last executing test programs: 50.931110185s ago: executing program 0 (id=128): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x101ff, 0x0, 0x200, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) 49.505337438s ago: executing program 1 (id=133): getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x25, 0x0, &(0x7f00000002c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfffc}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x6, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 48.525289998s ago: executing program 1 (id=135): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140), &(0x7f0000000040)=0x8) 47.902879467s ago: executing program 1 (id=136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)={0x2c, r1, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x7d1749d01657ddff}, 0x40840) 47.356791874s ago: executing program 0 (id=139): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x101ff, 0x0, 0x200, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) 47.161523952s ago: executing program 1 (id=140): socket$vsock_stream(0x28, 0x1, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 46.677374849s ago: executing program 1 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4004, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) 46.127603546s ago: executing program 1 (id=145): getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x25, 0x0, &(0x7f00000002c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfffc}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x6, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 43.813721142s ago: executing program 0 (id=151): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) close(0xffffffffffffffff) close(r0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x800443d3, 0x20000002) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/204, 0xcc, 0x1, &(0x7f0000000480)=""/127, 0x7f}, &(0x7f0000000540)=0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 43.001009746s ago: executing program 0 (id=153): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xfffd, 0x2, 0x3, 0xfff, 0x6, 0x401, 0x4]}}]}]}]}, 0x38}}, 0x0) 42.638146358s ago: executing program 0 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4004, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) 41.948758933s ago: executing program 0 (id=158): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f019008000000000700080606000000110904"], 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 30.477771165s ago: executing program 32 (id=145): getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x25, 0x0, &(0x7f00000002c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfffc}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x6, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 26.6157313s ago: executing program 33 (id=158): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f019008000000000700080606000000110904"], 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 9.970757911s ago: executing program 3 (id=225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r1, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x84) 8.958680152s ago: executing program 3 (id=226): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.865493969s ago: executing program 2 (id=227): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000900)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02cf5aa6a3618000031afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b0147a915378e6492e5b94473dcdc87e7c794fb262a7e9ee0b94300000000000004000005000000004896a16034ca022f4072dc7fb5ec", 0xd3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)="9cd568f007e6fbdb5a1be2afaf20620104bb485cb7d2dfcc63838529578dcb73e9adf0c31c8d318481f8fdf53d3c3e442f432eed7729dd31ebb2844bd318b9dca1c4d3e35d5ed5bab8b780431444550f170283849a58b3f025728a177a64dc07ec27b73305d532801d81ea55b1f16465e5b5b9fcc92def4c925dcce2f49a63cea0eddc84b367ad8bc94d03000000000000854ba9a6954722a02360c9c32dd2d434e6d621d929dcbcaab2b9fa02f105aea2e486f8fc046906a0c6fe0e0000004e75ef325da7af1e069c186fdd057974cd10bd57662cd43163f3122fbfcc210d", 0xdf}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$inet6(0xa, 0x80000, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7.525036403s ago: executing program 2 (id=229): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x1, 0x0, &(0x7f00000000c0)=0xffffffffffffffb7) 6.981393728s ago: executing program 2 (id=230): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x17, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.65391703s ago: executing program 3 (id=231): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, 0x0) 6.511699018s ago: executing program 4 (id=232): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1040}, 0x20044000) 5.914876556s ago: executing program 2 (id=233): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) getgid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003d40)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000003d80)={{{@in6=@loopback, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000003e80)=0xe8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) getgid() setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) 5.906413836s ago: executing program 4 (id=234): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r1, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x84) 5.12437274s ago: executing program 4 (id=235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x5, 0x1, 0x401}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4c1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 4.56137683s ago: executing program 2 (id=236): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x14, 0x4, "12f05bdc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) read$hiddev(r2, &(0x7f0000000140)=""/234, 0xea) 3.943145703s ago: executing program 3 (id=237): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000900)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02cf5aa6a3618000031afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b0147a915378e6492e5b94473dcdc87e7c794fb262a7e9ee0b94300000000000004000005000000004896a16034ca022f4072dc7fb5ec", 0xd3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)="9cd568f007e6fbdb5a1be2afaf20620104bb485cb7d2dfcc63838529578dcb73e9adf0c31c8d318481f8fdf53d3c3e442f432eed7729dd31ebb2844bd318b9dca1c4d3e35d5ed5bab8b780431444550f170283849a58b3f025728a177a64dc07ec27b73305d532801d81ea55b1f16465e5b5b9fcc92def4c925dcce2f49a63cea0eddc84b367ad8bc94d03000000000000854ba9a6954722a02360c9c32dd2d434e6d621d929dcbcaab2b9fa02f105aea2e486f8fc046906a0c6fe0e0000004e75ef325da7af1e069c186fdd057974cd10bd57662cd43163f3122fbfcc210d", 0xdf}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$inet6(0xa, 0x80000, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.067134972s ago: executing program 4 (id=238): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x4000001, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x1, 0x0) 1.965323456s ago: executing program 3 (id=239): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 967.258254ms ago: executing program 4 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0xc7, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x0, 0x1, 0x3fb, 0x5, 0x9dc, 0x0, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0x8f5, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x0, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 435.119341ms ago: executing program 2 (id=241): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x17, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 342.318961ms ago: executing program 3 (id=242): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="61030206016d5c13f09d4d1585c23d0de68b69c3dddd883f357b092a"], 0x1c) 0s ago: executing program 4 (id=243): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, 0x0, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x84) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. [ 192.500893][ T5778] cgroup: Unknown subsys name 'net' [ 192.633418][ T5778] cgroup: Unknown subsys name 'cpuset' [ 192.653694][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 199.532271][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 205.361044][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.373072][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.381338][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.390108][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.410962][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.424310][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.436299][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.471124][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.482346][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.482465][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.500772][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.508998][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.518666][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.532092][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.540517][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.547194][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.555320][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.615126][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.645765][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.647283][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.655208][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.669956][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.684230][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.686932][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.695977][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.485840][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 207.563331][ T51] Bluetooth: hci1: command tx timeout [ 207.637710][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 207.659676][ T51] Bluetooth: hci0: command tx timeout [ 207.667048][ T51] Bluetooth: hci2: command tx timeout [ 207.723429][ T51] Bluetooth: hci3: command tx timeout [ 207.830052][ T51] Bluetooth: hci4: command tx timeout [ 207.908847][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 208.201823][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 208.625963][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 208.653130][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.660711][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.671778][ T5797] bridge_slave_0: entered allmulticast mode [ 208.682540][ T5797] bridge_slave_0: entered promiscuous mode [ 208.766260][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.773999][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.781839][ T5797] bridge_slave_1: entered allmulticast mode [ 208.792128][ T5797] bridge_slave_1: entered promiscuous mode [ 209.170211][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.186404][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.194302][ T5810] bridge_slave_0: entered allmulticast mode [ 209.204424][ T5810] bridge_slave_0: entered promiscuous mode [ 209.235410][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.399248][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.415735][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.423647][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.431405][ T5810] bridge_slave_1: entered allmulticast mode [ 209.448468][ T5810] bridge_slave_1: entered promiscuous mode [ 209.464994][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.472598][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.481598][ T5794] bridge_slave_0: entered allmulticast mode [ 209.491812][ T5794] bridge_slave_0: entered promiscuous mode [ 209.642439][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.643386][ T51] Bluetooth: hci1: command tx timeout [ 209.650276][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.663290][ T5794] bridge_slave_1: entered allmulticast mode [ 209.673202][ T5794] bridge_slave_1: entered promiscuous mode [ 209.723289][ T51] Bluetooth: hci2: command tx timeout [ 209.728933][ T5808] Bluetooth: hci0: command tx timeout [ 209.788344][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.833167][ T51] Bluetooth: hci3: command tx timeout [ 209.887458][ T5797] team0: Port device team_slave_0 added [ 209.894117][ T51] Bluetooth: hci4: command tx timeout [ 209.939477][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.949357][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.957145][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.964942][ T5805] bridge_slave_0: entered allmulticast mode [ 209.974666][ T5805] bridge_slave_0: entered promiscuous mode [ 210.030840][ T5797] team0: Port device team_slave_1 added [ 210.048718][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.130855][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.138834][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.146930][ T5805] bridge_slave_1: entered allmulticast mode [ 210.157121][ T5805] bridge_slave_1: entered promiscuous mode [ 210.212375][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.265647][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.273520][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.280955][ T5802] bridge_slave_0: entered allmulticast mode [ 210.290373][ T5802] bridge_slave_0: entered promiscuous mode [ 210.413846][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.420922][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.449904][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.476004][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.483725][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.491166][ T5802] bridge_slave_1: entered allmulticast mode [ 210.500707][ T5802] bridge_slave_1: entered promiscuous mode [ 210.517661][ T5810] team0: Port device team_slave_0 added [ 210.601202][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.608618][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.634921][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.686686][ T5810] team0: Port device team_slave_1 added [ 210.701822][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.721921][ T5794] team0: Port device team_slave_0 added [ 210.741248][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.843566][ T5794] team0: Port device team_slave_1 added [ 210.935272][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.021764][ T5805] team0: Port device team_slave_0 added [ 211.037583][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.049520][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.056802][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.083117][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.165899][ T5805] team0: Port device team_slave_1 added [ 211.208918][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.216382][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.242934][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.290809][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.298136][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.324585][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.449764][ T5802] team0: Port device team_slave_0 added [ 211.470844][ T5797] hsr_slave_0: entered promiscuous mode [ 211.481585][ T5797] hsr_slave_1: entered promiscuous mode [ 211.493858][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.500996][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.527315][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.600105][ T5802] team0: Port device team_slave_1 added [ 211.665659][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.673075][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.699434][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.749760][ T51] Bluetooth: hci1: command tx timeout [ 211.813394][ T51] Bluetooth: hci2: command tx timeout [ 211.819035][ T51] Bluetooth: hci0: command tx timeout [ 211.853828][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.860975][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.887400][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.887522][ T5808] Bluetooth: hci3: command tx timeout [ 211.939275][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.946586][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.973086][ T5808] Bluetooth: hci4: command tx timeout [ 211.978753][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.049363][ T5810] hsr_slave_0: entered promiscuous mode [ 212.058715][ T5810] hsr_slave_1: entered promiscuous mode [ 212.067254][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 212.073224][ T5810] Cannot create hsr debugfs directory [ 212.128853][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.136987][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.163521][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.256811][ T5794] hsr_slave_0: entered promiscuous mode [ 212.267845][ T5794] hsr_slave_1: entered promiscuous mode [ 212.279665][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 212.285862][ T5794] Cannot create hsr debugfs directory [ 212.591909][ T5805] hsr_slave_0: entered promiscuous mode [ 212.601185][ T5805] hsr_slave_1: entered promiscuous mode [ 212.609654][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 212.615655][ T5805] Cannot create hsr debugfs directory [ 212.867918][ T5802] hsr_slave_0: entered promiscuous mode [ 212.878817][ T5802] hsr_slave_1: entered promiscuous mode [ 212.888277][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 212.894356][ T5802] Cannot create hsr debugfs directory [ 213.803117][ T5808] Bluetooth: hci1: command tx timeout [ 213.884062][ T5808] Bluetooth: hci0: command tx timeout [ 213.885384][ T51] Bluetooth: hci2: command tx timeout [ 213.964340][ T51] Bluetooth: hci3: command tx timeout [ 214.034918][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 214.043554][ T51] Bluetooth: hci4: command tx timeout [ 214.062510][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 214.116860][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 214.139107][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 214.413892][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 214.492077][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 214.534736][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 214.555663][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 214.668795][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.707424][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.736436][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.820969][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.974704][ T5805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.088934][ T5805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.165850][ T5805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.244661][ T5802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.278928][ T5805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.334792][ T5802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.465955][ T5802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.599689][ T5802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.819968][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.051102][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.160942][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.287195][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.314619][ T3836] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.322167][ T3836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.455489][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.492100][ T3836] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.499905][ T3836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.518056][ T3836] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.525731][ T3836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.689274][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.747390][ T3836] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.755080][ T3836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.807394][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.018724][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.026319][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.071585][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.235372][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.243057][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.337180][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.397394][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.405048][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.574550][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.582214][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.750012][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.781788][ T5794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.799214][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.002290][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.010043][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.038239][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.046066][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.440151][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.535315][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.099166][ T5797] veth0_vlan: entered promiscuous mode [ 220.162931][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.287799][ T5797] veth1_vlan: entered promiscuous mode [ 220.468473][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.753956][ T5797] veth0_macvtap: entered promiscuous mode [ 220.784312][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.824856][ T5794] veth0_vlan: entered promiscuous mode [ 220.841209][ T5797] veth1_macvtap: entered promiscuous mode [ 220.997568][ T5794] veth1_vlan: entered promiscuous mode [ 221.123533][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.188329][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.237069][ T5805] veth0_vlan: entered promiscuous mode [ 221.409985][ T1305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.449669][ T5805] veth1_vlan: entered promiscuous mode [ 221.470763][ T1305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.587622][ T1305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.609948][ T5794] veth0_macvtap: entered promiscuous mode [ 221.664277][ T3541] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.685602][ T5802] veth0_vlan: entered promiscuous mode [ 221.728821][ T5794] veth1_macvtap: entered promiscuous mode [ 221.790894][ T5802] veth1_vlan: entered promiscuous mode [ 221.962841][ T5805] veth0_macvtap: entered promiscuous mode [ 222.010880][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.055810][ T5805] veth1_macvtap: entered promiscuous mode [ 222.087590][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.215881][ T3541] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.263095][ T3541] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.302960][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.318812][ T3541] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.334210][ T5802] veth0_macvtap: entered promiscuous mode [ 222.414418][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.439355][ T5802] veth1_macvtap: entered promiscuous mode [ 222.467272][ T3541] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.599560][ T3672] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.665514][ T3672] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.733070][ T3672] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.746721][ T5810] veth0_vlan: entered promiscuous mode [ 222.783325][ T3672] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.804743][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.904525][ T5810] veth1_vlan: entered promiscuous mode [ 222.956401][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.120121][ T3541] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.175822][ T3541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.230063][ T3541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.298317][ T3541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.311503][ T5810] veth0_macvtap: entered promiscuous mode [ 223.374902][ T5810] veth1_macvtap: entered promiscuous mode [ 223.493815][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.567980][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.687163][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.768198][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.840149][ T77] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.894770][ T77] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.813038][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.821140][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.161431][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.171753][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.486096][ T1305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.494283][ T1305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.671232][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.678615][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.699950][ T5797] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 