][T17746] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1322.643305][T17746] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1322.659462][T17746] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1322.673818][T17746] bond1: active interface up! [ 1322.715736][T24586] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1322.735736][T24586] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1322.787629][T24586] bond2: active interface up! [ 1322.811862][T24586] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1322.921682][T24586] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1323.052496][ T8190] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1323.135600][T27485] __nla_validate_parse: 2 callbacks suppressed [ 1323.135624][T27485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7232'. [ 1323.153758][T27485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7232'. [ 1323.191524][ T8190] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1323.294092][T27490] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7232'. [ 1323.303260][ T8190] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1323.303292][T27490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7232'. [ 1323.411673][T22644] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1323.431556][ T6645] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1323.544635][T27502] mac80211_hwsim hwsim37 syzkaller0: Caught tx_queue_len zero misconfig [ 1323.553256][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880553d1800: rx timeout, send abort [ 1323.562326][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880553d1800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1323.597272][T22644] usb 4-1: Using ep0 maxpacket: 16 [ 1323.610474][T22644] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1323.625862][T22644] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.634417][T22644] usb 4-1: Product: syz [ 1323.639008][T22644] usb 4-1: Manufacturer: syz [ 1323.665582][T22644] usb 4-1: SerialNumber: syz [ 1323.674925][T22644] usb 4-1: config 0 descriptor?? [ 1323.698558][T27503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7240'. [ 1323.716701][T27503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7240'. [ 1323.918635][T27516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7246'. [ 1323.930782][T27516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7246'. [ 1324.082474][T27521] netlink: 'syz.4.7247': attribute type 3 has an invalid length. [ 1324.102924][T22644] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1324.116968][T27516] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7246'. [ 1324.132778][T22644] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1324.142688][T27516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7246'. [ 1324.163370][T22644] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1324.193003][T22644] usb 4-1: media controller created [ 1324.247071][T22644] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1324.321596][T27488] ------------[ cut here ]------------ [ 1324.329311][T27488] usb 4-1: BOGUS control dir, pipe 80003380 doesn't match bRequestType c0 [ 1324.338019][T27488] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.3.7234/27488 [ 1324.348740][T27488] Modules linked in: [ 1324.355664][T27488] CPU: 0 UID: 0 PID: 27488 Comm: syz.3.7234 Tainted: G L syzkaller #0 PREEMPT(full) [ 1324.367064][T27488] Tainted: [L]=SOFTLOCKUP [ 1324.371751][T27488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1324.381941][T27488] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 1324.387682][T27488] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 1324.407502][T27488] RSP: 0000:ffffc9000d537718 EFLAGS: 00010246 [ 1324.414461][T27488] RAX: 0000000000000000 RBX: ffff888034aeb600 