229.749142][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.757469][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.549814][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.557999][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.732201][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.740668][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.822928][ T5083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.830985][ T5083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.238054][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.246882][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.309038][ T5886] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 231.558187][ T5886] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.573709][ T5886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.609281][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.619876][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.765368][ T5886] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 231.775096][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 231.784749][ T5886] usb 1-1: SerialNumber: syz [ 231.853445][ T5083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.861632][ T5083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.125243][ T5886] usb 1-1: 0:2 : does not exist [ 232.309859][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 232.396390][ T5886] usb 1-1: USB disconnect, device number 2 [ 232.503205][ T5998] syzkaller0: entered promiscuous mode [ 232.509032][ T5998] syzkaller0: entered allmulticast mode [ 232.553116][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 232.616667][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 232.629151][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 232.735020][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 232.744616][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.755130][ T24] usb 2-1: Product: syz [ 232.759521][ T24] usb 2-1: Manufacturer: syz [ 232.765125][ T24] usb 2-1: SerialNumber: syz [ 232.836070][ T24] usb 2-1: config 0 descriptor?? [ 232.945775][ T24] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 232.959713][ T24] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 233.112111][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.492759][ C1] hrtimer: interrupt took 223921 ns [ 233.565269][ T24] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 233.623485][ T24] em28xx 2-1:0.0: Config register raw data: 0x00 [ 234.644157][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 234.681076][ T6014] syzkaller0: entered promiscuous mode [ 234.687214][ T6014] syzkaller0: entered allmulticast mode [ 234.735335][ T6022] TC_ACT_REPEAT abuse ? [ 235.136900][ T24] usb 2-1: USB disconnect, device number 2 [ 235.149020][ T24] em28xx 2-1:0.0: Disconnecting em28xx [ 235.216070][ T24] em28xx 2-1:0.0: Freeing device [ 237.364602][ T5864] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 237.595645][ T5864] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.606586][ T5864] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.629604][ T6053] syzkaller0: entered promiscuous mode [ 237.636046][ T6053] syzkaller0: entered allmulticast mode [ 237.748106][ T5864] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 237.757796][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.766539][ T5864] usb 3-1: SerialNumber: syz [ 238.189979][ T5864] usb 3-1: 0:2 : does not exist [ 238.371295][ T6064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24'. [ 238.416257][ T5864] usb 3-1: USB disconnect, device number 2 [ 238.646330][ T6068] syz.4.25 uses obsolete (PF_INET,SOCK_PACKET) [ 238.901611][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.062243][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 239.213936][ T6076] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 239.307186][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 239.350214][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 239.362189][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 239.471022][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 239.480657][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.491387][ T24] usb 1-1: Product: syz [ 239.496531][ T24] usb 1-1: Manufacturer: syz [ 239.501351][ T24] usb 1-1: SerialNumber: syz [ 239.608841][ T24] usb 1-1: config 0 descriptor?? [ 239.686034][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 239.696410][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 240.043792][ T5886] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 240.289207][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 240.309592][ T5886] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 240.318445][ T5886] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 240.330860][ T5886] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 240.340858][ T5886] usb 4-1: config 150 has no interface number 0 [ 240.347497][ T5886] usb 4-1: config 150 interface 204 has no altsetting 0 [ 240.357865][ T24] em28xx 1-1:0.0: Config register raw data: 0x00 [ 240.452471][ T5886] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 240.462076][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.470605][ T5886] usb 4-1: Product: syz [ 240.475502][ T5886] usb 4-1: Manufacturer: syz [ 240.480325][ T5886] usb 4-1: SerialNumber: syz [ 240.804130][ T5886] xr_serial 4-1:150.204: skipping garbage [ 241.616486][ T6102] syzkaller0: entered promiscuous mode [ 241.622211][ T6102] syzkaller0: entered allmulticast mode [ 242.094457][ T5864] usb 1-1: USB disconnect, device number 3 [ 242.102877][ T5864] em28xx 1-1:0.0: Disconnecting em28xx [ 242.193436][ T5864] em28xx 1-1:0.0: Freeing device [ 242.301051][ T6111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.38'. [ 242.924768][ T5886] usb 4-1: USB disconnect, device number 2 [ 243.033470][ T5864] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 243.204936][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 243.260920][ T5864] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.273505][ T5864] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.432999][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.443653][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 243.452040][ T5864] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 243.453108][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.466601][ T24] usb 3-1: config 0 descriptor?? [ 243.471338][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 243.484247][ T5864] usb 1-1: SerialNumber: syz [ 243.612922][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 243.833180][ T6124] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 243.956898][ T5864] usb 1-1: 0:2 : does not exist [ 244.060959][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.072925][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.154778][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 244.159655][ T6124] bond1 (unregistering): Released all slaves [ 244.200280][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 244.251512][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 244.293276][ T5864] usb 1-1: USB disconnect, device number 4 [ 244.294922][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 244.350299][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 244.380273][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 244.455770][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 244.516015][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 244.650968][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.748670][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 244.809301][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 244.886391][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 244.953306][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 245.065471][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 245.093776][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 245.103496][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 245.125359][ T24] pwc: Registered as video103. [ 245.134750][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 245.285220][ T24] usb 3-1: USB disconnect, device number 3 [ 246.583824][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 246.838216][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 246.873505][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 246.887840][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 247.026932][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 247.036621][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.045039][ T24] usb 5-1: Product: syz [ 247.049427][ T24] usb 5-1: Manufacturer: syz [ 247.054976][ T24] usb 5-1: SerialNumber: syz [ 247.156903][ T5864] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 247.191628][ T24] usb 5-1: config 0 descriptor?? [ 247.284131][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 247.296740][ T24] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 247.399419][ T5864] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 247.413097][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.421344][ T5864] usb 3-1: Product: syz [ 247.426579][ T5864] usb 3-1: Manufacturer: syz [ 247.431386][ T5864] usb 3-1: SerialNumber: syz [ 247.549952][ T5864] usb 3-1: config 0 descriptor?? [ 247.883209][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 247.931280][ T24] em28xx 5-1:0.0: Config register raw data: 0x00 [ 248.056915][ T5864] airspy 3-1:0.0: Board ID: 00 [ 248.062063][ T5864] airspy 3-1:0.0: Firmware version: [ 248.463752][ T5864] airspy 3-1:0.0: usb_control_msg() failed -32 request 0e [ 248.503176][ T5864] airspy 3-1:0.0: Registered as swradio24 [ 248.509284][ T5864] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 248.840487][ T3755] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.890476][ T3755] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.945079][ T1097] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.978646][ T1097] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.034772][ T5886] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 249.293647][ T5886] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.304194][ T5886] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.347224][ T5886] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 249.357010][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 249.365989][ T5886] usb 2-1: SerialNumber: syz [ 249.452955][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 249.472118][ T5864] usb 5-1: USB disconnect, device number 2 [ 249.556003][ T5864] em28xx 5-1:0.0: Disconnecting em28xx [ 249.575325][ T5864] em28xx 5-1:0.0: Freeing device [ 249.644123][ T5886] usb 2-1: 0:2 : does not exist [ 249.693539][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.704474][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 249.714309][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.820069][ T5886] usb 2-1: USB disconnect, device number 3 [ 249.832357][ T24] usb 1-1: config 0 descriptor?? [ 249.927132][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 250.216027][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.329330][ T6188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.340677][ T6188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.360143][ T5864] usb 3-1: USB disconnect, device number 4 [ 250.455939][ T6193] syzkaller0: entered promiscuous mode [ 250.461944][ T6193] syzkaller0: entered allmulticast mode [ 250.503609][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 250.522235][ T6194] TC_ACT_REPEAT abuse ? [ 250.531421][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 250.566885][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 250.615009][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 250.656633][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 250.714300][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 250.748162][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 250.806161][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 251.041755][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 251.058658][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 251.093456][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 251.138117][ T6200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'. [ 251.147536][ T6200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'. [ 251.189983][ T6200] erspan0: entered promiscuous mode [ 251.201462][ T6200] gretap0: entered promiscuous mode [ 251.217403][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 251.225535][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 251.321322][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 251.363598][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 251.391932][ T24] pwc: Registered as video103. [ 251.401699][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 251.653704][ T24] usb 1-1: USB disconnect, device number 5 [ 252.183289][ T793] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 252.470595][ T793] usb 5-1: config 176 has too many interfaces: 34, using maximum allowed: 32 [ 252.480044][ T793] usb 5-1: config 176 has an invalid descriptor of length 199, skipping remainder of the config [ 252.491120][ T793] usb 5-1: config 176 has 0 interfaces, different from the descriptor's value: 34 [ 252.652178][ T793] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 252.663382][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.671753][ T793] usb 5-1: Product: syz [ 252.676520][ T793] usb 5-1: Manufacturer: syz [ 252.681343][ T793] usb 5-1: SerialNumber: syz [ 253.251887][ T793] usb 5-1: USB disconnect, device number 3 [ 253.487895][ T6220] netlink: 'syz.1.69': attribute type 10 has an invalid length. [ 253.519635][ T6220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.554976][ T6220] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 253.665074][ T6223] Zero length message leads to an empty skb [ 253.729442][ T6225] syzkaller0: entered promiscuous mode [ 253.736657][ T6225] syzkaller0: entered allmulticast mode [ 253.826360][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 254.033477][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 254.065442][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 254.077714][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 254.132494][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 254.144376][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.154974][ T24] usb 1-1: Product: syz [ 254.159349][ T24] usb 1-1: Manufacturer: syz [ 254.165014][ T24] usb 1-1: SerialNumber: syz [ 254.245827][ T24] usb 1-1: config 0 descriptor?? [ 254.301653][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 254.311402][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 254.770941][ T793] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 254.897792][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 254.916933][ T24] em28xx 1-1:0.0: Config register raw data: 0x00 [ 254.989280][ T793] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.000387][ T793] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.124128][ T793] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 255.133944][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 255.142179][ T793] usb 2-1: SerialNumber: syz [ 255.508030][ T793] usb 2-1: 0:2 : does not exist [ 255.627165][ T793] usb 2-1: USB disconnect, device number 4 [ 255.705883][ T5864] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 255.830390][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.923144][ T5864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.934316][ T5864] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 255.944221][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.991911][ T5864] usb 3-1: config 0 descriptor?? [ 256.109488][ T5864] pwc: Askey VC010 type 2 USB webcam detected. [ 256.464699][ T6239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.475051][ T6239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.585854][ T5864] pwc: recv_control_msg error -32 req 02 val 2b00 [ 256.633549][ T5864] pwc: recv_control_msg error -32 req 02 val 2700 [ 256.668277][ T5864] pwc: recv_control_msg error -32 req 02 val 2c00 [ 256.743178][ T5864] pwc: recv_control_msg error -32 req 04 val 1000 [ 256.752016][ T5864] pwc: recv_control_msg error -32 req 04 val 1300 [ 256.825873][ T5864] pwc: recv_control_msg error -32 req 04 val 1400 [ 256.852453][ T24] usb 1-1: USB disconnect, device number 6 [ 256.865792][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 256.886887][ T5864] pwc: recv_control_msg error -32 req 02 val 2000 [ 256.914154][ T5864] pwc: recv_control_msg error -32 req 02 val 2100 [ 256.957995][ T24] em28xx 1-1:0.0: Freeing device [ 257.137614][ T5864] pwc: recv_control_msg error -71 req 02 val 2500 [ 257.178271][ T5864] pwc: recv_control_msg error -71 req 02 val 2400 [ 257.217390][ T5864] pwc: recv_control_msg error -71 req 02 val 2600 [ 257.292421][ T5864] pwc: recv_control_msg error -71 req 02 val 2900 [ 257.323741][ T5864] pwc: recv_control_msg error -71 req 02 val 2800 [ 257.346638][ T6256] netlink: 20 bytes leftover after parsing attributes in process `syz.3.83'. [ 257.383555][ T5864] pwc: recv_control_msg error -71 req 04 val 1100 [ 257.454494][ T5864] pwc: recv_control_msg error -71 req 04 val 1200 [ 257.474928][ T5864] pwc: Registered as video103. [ 257.484221][ T5864] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 257.624620][ T5864] usb 3-1: USB disconnect, device number 5 [ 257.693772][ T24] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 257.957416][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 257.965553][ T24] usb 1-1: can't read configurations, error -61 [ 258.148916][ T24] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 258.383201][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 258.391194][ T24] usb 1-1: can't read configurations, error -61 [ 258.448919][ T24] usb usb1-port1: attempt power cycle [ 258.463155][ T5864] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 258.676473][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 258.689164][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 258.700648][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 258.710838][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.724441][ T5864] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.733878][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.772510][ T5864] usb 4-1: config 0 descriptor?? [ 258.845886][ T24] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 258.949377][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 258.957586][ T24] usb 1-1: can't read configurations, error -61 [ 259.110682][ T5864] usbhid 4-1:0.0: can't add hid device: -71 [ 259.118095][ T5864] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 259.173149][ T24] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 259.254031][ T5864] usb 4-1: USB disconnect, device number 3 [ 259.292782][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 259.300818][ T24] usb 1-1: can't read configurations, error -61 [ 259.389427][ T24] usb usb1-port1: unable to enumerate USB device [ 259.676553][ T5864] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 259.915506][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.927639][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.938994][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 259.949148][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.963365][ T5864] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.973090][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.005655][ T793] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 260.029766][ T5864] usb 4-1: config 0 descriptor?? [ 260.163627][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 260.213307][ T793] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 260.223807][ T793] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 260.233168][ T6286] tipc: Enabling of bearer rejected, failed to enable media [ 260.284976][ T793] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 260.294803][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.310047][ T793] usb 5-1: Product: syz [ 260.316427][ T793] usb 5-1: Manufacturer: syz [ 260.321384][ T793] usb 5-1: SerialNumber: syz [ 260.343178][ T793] usb 5-1: config 0 descriptor?? [ 260.355757][ T6280] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 260.356169][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 260.382009][ T6280] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 260.447275][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 260.463206][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 260.677869][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 260.687587][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.696127][ T24] usb 3-1: Product: syz [ 260.700529][ T24] usb 3-1: Manufacturer: syz [ 260.707485][ T24] usb 3-1: SerialNumber: syz [ 260.762108][ T5864] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 260.769450][ T6280] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 260.889014][ T6280] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 261.062294][ T24] usb 3-1: config 0 descriptor?? [ 261.138803][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 261.149116][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 261.319759][ T793] Error reading MAC address [ 261.778733][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 261.816744][ T6299] netlink: 'syz.0.96': attribute type 11 has an invalid length. [ 261.825165][ T6299] netlink: 132 bytes leftover after parsing attributes in process `syz.0.96'. [ 261.840448][ T24] em28xx 3-1:0.0: Config register raw data: 0x00 [ 262.003805][ T5886] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 262.180468][ T5886] usb 4-1: device descriptor read/64, error -32 [ 262.906551][ T793] usb 5-1: USB disconnect, device number 4 [ 262.965517][ T5886] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 263.190598][ T5886] usb 4-1: device firmware changed [ 263.235239][ T5857] usb 4-1: USB disconnect, device number 4 [ 263.333547][ T5886] usb 3-1: USB disconnect, device number 6 [ 263.341435][ T5886] em28xx 3-1:0.0: Disconnecting em28xx [ 263.426683][ T5886] em28xx 3-1:0.0: Freeing device [ 263.575191][ T5857] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 263.826130][ T5857] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.837703][ T5857] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 263.847225][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.971000][ T5857] usb 4-1: config 0 descriptor?? [ 264.045947][ T5857] pwc: Askey VC010 type 2 USB webcam detected. [ 264.488519][ T6309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.506702][ T6309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.618769][ T5857] pwc: recv_control_msg error -32 req 02 val 2b00 [ 264.646565][ T5857] pwc: recv_control_msg error -32 req 02 val 2700 [ 264.686512][ T5857] pwc: recv_control_msg error -32 req 02 val 2c00 [ 264.716511][ T5857] pwc: recv_control_msg error -32 req 04 val 1000 [ 264.743446][ T5857] pwc: recv_control_msg error -32 req 04 val 1300 [ 264.797019][ T5857] pwc: recv_control_msg error -32 req 04 val 1400 [ 264.845693][ T5857] pwc: recv_control_msg error -32 req 02 val 2000 [ 264.873428][ T5857] pwc: recv_control_msg error -32 req 02 val 2100 [ 265.020356][ T793] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 265.100172][ T5857] pwc: recv_control_msg error -71 req 02 val 2500 [ 265.130364][ T5857] pwc: recv_control_msg error -71 req 02 val 2400 [ 265.163502][ T5857] pwc: recv_control_msg error -71 req 02 val 2600 [ 265.193677][ T5857] pwc: recv_control_msg error -71 req 02 val 2900 [ 265.214361][ T5857] pwc: recv_control_msg error -71 req 02 val 2800 [ 265.236906][ T793] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 265.243470][ T5857] pwc: recv_control_msg error -71 req 04 val 1100 [ 265.245355][ T793] usb 3-1: can't read configurations, error -61 [ 265.271036][ T6331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.107'. [ 265.278173][ T5857] pwc: recv_control_msg error -71 req 04 val 1200 [ 265.385298][ T5857] pwc: Registered as video103. [ 265.421428][ T5857] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 265.424750][ T793] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 265.509014][ T5857] usb 4-1: USB disconnect, device number 5 [ 265.637685][ T5886] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 265.674688][ T793] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 265.683774][ T793] usb 3-1: can't read configurations, error -61 [ 265.767333][ T793] usb usb3-port1: attempt power cycle [ 265.851360][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.864186][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 265.875573][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 265.885720][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.899239][ T5886] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.908844][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.940182][ T5886] usb 5-1: config 0 descriptor?? [ 266.153758][ T793] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 266.245506][ T5886] usbhid 5-1:0.0: can't add hid device: -71 [ 266.252285][ T5886] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 266.348367][ T793] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 