RCX: 0000000080003380 [ 1324.423083][T27488] RDX: ffff888029f80980 RSI: ffffffff8ca31080 RDI: ffffffff906565b0 [ 1324.431178][T27488] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 1324.439306][T27488] R10: ffffc9000d537800 R11: fffff52001aa6f0c R12: 1ffff1100ea494e8 [ 1324.447443][T27488] R13: ffff88807524a740 R14: ffff888029f80980 R15: 0000000080003380 [ 1324.455571][T27488] FS: 00007fc953bf66c0(0000) GS:ffff888124f58000(0000) knlGS:0000000000000000 [ 1324.464673][T27488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1324.471353][T27488] CR2: 00007fb1f77eb540 CR3: 0000000075254000 CR4: 00000000003526f0 [ 1324.479465][T27488] Call Trace: [ 1324.482872][T27488] [ 1324.485887][T27488] usb_start_wait_urb+0x13f/0x5b0 [ 1324.491001][T27488] ? trace_kmalloc+0x2a/0xf0 [ 1324.495910][T27488] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1324.501660][T27488] usb_control_msg+0x234/0x3e0 [ 1324.506498][T27488] dtv5100_i2c_msg+0x231/0x2f0 [ 1324.511528][T27488] dtv5100_i2c_xfer+0x1a5/0x610 [ 1324.517202][T27488] __i2c_transfer+0x7be/0x1fe0 [ 1324.522601][T27488] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1324.528508][T27488] ? lockdep_hardirqs_on+0x7a/0x110 [ 1324.534072][T27488] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1324.539958][T27488] ? rt_mutex_lock_nested+0x156/0x1c0 [ 1324.545480][T27488] ? i2c_transfer+0xc8/0x2d0 [ 1324.550138][T27488] i2c_transfer+0x1cc/0x2d0 [ 1324.554810][T27488] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 1324.560517][T27488] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1324.566812][T27488] ? _copy_from_user+0x94/0xb0 [ 1324.571736][T27488] i2cdev_write+0x113/0x1e0 [ 1324.576386][T27488] vfs_writev+0x4bb/0x990 [ 1324.580799][T27488] ? __pfx_i2cdev_write+0x10/0x10 [ 1324.585978][T27488] ? __pfx_vfs_writev+0x10/0x10 [ 1324.590917][T27488] ? __fget_files+0x2a/0x420 [ 1324.595663][T27488] ? __fget_files+0x3a2/0x420 [ 1324.600443][T27488] ? __fget_files+0x2a/0x420 [ 1324.605170][T27488] do_writev+0x154/0x2e0 [ 1324.609475][T27488] ? __pfx_do_writev+0x10/0x10 [ 1324.614812][T27488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.621679][T27488] do_syscall_64+0x174/0x580 [ 1324.626339][T27488] ? trace_irq_disable+0x3b/0x140 [ 1324.631883][T27488] ? clear_bhb_loop+0x40/0x90 [ 1324.636663][T27488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.642782][T27488] RIP: 0033:0x7fc95599de59 [ 1324.647597][T27488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1324.667556][T27488] RSP: 002b:00007fc953bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1324.676190][T27488] RAX: ffffffffffffffda RBX: 00007fc955c25fa0 RCX: 00007fc95599de59 [ 1324.684399][T27488] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1324.692937][T27488] RBP: 00007fc955a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1324.701100][T27488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1324.709488][T27488] R13: 00007fc955c26038 R14: 00007fc955c25fa0 R15: 00007fc955d4fa48 [ 1324.717718][T27488] [ 1324.721793][T27488] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1324.729129][T27488] CPU: 0 UID: 0 PID: 27488 Comm: syz.3.7234 Tainted: G L syzkaller #0 PREEMPT(full) [ 1324.740362][T27488] Tainted: [L]=SOFTLOCKUP [ 1324.744743][T27488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1324.754848][T27488] Call Trace: [ 1324.758247][T27488] [ 1324.761229][T27488] vpanic+0x56c/0xa60 [ 1324.765280][T27488] ? __pfx__printk+0x10/0x10 [ 1324.769902][T27488] ? __pfx_vpanic+0x10/0x10 [ 1324.774530][T27488] ? is_bpf_text_address+0x292/0x2b0 [ 1324.779860][T27488] ? is_bpf_text_address+0x26/0x2b0 [ 1324.785100][T27488] panic+0xc5/0xd0 [ 1324.788862][T27488] ? __pfx_panic+0x10/0x10 [ 1324.793327][T27488] __warn+0x315/0x4c0 [ 1324.797353][T27488] ? usb_submit_urb+0x1057/0x18b0 [ 1324.802404][T27488] ? usb_submit_urb+0x1057/0x18b0 [ 1324.807457][T27488] __report_bug+0x331/0x530 [ 1324.812081][T27488] ? usb_submit_urb+0x1057/0x18b0 [ 1324.817139][T27488] ? __pfx___report_bug+0x10/0x10 [ 1324.822282][T27488] ? stack_trace_save+0xa9/0x100 [ 1324.827288][T27488] ? __kmalloc_noprof+0x1ad/0x720 [ 1324.832353][T27488] ? kasan_save_track+0x4f/0x80 [ 1324.837250][T27488] report_bug_entry+0x19a/0x290 [ 1324.842508][T27488] ? usb_submit_urb+0x1100/0x18b0 [ 1324.847578][T27488] ? usb_submit_urb+0x1105/0x18b0 [ 1324.852635][T27488] handle_bug+0xce/0x200 [ 1324.856906][T27488] exc_invalid_op+0x1a/0x50 [ 1324.861432][T27488] asm_exc_invalid_op+0x1a/0x20 [ 1324.866311][T27488] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 1324.872013][T27488] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 1324.891753][T27488] RSP: 0000:ffffc9000d537718 EFLAGS: 00010246 [ 1324.897857][T27488] RAX: 0000000000000000 RBX: ffff888034aeb600 RCX: 0000000080003380 [ 1324.905875][T27488] RDX: ffff888029f80980 RSI: ffffffff8ca31080 RDI: ffffffff906565b0 [ 1324.913878][T27488] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 1324.921893][T27488] R10: ffffc9000d537800 R11: fffff52001aa6f0c R12: 1ffff1100ea494e8 [ 1324.929910][T27488] R13: ffff88807524a740 R14: ffff888029f80980 R15: 0000000080003380 [ 1324.937938][T27488] ? usb_submit_urb+0x1091/0x18b0 [ 1324.943013][T27488] usb_start_wait_urb+0x13f/0x5b0 [ 1324.948069][T27488] ? trace_kmalloc+0x2a/0xf0 [ 1324.952713][T27488] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1324.958305][T27488] usb_control_msg+0x234/0x3e0 [ 1324.963100][T27488] dtv5100_i2c_msg+0x231/0x2f0 [ 1324.967906][T27488] dtv5100_i2c_xfer+0x1a5/0x610 [ 1324.972787][T27488] __i2c_transfer+0x7be/0x1fe0 [ 1324.977589][T27488] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1324.983424][T27488] ? lockdep_hardirqs_on+0x7a/0x110 [ 1324.988738][T27488] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1324.994575][T27488] ? rt_mutex_lock_nested+0x156/0x1c0 [ 1324.999969][T27488] ? i2c_transfer+0xc8/0x2d0 [ 1325.004590][T27488] i2c_transfer+0x1cc/0x2d0 [ 1325.009126][T27488] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 1325.014808][T27488] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1325.021026][T27488] ? _copy_from_user+0x94/0xb0 [ 1325.025865][T27488] i2cdev_write+0x113/0x1e0 [ 1325.030522][T27488] vfs_writev+0x4bb/0x990 [ 1325.034910][T27488] ? __pfx_i2cdev_write+0x10/0x10 [ 1325.040025][T27488] ? __pfx_vfs_writev+0x10/0x10 [ 1325.044992][T27488] ? __fget_files+0x2a/0x420 [ 1325.049646][T27488] ? __fget_files+0x3a2/0x420 [ 1325.054362][T27488] ? __fget_files+0x2a/0x420 [ 1325.058995][T27488] do_writev+0x154/0x2e0 [ 1325.063284][T27488] ? __pfx_do_writev+0x10/0x10 [ 1325.068182][T27488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.074289][T27488] do_syscall_64+0x174/0x580 [ 1325.078921][T27488] ? trace_irq_disable+0x3b/0x140 [ 1325.083988][T27488] ? clear_bhb_loop+0x40/0x90 [ 1325.088749][T27488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.094693][T27488] RIP: 0033:0x7fc95599de59 [ 1325.099229][T27488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.118886][T27488] RSP: 002b:00007fc953bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1325.127343][T27488] RAX: ffffffffffffffda RBX: 00007fc955c25fa0 RCX: 00007fc95599de59 [ 1325.135445][T27488] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1325.143462][T27488] RBP: 00007fc955a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1325.151503][T27488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1325.159498][T27488] R13: 00007fc955c26038 R14: 00007fc955c25fa0 R15: 00007fc955d4fa48 [ 1325.167510][T27488] [ 1325.171156][T27488] Kernel Offset: disabled [ 1325.175493][T27488] Rebooting in 86400 seconds..