266.354865][ T5886] usb 5-1: USB disconnect, device number 5 [ 266.356533][ T793] usb 3-1: can't read configurations, error -61 [ 266.513808][ T793] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 266.597765][ T793] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 266.605937][ T793] usb 3-1: can't read configurations, error -61 [ 266.633451][ T5864] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 266.681952][ T793] usb usb3-port1: unable to enumerate USB device [ 266.796976][ T5886] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 266.865531][ T5864] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 266.876185][ T5864] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 266.916447][ T5864] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 266.926099][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.934574][ T5864] usb 4-1: Product: syz [ 266.938937][ T5864] usb 4-1: Manufacturer: syz [ 266.944037][ T5864] usb 4-1: SerialNumber: syz [ 266.963914][ T793] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 266.985885][ T5864] usb 4-1: config 0 descriptor?? [ 267.004170][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.016385][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 267.028423][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 267.038673][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.052138][ T5886] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.063569][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.076372][ T6340] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 267.086359][ T6340] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 267.166686][ T793] usb 1-1: Using ep0 maxpacket: 32 [ 267.182164][ T5886] usb 5-1: config 0 descriptor?? [ 267.201533][ T793] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 267.211111][ T793] usb 1-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 267.219872][ T793] usb 1-1: Manufacturer: syz [ 267.327056][ T6340] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 267.336863][ T793] usb 1-1: config 0 descriptor?? [ 267.369967][ T6340] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 267.574466][ T5850] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 267.591737][ T793] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 267.619850][ T5886] usbhid 5-1:0.0: can't add hid device: -71 [ 267.624054][ T793] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 267.626840][ T5886] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 267.641668][ T793] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 267.654494][ T793] usb 1-1: media controller created [ 267.694017][ T5886] usb 5-1: USB disconnect, device number 6 [ 267.838089][ T5864] Error reading MAC address [ 267.873152][ T5850] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 267.881875][ T5850] usb 2-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 267.897698][ T5850] usb 2-1: config 150 has no interface number 0 [ 267.907236][ T5850] usb 2-1: config 150 interface 204 has no altsetting 0 [ 268.011141][ T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 268.030022][ T5850] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 268.039982][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.048589][ T5850] usb 2-1: Product: syz [ 268.053189][ T5850] usb 2-1: Manufacturer: syz [ 268.057992][ T5850] usb 2-1: SerialNumber: syz [ 268.383300][ T5850] xr_serial 2-1:150.204: skipping garbage [ 268.398340][ T5850] xr_serial 2-1:150.204: skipping garbage [ 268.428919][ T5886] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 268.616956][ T5886] usb 3-1: no configurations [ 268.621910][ T5886] usb 3-1: can't read configurations, error -22 [ 268.654819][ T793] az6027: usb out operation failed. (-71) [ 268.660866][ T793] stb0899_attach: Driver disabled by Kconfig [ 268.668427][ T793] az6027: no front-end attached [ 268.668427][ T793] [ 268.683535][ T793] az6027: usb out operation failed. (-71) [ 268.689671][ T793] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 268.713025][ T793] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 268.736077][ T793] dvb-usb: schedule remote query interval to 400 msecs. [ 268.744984][ T793] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 268.782988][ T5886] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 268.825528][ T793] usb 1-1: USB disconnect, device number 11 [ 269.006197][ T5886] usb 3-1: no configurations [ 269.011159][ T5886] usb 3-1: can't read configurations, error -22 [ 269.072494][ T5886] usb usb3-port1: attempt power cycle [ 269.172146][ T793] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 269.384000][ T5850] usb 4-1: USB disconnect, device number 6 [ 269.473295][ T5886] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 269.547341][ T5886] usb 3-1: no configurations [ 269.552408][ T5886] usb 3-1: can't read configurations, error -22 [ 269.743606][ T5886] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 269.768356][ T5886] usb 3-1: no configurations [ 269.773498][ T5886] usb 3-1: can't read configurations, error -22 [ 269.799024][ T5886] usb usb3-port1: unable to enumerate USB device [ 269.847962][ T6364] Cannot find del_set index 0 as target [ 270.017003][ T6363] syzkaller0: entered promiscuous mode [ 270.029683][ T6363] syzkaller0: entered allmulticast mode [ 270.303103][ T5886] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 270.424297][ T5850] usb 2-1: USB disconnect, device number 5 [ 270.509148][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.519815][ T5886] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 270.529795][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.636579][ T5886] usb 4-1: config 0 descriptor?? [ 270.707090][ T5886] pwc: Askey VC010 type 2 USB webcam detected. [ 271.094546][ T6370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.106124][ T6370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.178088][ T5886] pwc: recv_control_msg error -32 req 02 val 2b00 [ 271.219074][ T5886] pwc: recv_control_msg error -32 req 02 val 2700 [ 271.229109][ T5886] pwc: recv_control_msg error -32 req 02 val 2c00 [ 271.275590][ T5886] pwc: recv_control_msg error -32 req 04 val 1000 [ 271.291637][ T5886] pwc: recv_control_msg error -32 req 04 val 1300 [ 271.308598][ T5886] pwc: recv_control_msg error -32 req 04 val 1400 [ 271.318651][ T5886] pwc: recv_control_msg error -32 req 02 val 2000 [ 271.340356][ T5886] pwc: recv_control_msg error -32 req 02 val 2100 [ 271.565788][ T5886] pwc: recv_control_msg error -71 req 02 val 2500 [ 271.604316][ T5886] pwc: recv_control_msg error -71 req 02 val 2400 [ 271.623118][ T5886] pwc: recv_control_msg error -71 req 02 val 2600 [ 271.643700][ T5886] pwc: recv_control_msg error -71 req 02 val 2900 [ 271.669848][ T5886] pwc: recv_control_msg error -71 req 02 val 2800 [ 271.703826][ T5886] pwc: recv_control_msg error -71 req 04 val 1100 [ 271.723365][ T5886] pwc: recv_control_msg error -71 req 04 val 1200 [ 271.752933][ T5857] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 271.773179][ T5886] pwc: Registered as video103. [ 271.782950][ T5886] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 271.899636][ T5886] usb 4-1: USB disconnect, device number 7 [ 271.976255][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.989642][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 272.001493][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 272.020617][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.034095][ T5857] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.044136][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.097108][ T5850] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 272.169757][ T5857] usb 5-1: config 0 descriptor?? [ 272.308998][ T5850] usb 1-1: device descriptor read/64, error -71 [ 272.521370][ T5857] usbhid 5-1:0.0: can't add hid device: -71 [ 272.530980][ T5857] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 272.575688][ T5850] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 272.648476][ T5857] usb 5-1: USB disconnect, device number 7 [ 272.776667][ T5850] usb 1-1: device descriptor read/64, error -71 [ 272.918549][ T5850] usb usb1-port1: attempt power cycle [ 272.978930][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 273.091999][ T5857] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 273.279148][ T6395] syzkaller0: entered promiscuous mode [ 273.285168][ T6395] syzkaller0: entered allmulticast mode [ 273.293181][ T5850] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 273.316822][ T5864] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 273.328892][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.341276][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 273.352719][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 273.362939][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.376357][ T5857] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.385952][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.426010][ T5850] usb 1-1: device descriptor read/8, error -71 [ 273.439170][ T5857] usb 5-1: config 0 descriptor?? [ 273.545000][ T5864] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.555738][ T5864] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.588727][ T5864] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 273.598500][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 273.607691][ T5864] usb 4-1: SerialNumber: syz [ 273.693649][ T5850] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 273.784468][ T5850] usb 1-1: device descriptor read/8, error -71 [ 273.868232][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 273.879316][ T5857] usbhid 5-1:0.0: can't add hid device: -71 [ 273.886453][ T5857] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 273.903401][ T5864] usb 4-1: 0:2 : does not exist [ 273.911532][ T5857] usb 5-1: USB disconnect, device number 8 [ 273.944692][ T5850] usb usb1-port1: unable to enumerate USB device [ 273.968251][ T5886] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 274.030351][ T5864] usb 4-1: USB disconnect, device number 8 [ 274.178306][ T5886] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 274.188367][ T5886] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 274.199025][ T5886] usb 3-1: config 150 has no interface number 1 [ 274.206391][ T5886] usb 3-1: config 150 interface 204 has no altsetting 0 [ 274.272062][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.330516][ T5886] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 274.341200][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.349876][ T5886] usb 3-1: Product: syz [ 274.354462][ T5886] usb 3-1: Manufacturer: syz [ 274.359273][ T5886] usb 3-1: SerialNumber: syz [ 274.629660][ T5886] xr_serial 3-1:150.204: skipping garbage [ 275.270001][ T5864] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 275.432855][ T5850] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 275.462979][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 275.497756][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.508462][ T5864] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.570077][ T5864] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 275.579989][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.588458][ T5864] usb 4-1: Product: syz [ 275.593109][ T5864] usb 4-1: Manufacturer: syz [ 275.597940][ T5864] usb 4-1: SerialNumber: syz [ 275.672419][ T5850] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.683799][ T5850] usb 1-1: config 0 has no interfaces? [ 275.689590][ T5850] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 275.699758][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.714972][ T5864] usb 4-1: config 0 descriptor?? [ 275.745353][ T5850] usb 1-1: config 0 descriptor?? [ 276.382998][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 276.806750][ T5886] usb 3-1: USB disconnect, device number 15 [ 277.201197][ T5886] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 277.341123][ T5857] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 277.389462][ T5886] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.402171][ T5886] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.424953][ T5886] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 277.434646][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 277.443145][ T5886] usb 5-1: SerialNumber: syz [ 277.512235][ T5857] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.524331][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 277.536185][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 277.546446][ T5857] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.560049][ T5857] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.569837][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.587871][ T5857] usb 3-1: config 0 descriptor?? [ 277.693109][ T5886] usb 5-1: 0:2 : does not exist [ 277.812900][ T5886] usb 5-1: USB disconnect, device number 9 [ 277.917244][ T5857] usbhid 3-1:0.0: can't add hid device: -71 [ 277.924270][ T5857] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 277.944621][ T5857] usb 3-1: USB disconnect, device number 16 [ 278.040233][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.109727][ T5886] usb 4-1: USB disconnect, device number 9 [ 278.441246][ T5857] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 278.518235][ T5886] usb 1-1: USB disconnect, device number 16 [ 278.657823][ T5857] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.670426][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 278.685336][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 278.695491][ T5857] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.708984][ T5857] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.718482][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.800636][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 278.854618][ T5857] usb 3-1: config 0 descriptor?? [ 278.961011][ T24] usb 4-1: device descriptor read/64, error -71 [ 279.200452][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 279.294921][ T5857] usbhid 3-1:0.0: can't add hid device: -71 [ 279.303149][ T5857] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 279.345359][ T5857] usb 3-1: USB disconnect, device number 17 [ 279.374790][ T24] usb 4-1: device descriptor read/64, error -71 [ 279.498048][ T24] usb usb4-port1: attempt power cycle [ 279.880954][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 279.932834][ T24] usb 4-1: device descriptor read/8, error -71 [ 280.181325][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 280.284035][ T24] usb 4-1: device descriptor read/8, error -71 [ 280.411232][ T24] usb usb4-port1: unable to enumerate USB device [ 280.979456][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 281.059287][ T5850] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 281.139209][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 281.149763][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.160464][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 281.176647][ T24] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 281.188090][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.197101][ T24] usb 5-1: Product: syz [ 281.201706][ T24] usb 5-1: Manufacturer: syz [ 281.206503][ T24] usb 5-1: SerialNumber: syz [ 281.216603][ T24] usb 5-1: config 0 descriptor?? [ 281.260753][ T5850] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.271689][ T5850] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.297026][ T5850] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 281.306725][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 281.315179][ T5850] usb 3-1: SerialNumber: syz [ 281.572406][ T5850] usb 3-1: 0:2 : does not exist [ 281.720986][ T5850] usb 3-1: USB disconnect, device number 18 [ 281.848775][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.039122][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 282.246517][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.257193][ T24] usb 4-1: config 0 has no interfaces? [ 282.263784][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 282.273359][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.346362][ T24] usb 4-1: config 0 descriptor?? [ 282.624822][ T6468] syzkaller0: entered promiscuous mode [ 282.630719][ T6468] syzkaller0: entered allmulticast mode [ 283.733442][ T5864] usb 5-1: USB disconnect, device number 10 [ 283.752972][ T5850] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 283.939641][ T6481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.168'. [ 283.962316][ T5850] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.974206][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 283.985525][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 283.995841][ T5850] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.009361][ T5850] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.018802][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.035410][ T5850] usb 3-1: config 0 descriptor?? [ 284.309682][ T5850] usbhid 3-1:0.0: can't add hid device: -71 [ 284.316371][ T5850] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 284.345759][ T5850] usb 3-1: USB disconnect, device number 19 [ 284.657777][ T5864] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 284.817265][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 284.841257][ T5864] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 284.842316][ T24] usb 4-1: USB disconnect, device number 14 [ 284.851076][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.883360][ T5850] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 284.898191][ T5864] usb 5-1: config 0 descriptor?? [ 285.047975][ T5850] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 285.060078][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 285.077596][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 285.089886][ T5850] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 285.103438][ T5850] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.113102][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.155887][ T5850] usb 3-1: config 0 descriptor?? [ 285.181755][ T5864] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 285.222321][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 285.268393][ T5864] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 285.285008][ T5864] usb 5-1: media controller created [ 285.412264][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.537553][ T5864] az6027: usb out operation failed. (-71) [ 285.560443][ T5864] az6027: usb out operation failed. (-71) [ 285.566513][ T5864] stb0899_attach: Driver disabled by Kconfig [ 285.573036][ T5864] az6027: no front-end attached [ 285.573036][ T5864] [ 285.613596][ T5864] az6027: usb out operation failed. (-71) [ 285.620315][ T5864] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 285.632713][ T5850] usbhid 3-1:0.0: can't add hid device: -71 [ 285.639736][ T5850] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 285.657814][ T5850] usb 3-1: USB disconnect, device number 20 [ 285.677342][ T5864] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 285.732973][ T5864] dvb-usb: schedule remote query interval to 400 msecs. [ 285.740378][ T5864] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 285.796176][ T5864] usb 5-1: USB disconnect, device number 11 [ 285.998022][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 286.053007][ T5864] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 286.146999][ T24] usb 4-1: device descriptor read/64, error -71 [ 286.397555][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 286.561817][ T24] usb 4-1: device descriptor read/64, error -71 [ 286.579396][ T6493] syzkaller0: entered promiscuous mode [ 286.585110][ T6493] syzkaller0: entered allmulticast mode [ 286.685410][ T24] usb usb4-port1: attempt power cycle [ 287.043473][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 287.088793][ T24] usb 4-1: device descriptor read/8, error -71 [ 287.286384][ T5864] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 287.337677][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 287.376085][ T24] usb 4-1: device descriptor read/8, error -71 [ 287.464428][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 287.475973][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 287.489606][ T5864] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 287.496028][ T24] usb usb4-port1: unable to enumerate USB device [ 287.499176][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.543659][ T5864] usb 5-1: config 0 descriptor?? [ 287.553028][ T6499] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 287.755925][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 287.794359][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.804870][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.822819][ T5864] usbhid 5-1:0.0: can't add hid device: -71 [ 287.829882][ T5864] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 287.864859][ T5864] usb 5-1: USB disconnect, device number 12 [ 287.926277][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 287.946458][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.957479][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 287.976184][ T24] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 287.985778][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.993987][ T24] usb 3-1: Product: syz [ 287.998586][ T24] usb 3-1: Manufacturer: syz [ 288.003415][ T24] usb 3-1: SerialNumber: syz [ 288.014365][ T24] usb 3-1: config 0 descriptor?? [ 288.375578][ T5864] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 288.546186][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 288.574872][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 288.586657][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 288.600185][ T5864] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 288.609714][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.678337][ T5864] usb 5-1: config 0 descriptor?? [ 288.728813][ T5864] hub 5-1:0.0: bad descriptor, ignoring hub [ 288.735219][ T5864] hub 5-1:0.0: probe with driver hub failed with error -5 [ 289.133497][ T5864] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 289.141925][ T5864] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 289.150396][ T5864] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 289.193133][ T5864] hid-multitouch 0003:0EEF:72C4.0002: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 289.275151][ T5857] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 289.447663][ T5857] usb 4-1: Using ep0 maxpacket: 8 [ 289.453711][ T24] usb 5-1: USB disconnect, device number 13 [ 289.494852][ T5857] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 289.504542][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.514052][ T5857] usb 4-1: Product: syz [ 289.519662][ T5857] usb 4-1: Manufacturer: syz [ 289.524566][ T5857] usb 4-1: SerialNumber: syz [ 289.561561][ T5857] usb 4-1: config 0 descriptor?? [ 289.794026][ T5857] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 290.664959][ T5864] usb 3-1: USB disconnect, device number 21 [ 290.825290][ T5850] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 291.014950][ T5850] usb 5-1: Using ep0 maxpacket: 32 [ 291.034844][ T5850] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 291.044851][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.050525][ T5857] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 291.073504][ T5850] usb 5-1: config 0 descriptor?? [ 291.128324][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.135325][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.177246][ T5857] usb 4-1: USB disconnect, device number 19 [ 291.338999][ T5850] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 291.355319][ T5850] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 291.371752][ T5850] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 291.379600][ T5850] usb 5-1: media controller created [ 291.458263][ T5850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.555803][ T5850] az6027: usb out operation failed. (-71) [ 291.572132][ T5850] az6027: usb out operation failed. (-71) [ 291.579014][ T5850] stb0899_attach: Driver disabled by Kconfig [ 291.585326][ T5850] az6027: no front-end attached [ 291.585326][ T5850] [ 291.630020][ T5850] az6027: usb out operation failed. (-71) [ 291.636315][ T5850] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 291.648854][ T5850] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 291.680934][ T5850] dvb-usb: schedule remote query interval to 400 msecs. [ 291.688351][ T5850] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 291.770907][ T5850] usb 5-1: USB disconnect, device number 14 [ 292.267645][ T5850] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 292.435652][ T6522] syzkaller0: entered promiscuous mode [ 292.451481][ T6522] syzkaller0: entered allmulticast mode [ 293.277846][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.287879][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.298586][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.326215][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.348170][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.800329][ T5857] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 293.905964][ T5850] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 294.017022][ T5857] usb 3-1: Using ep0 maxpacket: 32 [ 294.039700][ T5857] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.051344][ T5857] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.061842][ T5857] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.076071][ T5857] usb 3-1: config 0 interface 0 has no altsetting 0 [ 294.085006][ T5857] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 294.095115][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.186246][ T5857] usb 3-1: config 0 descriptor?? [ 294.291350][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 294.302930][ T5850] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 294.316351][ T5850] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 294.326177][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.456083][ T5850] usb 5-1: config 0 descriptor?? [ 294.466067][ T6535] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 294.683260][ T5857] ryos 0003:1E7D:3138.0003: item fetching failed at offset 0/3 [ 294.751937][ T5857] ryos 0003:1E7D:3138.0003: parse failed [ 294.763263][ T5857] ryos 0003:1E7D:3138.0003: probe with driver ryos failed with error -22 [ 294.811267][ T6535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.821790][ T6535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.919027][ T5857] usb 3-1: USB disconnect, device number 22 [ 294.948504][ T5850] usbhid 5-1:0.0: can't add hid device: -71 [ 294.955860][ T5850] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 295.027237][ T6528] chnl_net:caif_netlink_parms(): no params data found [ 295.062878][ T5850] usb 5-1: USB disconnect, device number 15 [ 295.478797][ T51] Bluetooth: hci5: command tx timeout [ 295.552442][ T5850] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 295.732112][ T5850] usb 5-1: Using ep0 maxpacket: 32 [ 295.754739][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 295.766468][ T5850] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 295.783405][ T5850] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 295.792896][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.961771][ T5850] usb 5-1: config 0 descriptor?? [ 296.014729][ T5850] hub 5-1:0.0: bad descriptor, ignoring hub [ 296.020895][ T5850] hub 5-1:0.0: probe with driver hub failed with error -5 [ 296.522125][ T5864] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 296.556294][ T5850] hid-multitouch 0003:0EEF:72C4.0004: unknown main item tag 0x0 [ 296.567220][ T5850] hid-multitouch 0003:0EEF:72C4.0004: unknown main item tag 0x0 [ 296.577567][ T5850] hid-multitouch 0003:0EEF:72C4.0004: unknown main item tag 0x0 [ 296.657288][ T3755] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.735252][ T5850] hid-multitouch 0003:0EEF:72C4.0004: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 296.782384][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 296.853629][ T5850] usb 5-1: USB disconnect, device number 16 [ 296.909695][ T5864] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 296.919403][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.928008][ T5864] usb 3-1: Product: syz [ 296.932502][ T5864] usb 3-1: Manufacturer: syz [ 296.937426][ T5864] usb 3-1: SerialNumber: syz [ 297.079051][ T5864] usb 3-1: config 0 descriptor?? [ 297.292957][ T3755] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.381514][ T5864] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 297.465733][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.476674][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.485230][ T6528] bridge_slave_0: entered allmulticast mode [ 297.498115][ T6528] bridge_slave_0: entered promiscuous mode [ 297.592929][ T51] Bluetooth: hci5: command tx timeout [ 297.623369][ T3755] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.668388][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.678190][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.685472][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.686022][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.686657][ T6528] bridge_slave_1: entered allmulticast mode [ 297.713229][ T6528] bridge_slave_1: entered promiscuous mode [ 297.759400][ T3755] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.773283][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.837887][ T6553] fido_id[6553]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 297.854870][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.913596][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.961594][ T5850] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 298.127923][ T6528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.171520][ T6528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.261590][ T5850] usb 4-1: Using ep0 maxpacket: 32 [ 298.499552][ T5850] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 298.509399][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.624299][ T5850] usb 4-1: config 0 descriptor?? [ 298.710818][ T5864] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 298.757183][ T5864] usb 3-1: USB disconnect, device number 23 [ 298.872742][ T5850] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 298.940424][ T6528] team0: Port device team_slave_0 added [ 298.947002][ T6560] syzkaller0: entered promiscuous mode [ 298.953292][ T6560] syzkaller0: entered allmulticast mode [ 298.985288][ T5850] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 299.033584][ T5850] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 299.041278][ T5850] usb 4-1: media controller created [ 299.076264][ T6528] team0: Port device team_slave_1 added [ 299.192056][ T5850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.354432][ T5850] az6027: usb out operation failed. (-71) [ 299.364254][ T5850] az6027: usb out operation failed. (-71) [ 299.370467][ T5850] stb0899_attach: Driver disabled by Kconfig [ 299.376645][ T5850] az6027: no front-end attached [ 299.376645][ T5850] [ 299.385253][ T5850] az6027: usb out operation failed. (-71) [ 299.394672][ T5850] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 299.418668][ T5850] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 299.630001][ T5808] Bluetooth: hci5: command tx timeout [ 299.643080][ T5850] dvb-usb: schedule remote query interval to 400 msecs. [ 299.650732][ T5850] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 299.729456][ T5850] usb 4-1: USB disconnect, device number 20 [ 299.965465][ T3755] bridge_slave_1: left allmulticast mode [ 299.971565][ T3755] bridge_slave_1: left promiscuous mode [ 299.978303][ T3755] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.039023][ T5808] Bluetooth: hci3: command tx timeout [ 300.046178][ T3755] bridge_slave_0: left allmulticast mode [ 300.052529][ T3755] bridge_slave_0: left promiscuous mode [ 300.059190][ T3755] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.369716][ T5850] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 301.024210][ T3755] erspan0 (unregistering): left promiscuous mode [ 301.095540][ T3755] gretap0 (unregistering): left promiscuous mode [ 301.539514][ T3755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.578544][ T3755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.605584][ T3755] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 301.649837][ T3755] bond0 (unregistering): Released all slaves [ 301.718720][ T5808] Bluetooth: hci5: command tx timeout [ 301.879178][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.886335][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.913096][ T6528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.109571][ T5808] Bluetooth: hci3: command tx timeout [ 302.233908][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.241385][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.274474][ T6528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.216511][ T3755] hsr_slave_0: left promiscuous mode [ 303.225777][ T3755] hsr_slave_1: left promiscuous mode [ 303.239700][ T3755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.247294][ T3755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.331626][ T3755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.339627][ T3755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.408584][ T793] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 303.459090][ T3755] veth1_macvtap: left promiscuous mode [ 303.464874][ T3755] veth0_macvtap: left promiscuous mode [ 303.471145][ T3755] veth1_vlan: left promiscuous mode [ 303.476830][ T3755] veth0_vlan: left promiscuous mode [ 303.611418][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 303.622914][ T793] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 303.636576][ T793] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 303.646180][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.914711][ T793] usb 5-1: config 0 descriptor?? [ 303.924507][ T6595] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 304.223998][ T5808] Bluetooth: hci3: command tx timeout [ 304.303377][ T6595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.308066][ T5850] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 304.318728][ T6595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.504436][ T5850] usb 3-1: Using ep0 maxpacket: 32 [ 304.559038][ T5850] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 304.568642][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.581224][ T793] usbhid 5-1:0.0: can't add hid device: -71 [ 304.588276][ T793] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 304.642010][ T5850] usb 3-1: config 0 descriptor?? [ 304.687329][ T793] usb 5-1: USB disconnect, device number 17 [ 305.008567][ T5850] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 305.092781][ T5850] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 305.111199][ T5850] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 305.120844][ T5850] usb 3-1: media controller created [ 305.241019][ T5850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.297514][ T3755] team0 (unregistering): Port device team_slave_1 removed [ 305.390272][ T3755] team0 (unregistering): Port device team_slave_0 removed [ 305.524664][ T5850] az6027: usb out operation failed. (-71) [ 305.568454][ T793] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 305.656233][ T5850] az6027: usb out operation failed. (-71) [ 305.664763][ T5850] stb0899_attach: Driver disabled by Kconfig [ 305.673239][ T5850] az6027: no front-end attached [ 305.673239][ T5850] [ 305.724072][ T5850] az6027: usb out operation failed. (-71) [ 305.730184][ T5850] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 305.758351][ T5850] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 305.787538][ T793] usb 5-1: Using ep0 maxpacket: 32 [ 305.802349][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 305.815156][ T793] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 305.828632][ T793] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 305.838347][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.880843][ T793] usb 5-1: config 0 descriptor?? [ 305.934909][ T793] hub 5-1:0.0: bad descriptor, ignoring hub [ 305.941332][ T793] hub 5-1:0.0: probe with driver hub failed with error -5 [ 305.990094][ T5850] dvb-usb: schedule remote query interval to 400 msecs. [ 305.998760][ T5850] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 306.117741][ T6555] chnl_net:caif_netlink_parms(): no params data found [ 306.211148][ T6528] hsr_slave_0: entered promiscuous mode [ 306.225477][ T6528] hsr_slave_1: entered promiscuous mode [ 306.237186][ T6528] debugfs: 'hsr0' already exists in 'hsr' [ 306.243240][ T6528] Cannot create hsr debugfs directory [ 306.267790][ T5850] usb 3-1: USB disconnect, device number 24 [ 306.366751][ T5808] Bluetooth: hci3: command tx timeout [ 306.605287][ T793] usbhid 5-1:0.0: can't add hid device: -71 [ 306.612119][ T793] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 306.778477][ T793] usb 5-1: USB disconnect, device number 18 [ 307.114437][ T5850] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 307.573685][ T3755] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.994971][ T3755] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.171367][ T6631] netlink: 'syz.4.214': attribute type 1 has an invalid length. [ 308.339913][ T6631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 308.418712][ T3755] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.764494][ T3755] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.157913][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.165792][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.173573][ T6555] bridge_slave_0: entered allmulticast mode [ 309.183817][ T6555] bridge_slave_0: entered promiscuous mode [ 309.347212][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.355125][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.362920][ T6555] bridge_slave_1: entered allmulticast mode [ 309.374526][ T6555] bridge_slave_1: entered promiscuous mode [ 309.505500][ T5857] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 309.705481][ T5857] usb 5-1: Using ep0 maxpacket: 32 [ 309.748232][ T5857] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 309.758031][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.816691][ T5857] usb 5-1: config 0 descriptor?? [ 309.978247][ T6555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.097063][ T6649] netlink: 61 bytes leftover after parsing attributes in process `syz.3.220'. [ 310.126901][ T5857] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 310.151795][ T6528] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 310.182121][ T5857] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 310.208807][ T5857] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 310.216366][ T5857] usb 5-1: media controller created [ 310.304055][ T5857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.316359][ T6528] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 310.471481][ T6528] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 310.532881][ T3755] bridge_slave_1: left allmulticast mode [ 310.538996][ T3755] bridge_slave_1: left promiscuous mode [ 310.545856][ T3755] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.586555][ T5857] az6027: usb out operation failed. (-71) [ 310.614614][ T5857] az6027: usb out operation failed. (-71) [ 310.620689][ T5857] stb0899_attach: Driver disabled by Kconfig [ 310.627231][ T5857] az6027: no front-end attached [ 310.627231][ T5857] [ 310.639494][ T3755] bridge_slave_0: left allmulticast mode [ 310.646320][ T3755] bridge_slave_0: left promiscuous mode [ 310.653255][ T3755] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.656507][ T5857] az6027: usb out operation failed. (-71) [ 310.670214][ T5857] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 310.717827][ T5857] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 310.736638][ T5857] dvb-usb: schedule remote query interval to 400 msecs. [ 310.743926][ T5857] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 310.935891][ T5857] usb 5-1: USB disconnect, device number 19 [ 311.269937][ T5857] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 311.454952][ T3755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.491714][ T3755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.508896][ T3755] bond0 (unregistering): Released all slaves [ 311.596414][ T6555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.610232][ T6528] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 312.024702][ T5857] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 312.253750][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 312.265833][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 312.277272][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 312.287514][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 312.302365][ T5857] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.312164][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.367881][ T6555] team0: Port device team_slave_0 added [ 312.547962][ T5857] usb 5-1: config 0 descriptor?? [ 312.576403][ T6555] team0: Port device team_slave_1 added [ 312.870633][ T5857] usbhid 5-1:0.0: can't add hid device: -71 [ 312.878028][ T5857] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 313.027289][ T5857] usb 5-1: USB disconnect, device number 20 [ 313.335006][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.342175][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.369529][ T6555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.492879][ T3755] hsr_slave_0: left promiscuous mode [ 313.548187][ T3755] hsr_slave_1: left promiscuous mode [ 313.556808][ T3755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.564696][ T3755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.596419][ T3755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.604412][ T3755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.672919][ T3755] veth1_macvtap: left promiscuous mode [ 313.678701][ T3755] veth0_macvtap: left promiscuous mode [ 313.685055][ T3755] veth1_vlan: left promiscuous mode [ 313.690678][ T3755] veth0_vlan: left promiscuous mode [ 313.768889][ T6671] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 314.740278][ T3755] team0 (unregistering): Port device team_slave_1 removed [ 314.807348][ T3755] team0 (unregistering): Port device team_slave_0 removed [ 315.286658][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.295619][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.323834][ T6555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.350843][ T6671] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 316.181032][ T6555] hsr_slave_0: entered promiscuous mode [ 316.202032][ T6555] hsr_slave_1: entered promiscuous mode [ 316.211102][ T6555] debugfs: 'hsr0' already exists in 'hsr' [ 316.218485][ T6555] Cannot create hsr debugfs directory [ 316.416966][ T5864] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 316.631476][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 316.707639][ T6528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.752472][ T5864] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 316.762258][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.864075][ T5864] usb 4-1: config 0 descriptor?? [ 317.026464][ T6528] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.126451][ T5864] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 317.148650][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 317.150319][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.165896][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.173304][ T5864] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 317.173444][ T5864] usb 4-1: media controller created [ 317.361767][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.632602][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.640456][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.640942][ T5864] az6027: usb out operation failed. (-71) [ 317.842354][ T5864] az6027: usb out operation failed. (-71) [ 317.848443][ T5864] stb0899_attach: Driver disabled by Kconfig [ 317.855028][ T5864] az6027: no front-end attached [ 317.855028][ T5864] [ 317.952498][ T5864] az6027: usb out operation failed. (-71) [ 317.958528][ T5864] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 317.971555][ T5864] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 318.090143][ T5864] dvb-usb: schedule remote query interval to 400 msecs. [ 318.098712][ T5864] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 318.286262][ T5864] usb 4-1: USB disconnect, device number 21 [ 318.504834][ T5850] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 318.786473][ T5850] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.798709][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 318.811219][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 318.825106][ T5850] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.839385][ T5850] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.853335][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.946547][ T6555] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 319.010888][ T5864] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 319.122460][ T5850] usb 3-1: config 0 descriptor?? [ 319.163636][ T6555] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 319.290130][ T6555] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 319.331279][ T6555] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 319.602792][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.614184][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.091637][ T6727] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 320.118362][ T5850] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 321.047101][ T6733] netlink: 'syz.3.239': attribute type 1 has an invalid length. [ 321.206984][ T6733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.411277][ T5857] usb 3-1: reset high-speed USB device number 25 using dummy_hcd [ 321.601762][ T5857] usb 3-1: device descriptor read/64, error -32 [ 321.829938][ T6528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.859600][ T6555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.876055][ T5857] usb 3-1: reset high-speed USB device number 25 using dummy_hcd [ 322.134236][ T6555] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.232166][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.239845][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.389070][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.396743][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.743780][ T24] usb 3-1: USB disconnect, device number 25 [ 322.884990][ T77] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6d [ 322.893778][ T77] ===================================================== [ 322.902225][ T77] BUG: KMSAN: uninit-value in nci_ntf_packet+0x26b2/0x46c0 [ 322.912901][ T77] nci_ntf_packet+0x26b2/0x46c0 [ 322.919699][ T77] nci_rx_work+0x403/0x750 [ 322.926261][ T77] process_scheduled_works+0xb91/0x1d80 [ 322.933608][ T77] worker_thread+0xedf/0x1590 [ 322.939479][ T77] kthread+0xd5c/0xf00 [ 322.943784][ T77] ret_from_fork+0x208/0x710 [ 322.954262][ T77] ret_from_fork_asm+0x1a/0x30 [ 322.960542][ T77] [ 322.962966][ T77] Uninit was created at: [ 322.967513][ T77] kmem_cache_alloc_node_noprof+0x9e7/0x17a0 [ 322.974929][ T77] kmalloc_reserve+0x13c/0x4b0 [ 322.982837][ T77] __alloc_skb+0x805/0x1040 [ 322.987564][ T77] virtual_ncidev_write+0x6b/0x430 [ 322.994164][ T77] vfs_write+0x48a/0x15d0 [ 323.000402][ T77] __x64_sys_write+0x1fb/0x4d0 [ 323.005397][ T77] x64_sys_call+0x30ab/0x3e70 [ 323.010549][ T77] do_syscall_64+0xd3/0xf80 [ 323.015290][ T77] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.023466][ T77] [ 323.027050][ T77] CPU: 1 UID: 0 PID: 77 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(none) [ 323.037786][ T77] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.049088][ T77] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 323.054908][ T77] ===================================================== [ 323.062812][ T77] Disabling lock debugging due to kernel taint [ 323.069223][ T77] Kernel panic - not syncing: kmsan.panic set ... [ 323.075903][ T77] CPU: 1 UID: 0 PID: 77 Comm: kworker/u8:5 Tainted: G B syzkaller #0 PREEMPT(none) [ 323.087077][ T77] Tainted: [B]=BAD_PAGE [ 323.091354][ T77] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.101669][ T77] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 323.107493][ T77] Call Trace: [ 323.110895][ T77] [ 323.113944][ T77] __dump_stack+0x26/0x30 [ 323.118507][ T77] dump_stack_lvl+0x50/0x1c0 [ 323.123321][ T77] ? dump_stack+0x12/0x25 [ 323.127856][ T77] dump_stack+0x1e/0x25 [ 323.132223][ T77] vpanic+0x435/0xd30 [ 323.136448][ T77] panic+0x15d/0x160 [ 323.140614][ T77] kmsan_report+0x31c/0x320 [ 323.145382][ T77] ? __msan_warning+0x1b/0x30 [ 323.150287][ T77] ? nci_ntf_packet+0x26b2/0x46c0 [ 323.155523][ T77] ? nci_rx_work+0x403/0x750 [ 323.160382][ T77] ? process_scheduled_works+0xb91/0x1d80 [ 323.166368][ T77] ? worker_thread+0xedf/0x1590 [ 323.171405][ T77] ? kthread+0xd5c/0xf00 [ 323.175834][ T77] ? ret_from_fork+0x208/0x710 [ 323.180945][ T77] ? ret_from_fork_asm+0x1a/0x30 [ 323.186126][ T77] ? ret_from_fork_asm+0x1a/0x30 [ 323.191334][ T77] ? vprintk_emit+0xb5e/0xb70 [ 323.196260][ T77] ? vprintk_default+0x3f/0x50 [ 323.201259][ T77] ? vprintk+0x36/0x50 [ 323.205514][ T77] ? _printk+0x17e/0x1b0 [ 323.210021][ T77] ? kmsan_get_metadata+0xfb/0x160 [ 323.215498][ T77] __msan_warning+0x1b/0x30 [ 323.220243][ T77] nci_ntf_packet+0x26b2/0x46c0 [ 323.225467][ T77] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 323.231778][ T77] ? sk_skb_reason_drop+0x13f/0x440 [ 323.237263][ T77] nci_rx_work+0x403/0x750 [ 323.241958][ T77] ? __pfx_nci_rx_work+0x10/0x10 [ 323.247154][ T77] process_scheduled_works+0xb91/0x1d80 [ 323.253058][ T77] worker_thread+0xedf/0x1590 [ 323.257969][ T77] kthread+0xd5c/0xf00 [ 323.262241][ T77] ? __pfx_worker_thread+0x10/0x10 [ 323.267585][ T77] ? __pfx_kthread+0x10/0x10 [ 323.272381][ T77] ret_from_fork+0x208/0x710 [ 323.277315][ T77] ? __switch_to+0x53d/0x790 [ 323.282132][ T77] ? __pfx_kthread+0x10/0x10 [ 323.286943][ T77] ret_from_fork_asm+0x1a/0x30 [ 323.292120][ T77] [ 323.295420][ T77] Kernel Offset: disabled [ 323.299809][ T77] Rebooting in 86400 seconds..